Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/462d2d9c-7f1e-3010-b782-8f459f7989f1.roa
File: 462d2d9c-7f1e-3010-b782-8f459f7989f1.roa (raw, json)
Hash identifier: kzTlNAXfPPniuRoNv/KLM32dhkL8W6DKg+qtkJ9Wa9Y=
Subject key identifier: 3E:3C:7C:EF:FF:C1:C3:22:42:F8:C6:40:CD:9C:48:D0:9D:51:8A:B5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583FC4EBD0E9BD93FA9791DC0980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/462d2d9c-7f1e-3010-b782-8f459f7989f1.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Sun 02 Feb 2025 05:00:00 +0000
asID: 15169
IP address blocks: 142.250.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c4:eb:d0:e9:bd:93:fa:97:91:dc:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2025 GMT
Subject: CN=d40f4919-e305-41ea-a666-244d6cf59ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:07:77:db:71:81:fe:14:70:84:7c:d7:6d:
5f:e4:9c:2c:46:c7:1d:46:9b:fd:cf:09:e9:67:a5:
56:44:ac:51:9b:4c:d6:5a:48:56:71:2b:41:27:d0:
58:82:d3:66:64:ef:6f:59:8f:fb:b4:2d:86:5a:d6:
6d:8a:f9:db:4a:ea:05:7b:05:c6:b6:d0:28:54:01:
87:c1:7e:a9:66:62:90:e4:0e:d6:2f:90:62:a2:98:
b1:91:da:62:68:43:5b:e4:48:46:12:94:46:40:1d:
00:02:08:9d:a5:91:0b:89:e7:65:58:c4:12:af:83:
2a:36:7f:2d:d0:80:b6:a9:54:78:5e:dc:f5:31:a1:
76:15:a4:33:1c:2b:f9:c3:1d:81:ef:c7:44:b8:66:
12:aa:80:b4:6d:db:bf:76:42:8f:c1:91:58:05:c0:
7b:42:78:ff:3d:b9:61:23:bd:3e:42:7b:dd:fa:81:
0a:f8:a6:13:84:09:a2:ad:92:fd:4c:76:a9:fa:6d:
23:61:fe:5e:55:7f:94:78:42:06:70:14:8a:20:70:
72:aa:b9:8e:4f:f5:e7:cd:2d:de:39:fe:40:69:4a:
40:c6:90:b6:78:c4:ba:b3:6d:30:95:d1:23:de:f7:
0a:7c:e4:57:09:f4:26:39:f4:f6:a1:e1:3c:97:2b:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:7C:EF:FF:C1:C3:22:42:F8:C6:40:CD:9C:48:D0:9D:51:8A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/462d2d9c-7f1e-3010-b782-8f459f7989f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f3:e8:11:47:ff:b5:7f:ac:22:2c:5d:37:4b:1c:ce:d3:7b:
f3:37:3a:6b:95:a8:bb:51:88:f7:6c:47:bf:7b:37:1e:bb:76:
40:98:4e:75:83:89:ec:c6:8a:ae:dc:e9:16:97:76:6c:7b:85:
01:ba:3c:b1:e5:f5:57:65:61:b8:55:e6:3d:32:38:a1:50:be:
ac:64:53:cf:88:84:2d:d0:b2:72:a8:08:53:b4:f1:68:d2:f1:
72:e0:3d:14:66:41:9d:da:05:58:24:c3:fa:58:75:18:15:18:
9b:78:5d:86:a4:22:85:96:b5:92:c1:33:f2:6e:21:91:08:ee:
02:db:b3:e6:1e:04:01:5b:fa:df:18:44:89:12:eb:3b:d9:f1:
e1:fe:d1:f0:1c:f4:69:2d:f1:e8:e9:43:c5:1d:d1:f7:6a:31:
49:68:33:af:92:7b:35:c9:61:71:e6:ff:f6:18:82:f0:8d:0c:
70:01:5c:d5:28:41:94:1b:04:c4:99:65:e9:59:9d:1f:00:1b:
21:fb:86:13:13:81:1b:88:8c:84:a3:e2:e1:ea:a0:97:d7:28:
d6:9e:8d:22:75:5e:0e:23:97:97:88:a0:23:70:77:c3:6f:a3:
6c:c7:89:42:e4:94:1b:04:72:f0:3b:48:00:35:3f:80:c0:ae:
8f:e0:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:00:48 2025 by rpki-client