Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1fe90639-5bef-3aaa-aea3-1e14e8afecbd.roa
File: 1fe90639-5bef-3aaa-aea3-1e14e8afecbd.roa (raw, json)
Hash identifier: xJSqJUcVqcTR2Jicl+UwmeOX4Ih3vuoyeAWPpfPIvhw=
Subject key identifier: D8:FD:BC:E5:69:65:6E:83:6C:99:1C:89:42:5A:E8:20:B9:78:C6:20
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1352BD85AB4FECBFD4C6F2
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1fe90639-5bef-3aaa-aea3-1e14e8afecbd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:52:bd:85:ab:4f:ec:bf:d4:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c9bfeed1-2c65-4ef0-93d7-dcdb0e0715a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:34:75:c6:a1:cb:96:02:20:3f:52:71:32:
34:88:26:8b:1b:47:32:f8:7f:e2:20:29:7d:fb:a0:
04:01:d1:42:ba:ed:fb:93:6f:c1:4a:2d:41:78:52:
98:9f:4e:e7:5c:f8:f7:e7:d6:98:c1:b5:14:df:8e:
92:27:a9:87:e3:d1:58:46:69:44:31:76:22:ab:73:
ac:1f:6a:c2:f5:c0:55:39:bb:c5:18:04:fa:76:8f:
fc:d5:4b:f3:e5:a9:ea:c8:81:e9:28:c4:ef:59:48:
39:e7:c9:c6:81:0a:81:f4:42:5d:b4:4e:6d:dd:33:
99:0f:3f:e0:a0:28:7e:a4:18:ab:98:c9:dd:7d:5f:
c3:7b:a1:75:9f:ec:4f:4b:13:6b:67:06:3f:47:51:
8b:63:09:ce:c1:ca:00:07:44:01:b2:a9:97:11:48:
ac:d6:93:00:85:9c:b4:2d:7b:1e:db:89:20:ef:70:
92:55:d1:ff:85:35:aa:88:b6:df:28:26:0b:52:1b:
94:bd:8f:e8:32:64:f3:87:2c:79:c8:b8:65:ac:06:
b6:83:90:a6:69:1b:a1:96:56:21:d5:36:22:39:67:
83:63:56:e4:c1:5c:c4:fa:29:4f:b9:c4:4b:8b:a9:
b3:13:e2:e8:5b:55:7d:27:ac:ed:f5:c7:03:8c:06:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:BC:E5:69:65:6E:83:6C:99:1C:89:42:5A:E8:20:B9:78:C6:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1fe90639-5bef-3aaa-aea3-1e14e8afecbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:4d:0f:4f:4a:54:f6:d3:42:7d:24:d9:d9:c6:74:14:53:d2:
90:df:dd:10:88:cc:ab:17:fd:d7:7c:b5:18:63:50:d7:ea:1e:
d9:a0:ea:3c:f9:6b:6a:ce:2b:3a:17:4a:b6:02:47:a6:e3:87:
48:c4:77:c9:bd:98:76:53:d5:f0:d3:58:17:e8:da:e7:2b:22:
4e:ba:aa:07:22:c1:d2:36:09:3a:1c:10:d2:d1:37:9c:39:db:
1e:44:a2:40:3b:9e:a8:f9:fe:88:25:dc:cf:e0:ca:50:4e:cd:
50:4f:61:1d:f0:af:a4:0e:37:8f:37:9c:06:de:e6:93:d1:f2:
3b:d0:ff:9d:bf:0b:68:45:22:b4:2a:87:dd:04:84:25:95:e9:
74:80:c8:9b:49:de:13:2e:eb:7f:b1:b3:eb:5a:a9:5e:41:e4:
74:08:e1:4e:3c:3d:66:04:57:5a:a8:94:bf:df:bb:43:4e:26:
3a:48:93:a5:21:27:99:9a:37:1f:30:70:f3:21:89:71:b7:39:
61:ee:8d:08:de:fa:a3:5a:1f:7e:1e:1e:5a:cf:6e:ea:b0:11:
46:2a:7f:e0:87:39:86:7d:da:a1:ae:e6:90:b3:da:15:c8:6d:
68:35:57:fc:e4:af:11:b8:9f:8d:33:af:da:e5:a2:4f:7a:74:
00:3c:49:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKE1K9hatP7L/UxvIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzliZmVlZDEtMmM2NS00ZWYwLTkzZDctZGNkYjBlMDcxNWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl400dcahy5YCID9ScTI0iCaLG0cy+H/iICl9
+6AEAdFCuu37k2/BSi1BeFKYn07nXPj359aYwbUU346SJ6mH49FYRmlEMXYiq3Os
H2rC9cBVObvFGAT6do/81Uvz5anqyIHpKMTvWUg558nGgQqB9EJdtE5t3TOZDz/g
oCh+pBirmMndfV/De6F1n+xPSxNrZwY/R1GLYwnOwcoAB0QBsqmXEUis1pMAhZy0
LXse24kg73CSVdH/hTWqiLbfKCYLUhuUvY/oMmTzhyx5yLhlrAa2g5CmaRuhllYh
1TYiOWeDY1bkwVzE+ilPucRLi6mzE+LoW1V9J6zt9ccDjAb4ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNj9vOVpZW6DbJkciUJa6CC5eMYgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZlOTA2MzktNWJlZi0z
YWFhLWFlYTMtMWUxNGU4YWZlY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9ND09KVPbTQn0k2dnGdBRT0pDf3RCIzKsX/dd8tRhjUNfqHtmg6jz5
a2rOKzoXSrYCR6bjh0jEd8m9mHZT1fDTWBfo2ucrIk66qgciwdI2CTocENLRN5w5
2x5EokA7nqj5/ogl3M/gylBOzVBPYR3wr6QON483nAbe5pPR8jvQ/52/C2hFIrQq
h90EhCWV6XSAyJtJ3hMu63+xs+taqV5B5HQI4U48PWYEV1qolL/fu0NOJjpIk6Uh
J5maNx8wcPMhiXG3OWHujQje+qNaH34eHlrPbuqwEUYqf+CHOYZ92qGu5pCz2hXI
bWg1V/zkrxG4n40zr9rlok96dAA8SQM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:55:57 2025 by rpki-client