Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa
File: bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa (raw, json)
Hash identifier: /SVs9yY5TsAohRwB1gOe3hDnqR5weJQosRKOZUqZ8u0=
Subject key identifier: 06:A3:DF:D7:2F:32:20:A9:6D:EB:54:8D:AA:B8:24:F1:CB:65:D4:B3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12AFB0DD7EDA905354B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.251.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2a:fb:0d:d7:ed:a9:05:35:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=0f4e6d1c-06ec-4b23-9519-3a96d7ff5a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:96:a6:5d:77:61:e8:30:09:7f:f1:9c:9a:
2a:bb:b6:ed:21:ec:05:31:4e:81:60:cb:87:4a:dc:
2d:d0:ae:65:6a:9d:2c:6b:2a:ff:d9:f6:e1:eb:42:
d7:02:18:f5:85:15:c5:3d:ae:62:06:42:19:e8:e5:
f0:1c:ce:23:74:fd:7a:0b:35:20:88:80:e4:a4:e2:
f7:8d:01:e1:39:ed:d4:f5:0d:0f:9d:8f:fa:a4:25:
79:49:a3:18:d5:9d:fd:3e:ee:eb:30:8b:03:08:d0:
a8:bd:66:50:de:fa:6f:df:74:a0:ea:4a:80:70:43:
96:82:cc:e6:68:42:9e:c2:dd:25:f3:f3:ba:5f:98:
a8:b5:63:23:6e:ab:42:01:88:11:83:7a:e3:9d:b8:
3c:30:30:dd:95:77:bb:1d:32:74:55:ff:8a:21:3c:
8a:d4:9d:8b:03:f6:61:2e:44:05:20:cc:b2:57:21:
35:25:0a:f3:4f:9a:4a:fe:fd:37:4c:02:48:cf:96:
e7:31:fb:06:3a:b1:3a:a4:54:e9:59:ff:96:88:c5:
e9:39:40:9b:1c:a1:a5:d9:89:d2:d7:b2:b4:84:ab:
d3:08:23:14:86:c7:06:d9:f1:ea:8d:63:f7:f7:b7:
f1:9e:9b:41:ab:27:cb:c7:5b:0d:69:ab:73:23:c2:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:DF:D7:2F:32:20:A9:6D:EB:54:8D:AA:B8:24:F1:CB:65:D4:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c8:ad:f0:93:f3:bc:61:04:5e:38:75:01:c6:e8:84:ab:5a:
95:9d:1c:ad:f9:c6:de:b6:89:3f:46:68:4b:d0:d9:71:9a:00:
8f:cf:7d:7b:74:04:b8:2f:88:b7:8e:a9:2e:11:d6:43:81:c3:
8a:8b:15:69:19:21:5f:4e:35:66:51:2a:6c:d2:d4:ea:12:a5:
72:6f:72:2a:01:aa:e3:9c:b5:57:69:d4:c2:da:ea:0e:b9:27:
be:59:61:1e:24:33:4d:2b:34:95:b4:b2:17:0b:5f:36:d8:c3:
d3:97:43:36:3d:79:f4:01:16:38:d5:6f:e9:81:20:23:db:c6:
62:0b:1d:f5:3b:f4:a6:1f:51:9e:1b:49:cb:5e:47:61:91:ae:
41:bf:83:33:9a:1e:f4:69:47:31:a3:7e:d5:b9:5f:a4:b9:c4:
98:d2:98:1e:69:d1:92:03:df:4d:7c:a2:b2:57:3b:ef:94:8c:
99:82:6b:0a:5f:42:dc:a5:1b:75:16:70:fe:26:a4:64:22:a9:
b1:78:78:f0:74:9f:a7:c3:0f:68:04:3f:b6:55:d5:fe:6f:f6:
87:26:7a:d4:22:82:17:d0:11:be:21:c8:3a:b3:90:be:0d:3e:
05:ca:7a:15:99:ce:1c:bb:0a:8a:ab:ad:57:93:ce:1a:32:45:
9a:79:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:29:32 2025 by rpki-client