Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa
File: 637ba1ea-5a50-309e-a538-fe7efd71cc38.roa (raw, json)
Hash identifier: g0yvpnazXiuWK+LR0hk+2Hgqe+PcY6JGC9Ljf/ZK/DQ=
Subject key identifier: D1:DB:64:EC:F7:0D:BD:B8:06:21:F8:A8:1D:1C:B4:B4:7C:FE:48:23
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12717C473EEE477E54580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.251.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:27:17:c4:73:ee:e4:77:e5:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=a284fcaf-cded-45dc-aec9-f61ae7f1bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:88:e7:1c:ab:56:2a:68:e5:92:bc:f5:f9:
5a:ad:88:b0:bf:80:29:d2:1c:63:24:84:a4:02:4c:
37:ed:73:40:a6:c0:06:40:64:a7:a1:66:fb:96:c2:
bd:69:d0:fd:8a:ce:91:ae:dc:46:d8:a8:7f:f7:d7:
4b:e8:4c:8b:73:03:09:79:d5:a1:16:4c:e3:91:83:
81:3f:c8:58:db:a3:85:b6:a0:9e:73:5c:a4:e5:20:
d4:57:90:e7:d2:96:53:b3:9a:a5:99:37:fb:a3:55:
f5:62:71:84:ad:4e:78:50:d4:61:15:26:9b:3e:c0:
1f:71:49:c0:ad:84:f9:53:01:6c:78:8e:65:e7:20:
63:c6:bd:07:11:c4:83:bc:c7:03:cd:8b:26:26:91:
df:7e:00:63:53:d2:96:f6:2c:6f:c8:e1:78:6c:16:
b3:4d:a1:3f:1d:32:30:3b:d6:7d:e3:d7:52:9f:67:
40:88:a0:e2:fd:f7:32:6b:6b:89:5a:f6:5c:1a:66:
bd:77:43:d4:d1:3a:95:68:3b:81:94:a8:bf:fd:c9:
e9:a8:c4:6f:b4:c1:39:68:06:69:00:41:c6:62:82:
13:f0:b1:80:86:1a:a5:af:cb:96:3a:b3:99:07:6f:
70:6a:c7:c0:18:50:c0:92:5d:e3:15:0d:aa:fb:bb:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:64:EC:F7:0D:BD:B8:06:21:F8:A8:1D:1C:B4:B4:7C:FE:48:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:1f:ac:1e:e6:24:94:39:b0:e5:cd:43:bf:f8:d6:bb:03:19:
7b:d6:3b:10:f0:77:db:61:18:d3:1c:4a:5a:c9:31:f6:94:11:
8b:c5:dc:85:0e:14:dc:a4:a8:3e:a4:fe:54:c5:43:d9:7a:b6:
ad:1d:7b:4d:80:68:fb:71:d2:ae:0c:c3:c6:ec:6c:c1:27:4e:
a4:82:7d:f2:29:a7:6d:0a:23:eb:3e:e3:4d:b6:79:2d:1a:e2:
37:5b:bf:aa:73:70:73:40:73:3a:e4:e9:9f:bd:7b:13:1e:88:
59:fc:8d:6f:5f:e4:5e:50:0c:dd:ae:5b:4b:79:c2:85:41:e5:
71:54:a1:5b:c3:33:cd:90:9e:f8:c3:a0:bf:e3:d9:3d:d0:2c:
41:50:5d:d6:c9:8a:87:1c:ac:56:09:16:16:23:b4:da:5f:cf:
e2:60:04:98:b8:cf:8d:b3:a5:cd:fc:6a:af:c2:10:8a:e1:36:
8e:00:3c:2f:32:73:12:3c:fe:23:ee:9d:a2:62:d6:7e:90:85:
6e:af:a2:44:74:1e:d9:1a:d2:e5:54:97:5e:43:a6:18:d6:0a:
bb:6f:f4:5b:f8:bd:72:a2:17:75:aa:b5:a7:d6:01:04:14:69:
c4:40:da:4c:ca:1d:6f:c9:86:81:b1:ef:e1:1e:fb:8b:49:96:
ee:40:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:54:36 2025 by rpki-client