Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa
File: 9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa (raw, json)
Hash identifier: ffDakDr3k5WLXbsIsQRWDLvpXgP0vh84PewLhGQq+dk=
Subject key identifier: 72:CE:0A:CB:FD:22:27:BE:89:A9:84:16:96:F8:D5:F9:C8:17:59:9C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858487A2084A93AC41DBB6F2BA080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 142.251.123.0/24 maxlen: 24
142.251.124.0/24 maxlen: 24
142.251.125.0/24 maxlen: 24
142.251.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:84:a9:3a:c4:1d:bb:6f:2b:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=e1a06eb1-23af-486d-9510-a394da773554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:0a:bf:5b:dc:45:53:75:88:fe:53:2f:ad:
31:10:3b:7b:c4:b8:b7:7c:1e:8a:ab:3d:78:c8:83:
c5:bf:8b:ee:a6:98:b1:e4:58:c2:41:57:75:e9:61:
20:15:59:e0:d3:d4:d3:9e:b4:f1:85:e6:c7:7a:6b:
72:b6:96:95:3c:c2:b0:ae:91:79:49:2b:d5:60:3b:
11:08:05:0a:b4:58:10:f6:d4:04:fd:22:2a:d1:fc:
54:62:12:58:c6:a1:f6:25:b1:a1:be:9a:73:28:8a:
fd:48:39:bb:4e:a2:b9:a4:a1:04:26:31:8c:c5:57:
aa:0d:d3:3d:e7:fd:41:d5:67:81:9c:42:ab:12:38:
26:fb:9a:08:82:ec:97:42:b2:12:82:bb:29:aa:21:
8c:2a:0b:7c:b7:30:b9:e3:04:2d:14:f5:32:8a:a0:
9d:6b:3c:86:68:e5:84:e7:8f:be:dc:94:ff:a5:4d:
04:1f:70:b5:f9:e1:4a:b1:db:b7:5e:2c:02:df:ac:
ea:3c:a7:6b:86:62:c4:ae:4f:c9:06:c3:7d:27:7d:
fa:88:4e:dd:05:7a:2f:23:ae:cd:69:1b:50:3d:97:
1e:c8:8f:cf:51:3f:30:51:df:93:2d:32:11:cf:a4:
60:26:77:33:b4:c7:ff:7a:b2:20:0e:38:4d:f0:76:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:0A:CB:FD:22:27:BE:89:A9:84:16:96:F8:D5:F9:C8:17:59:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.123.0-142.251.126.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:48:33:31:85:35:f2:b1:20:8f:95:7e:8e:c4:b8:b9:0a:1a:
38:d0:5f:16:06:80:05:03:b1:ae:9c:c0:6a:14:7d:be:1f:01:
a7:66:c4:f8:3d:57:2a:4c:4a:cb:c2:dd:2e:95:5c:1b:60:88:
ab:33:47:5c:5b:29:68:f0:02:d7:31:d9:d1:6a:e2:bb:c0:ee:
c9:cf:5a:09:21:9f:14:0f:f7:10:5f:5e:51:90:46:b0:51:7a:
dd:45:a3:50:36:a6:2a:cb:4b:3b:14:89:9e:2f:ad:9d:4c:08:
26:0f:ee:0b:8e:c7:1e:5c:fe:5e:af:cf:2b:3f:fc:c9:f8:b3:
78:e6:97:59:8d:e0:01:e1:da:66:1c:b2:e8:75:a6:59:04:6c:
f1:76:15:76:8c:e0:06:96:53:b3:ba:eb:8c:2c:cc:c8:b3:1d:
7a:29:93:6e:bd:bc:e3:5c:a0:06:19:14:a0:1a:60:af:b5:da:
fb:94:cf:b1:c4:0e:26:2f:07:d3:aa:19:99:70:d9:8c:ec:de:
9d:c2:07:e4:c7:27:9d:10:68:b1:e1:62:90:3f:dc:aa:a2:aa:
b6:f9:9d:a0:20:82:63:70:74:06:b5:ed:26:55:d4:83:1a:d6:
69:f1:d2:9f:2a:37:26:59:e0:42:fe:56:6a:49:06:7d:94:28:
32:c7:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:34:32 2025 by rpki-client