Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa
File: 4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa (raw, json)
Hash identifier: BR+arZZ794ogRJzpPTSFkEV2Iv9A5HNER2LZxGCBpac=
Subject key identifier: 99:07:D6:27:26:C8:BB:0A:DE:DA:1F:A2:5D:D4:F6:EF:C4:6C:61:14
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817B749FCB2244E69AEC40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.251.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7b:74:9f:cb:22:44:e6:9a:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d37346f0-2567-493a-8c26-28dc62276c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c9:a1:48:49:29:0b:1e:84:86:05:bf:d2:1b:
37:0a:a7:01:75:26:e2:ea:20:4f:3e:29:52:02:5b:
58:fe:6f:1e:75:78:94:b8:8f:da:34:48:4b:2b:43:
cf:c4:ae:39:fe:db:f4:32:fc:a6:15:c3:b3:65:96:
22:45:a4:f8:7b:0f:1e:e1:61:b9:50:12:d4:09:b0:
38:86:9c:4a:c6:6c:10:c7:49:5c:df:f8:25:18:5b:
73:a7:2a:98:18:f5:af:66:a5:02:89:5b:04:a8:d4:
62:13:46:7d:23:8a:04:4e:d0:c3:cb:8a:07:e0:b0:
31:0b:be:61:9e:6c:e2:6c:98:9b:e0:3c:28:59:19:
48:8e:d0:61:25:c1:10:9e:d2:ea:81:1c:9e:32:67:
44:55:b2:fb:d7:ca:58:24:96:99:ee:80:40:f1:4b:
01:64:20:e2:97:11:57:ec:61:17:1f:dc:5b:ee:bb:
13:b7:52:42:4e:c5:c5:43:92:b3:75:9f:f9:58:ea:
33:32:0e:b5:c0:55:27:67:98:c3:ec:ba:1a:2c:ab:
88:b1:05:b0:59:6a:59:ed:e4:74:61:32:e4:25:f4:
eb:c3:84:8e:aa:de:0a:70:d1:30:f5:3b:d3:56:ab:
ef:8b:b2:d1:27:0a:f5:1c:fd:37:fb:c4:db:84:20:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:D6:27:26:C8:BB:0A:DE:DA:1F:A2:5D:D4:F6:EF:C4:6C:61:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:19:98:7e:10:30:78:3b:5c:6a:86:f4:e1:72:01:4e:b7:eb:
c0:54:04:7a:af:28:de:a0:e8:d3:2b:3d:34:57:55:44:61:4b:
1f:a8:a1:c8:ce:75:a5:2d:54:4f:e0:fa:d6:21:a4:10:4c:01:
e9:c9:75:94:f3:00:97:0f:2e:36:89:a2:66:49:c8:a1:77:9a:
a6:cc:24:bd:19:43:93:36:c9:fd:1d:ae:31:e9:d2:79:62:ea:
ed:b9:0f:29:97:38:11:38:cf:9c:ec:f2:d2:e7:e2:29:33:22:
06:2b:a1:c2:d7:88:d0:ce:67:53:04:47:a1:7b:33:fb:dd:49:
ee:67:8f:e8:d0:61:d6:00:3c:94:12:5c:6a:94:7c:42:d3:37:
eb:ac:9e:78:9e:e6:9c:f0:c6:2c:9e:b8:d4:fc:93:1a:57:7b:
2b:b4:98:62:4e:ae:37:a8:e4:d7:b9:6a:46:72:65:ab:91:01:
2b:4c:50:8e:56:10:bf:1d:d2:3f:06:4d:83:e4:c5:f5:5b:ff:
11:ae:5d:cd:eb:0d:1e:7c:d8:a4:76:1c:29:bb:7c:04:d3:93:
02:d9:dc:60:27:df:f3:7a:af:f7:96:b6:86:05:df:e6:5a:ea:
25:73:f1:c7:55:19:07:0b:8a:03:be:b6:35:d6:49:9c:99:e4:
73:86:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:04 2025 by rpki-client on console.sobornost.net