Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa
File: 962bf7de-0c9c-3eff-a5b5-952421fda78c.roa (raw, json)
Hash identifier: e8Tk3B2AzdDYh1ej0nOb40IRqJ7z2tgx5j/5uwve9/I=
Subject key identifier: 58:81:7D:7F:A4:4B:B4:58:B9:41:E3:51:BE:1F:FF:E6:DA:09:93:CA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817C9622F11086A6F1B600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.251.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7c:96:22:f1:10:86:a6:f1:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ee0b34f9-8ddc-487e-8e0b-54b7013fc825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:22:3d:16:bc:d7:e3:8c:b4:58:db:e3:7b:
01:0c:03:08:cf:7e:d0:2a:2f:ed:4a:10:d4:e4:0a:
65:a9:b3:3a:6c:5f:d2:9b:4e:4d:69:56:24:f5:73:
a3:ec:f2:de:b8:02:ba:dc:7c:70:94:af:65:57:c3:
67:b0:5b:06:75:23:42:bf:31:d5:08:c3:84:14:37:
fa:e7:84:23:6c:56:f2:2e:b8:79:8a:f9:ae:25:04:
93:c8:18:cf:9f:f3:10:e2:84:23:2b:98:c7:d2:59:
f4:9c:83:65:64:72:54:72:9f:86:56:b8:93:71:06:
a5:4f:27:f2:e4:54:14:52:da:8e:26:a8:41:eb:b8:
6a:94:c9:a9:bb:25:3e:1b:44:64:93:36:9c:18:61:
19:91:e2:6a:4b:31:25:5d:33:d7:25:69:fa:d2:d2:
98:64:6a:16:ec:50:a6:12:1e:6f:15:f1:d7:b1:7d:
67:0d:0b:99:22:76:b4:99:bd:e5:c5:61:47:5a:0c:
5b:ba:51:fd:3b:e3:20:38:21:e2:23:6a:77:4f:c5:
21:3b:63:cb:30:87:01:e2:5b:99:af:c0:ef:7c:88:
4c:45:93:f8:dd:da:91:95:d1:6f:0a:cc:99:e2:fd:
13:b5:52:c4:b4:9a:22:0a:30:89:c8:d8:24:75:87:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:7D:7F:A4:4B:B4:58:B9:41:E3:51:BE:1F:FF:E6:DA:09:93:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:3a:1e:3d:c6:d0:fb:e5:a0:91:33:eb:6d:2d:e1:92:04:ea:
80:e6:24:59:eb:bc:8b:ea:e8:28:0d:75:8c:b0:e6:fb:63:5b:
a2:2b:18:c0:ea:a2:6c:39:c6:ed:bf:d3:00:4b:05:0a:27:f5:
15:67:0e:8b:8a:8d:b6:87:9c:93:79:6e:a1:0f:66:1e:d1:dc:
be:f9:ce:91:64:15:ff:bd:44:8d:c1:67:1d:cc:98:b9:cb:0c:
10:ee:e8:49:91:54:b5:72:60:cf:48:ac:0d:9e:a7:cd:c7:e3:
d2:cd:b4:15:2e:45:27:05:8d:21:9e:6d:ab:fc:63:7e:cb:76:
3e:cf:8d:20:a0:c8:cf:22:dd:f2:d6:1b:c2:5b:aa:27:f9:05:
c9:77:f0:e8:e6:64:90:81:c9:7d:ab:68:34:85:0d:ef:d3:75:
58:9c:70:f3:24:28:b9:ee:d4:71:3d:af:6a:a1:fb:d1:56:e2:
de:ec:07:c2:72:81:2f:78:ae:81:cf:67:39:31:87:86:49:27:
59:5c:a5:8a:75:6c:e0:84:64:e0:8e:f2:0a:eb:c7:d7:e6:a4:
4a:77:e8:e8:ac:38:9e:7f:a6:34:11:a2:3c:d5:f9:48:fd:94:
65:02:29:bf:ed:a4:95:cd:4d:7c:8b:1a:81:ec:14:6b:4e:0a:
2f:76:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:28:30 2025 by rpki-client