Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa
File: 8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa (raw, json)
Hash identifier: zUOdOVbtgupYuJGJOkqiuJWNXk6pR+EX6Ly4BqKGBjs=
Subject key identifier: 27:C1:7D:1B:8D:C8:06:AE:D7:AC:CC:B4:E7:57:C0:57:8C:0D:F2:F5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858490E16D0815E7B1674FC3EB800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.251.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:d0:81:5e:7b:16:74:fc:3e:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=675f6615-1b59-4a94-a940-d27118c16d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:94:f8:1c:49:1b:7f:7f:41:77:81:d7:de:
f0:43:56:5a:e0:e7:42:45:18:bf:d8:d4:ab:63:6b:
8f:b3:f3:0c:21:4b:b9:ac:2f:cd:31:2a:fb:ef:c1:
15:51:d4:bf:62:8b:e2:90:6c:09:80:02:fb:4a:2b:
51:c3:7d:7a:ad:a1:d2:eb:3e:97:2d:10:03:93:7b:
57:4b:41:74:8b:9b:47:e4:a6:d6:bf:47:7a:0c:4e:
50:4a:8e:6d:43:44:6f:43:30:f3:00:f3:0d:88:88:
b9:b2:2f:59:4b:29:da:35:af:12:6b:93:3c:51:0a:
40:14:76:51:9a:40:93:4b:cb:30:bc:80:44:51:a6:
cc:00:bd:1d:16:74:7c:d6:f2:ed:20:3f:8b:e4:04:
f3:99:db:6b:36:32:93:86:b0:73:2b:cd:c4:1c:9e:
d3:d6:f9:2e:7c:f1:b6:90:9d:78:b2:e4:4d:3c:6a:
30:0c:df:c0:b8:da:e8:e8:09:1b:2b:1c:56:84:6c:
2b:8e:4d:38:01:4c:f6:f0:53:4b:a4:26:3b:63:f9:
3f:92:2b:ef:57:5d:23:37:a3:e1:63:27:65:7d:65:
b5:a9:0f:85:3d:a1:ad:7b:db:f2:4a:14:3c:0e:c7:
e9:56:31:62:35:83:24:e0:4d:87:6a:3a:5f:b9:22:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:7D:1B:8D:C8:06:AE:D7:AC:CC:B4:E7:57:C0:57:8C:0D:F2:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:34:3c:54:4a:19:34:b1:d5:fe:41:5c:40:a5:c9:0f:df:fc:
22:20:7e:ce:8f:72:6b:c8:1f:b4:99:63:49:51:a7:60:59:a2:
48:6e:c3:02:b0:4d:53:fc:38:72:ce:be:13:b2:c0:1f:82:a1:
bb:49:18:b2:bd:58:1c:19:63:c4:86:ef:f6:d5:04:2d:df:85:
37:39:a8:86:c4:79:7f:06:86:d5:30:75:29:af:86:e1:37:59:
97:cd:9e:ca:28:cc:23:ba:0b:35:66:28:81:eb:58:95:18:44:
6d:9d:2d:7d:81:39:c8:de:f2:8b:62:fc:18:22:db:05:c7:50:
79:60:5c:08:ab:32:0b:a6:e3:63:c9:a9:a1:0d:81:d8:c8:48:
4b:1a:ff:d4:d4:99:af:f7:d7:a1:72:35:6e:c8:b9:b5:fb:49:
06:5e:ea:ef:53:6c:3d:73:b1:b6:41:0c:07:64:be:ed:60:12:
36:a7:0c:15:fe:d0:b9:2b:0d:2a:6b:f5:48:d2:e7:cc:b3:ce:
a2:b1:6b:64:38:2c:73:31:80:0f:3f:dc:74:fd:28:47:65:ae:
e5:8c:ea:5c:44:77:ee:73:09:74:cf:0b:fd:42:d8:01:ee:25:
45:0f:36:51:b4:50:e6:7e:05:40:2f:a7:c2:1b:9b:57:16:ba:
82:e2:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:07 2025 by rpki-client on console.sobornost.net