Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf6d8fc3-29b8-3e89-9003-fbad7b51ed02.roa
File: bf6d8fc3-29b8-3e89-9003-fbad7b51ed02.roa (raw, json)
Hash identifier: wJkBxskMTDd/aWJQrFRA7mKDlQ6w85W+8yOdBQL2fdo=
Subject key identifier: FD:8A:08:18:5D:70:8B:F7:36:0A:CF:DC:B8:BB:C0:1B:81:C3:B4:63
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A16FCB79A17D977AB528740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf6d8fc3-29b8-3e89-9003-fbad7b51ed02.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:fc:b7:9a:17:d9:77:ab:52:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3133ed0a-d469-47bd-8098-837fdf5333e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:06:ea:1b:fc:a6:e8:6e:23:7d:5f:53:7d:
fc:76:6e:61:64:f0:cb:b8:a3:1d:ed:bd:6e:22:fd:
dd:d3:fa:ff:45:e6:ba:03:4b:c8:22:1d:45:df:53:
b4:24:de:53:a3:98:32:85:e3:22:2e:0d:50:19:1b:
14:92:f0:8f:af:ab:38:b5:89:e6:49:96:87:16:7d:
0b:34:ab:e8:dc:99:f4:f2:d7:03:a5:bf:3b:2f:dc:
c5:ff:74:f8:f9:90:24:6b:bb:b3:a0:34:b0:8b:33:
5c:a6:98:8d:a6:a6:72:7a:da:06:a2:f3:64:05:b6:
7d:52:b1:5b:2c:e9:f3:59:38:b7:39:9e:e2:d1:66:
b4:c2:4c:7c:b3:ce:8e:70:23:ff:47:45:f6:a0:71:
bd:4f:26:98:7f:7f:4b:1f:64:4d:82:00:d4:3c:7f:
d4:c3:2c:ab:74:e4:46:37:74:63:11:71:64:e0:56:
6a:12:0c:d4:a8:92:64:5c:19:1f:ab:00:8f:be:64:
a4:4b:1e:ef:db:ee:0a:1d:8b:32:04:51:5b:d4:9f:
c3:3b:94:a8:ae:1e:b7:c3:e0:d4:57:08:5d:94:9e:
87:d5:6b:86:77:ec:16:39:4c:06:37:96:92:46:d6:
3a:4e:86:36:91:dc:62:54:b8:0d:bc:1f:f2:65:9e:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:08:18:5D:70:8B:F7:36:0A:CF:DC:B8:BB:C0:1B:81:C3:B4:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf6d8fc3-29b8-3e89-9003-fbad7b51ed02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:1c:1f:6a:38:7e:18:51:1d:80:f0:db:41:cc:55:9b:cd:07:
2d:13:2c:de:33:bc:0e:87:6f:96:68:03:ac:7a:47:0a:0a:19:
83:3f:f4:f7:8b:3d:82:f1:3e:33:bd:24:e3:a7:16:30:20:c9:
60:72:e4:a0:8b:82:63:a4:09:5f:13:3a:86:a4:40:6f:00:60:
cf:38:a9:9c:59:dc:96:3b:f4:51:92:46:30:bc:ef:8f:d8:0d:
9f:a3:ea:3d:59:06:c3:e7:ad:91:0e:30:91:d3:96:70:73:b4:
a5:2a:5c:20:bb:49:a7:f7:4b:5d:96:42:47:de:a2:06:80:b1:
90:d0:74:08:f6:e3:d7:6e:c0:38:20:af:ab:6a:14:be:cb:7f:
b2:0d:7c:4b:e6:b8:07:5f:fd:1f:69:f7:9d:78:6d:0c:74:52:
6d:89:ff:77:c1:6a:d6:c3:99:96:2c:78:40:1c:2d:21:68:7e:
60:c2:3a:e6:bc:4b:bd:f7:a1:6d:29:c4:91:ac:97:7d:78:1f:
e4:81:9b:37:17:b0:26:b0:94:58:1d:9a:77:a9:03:be:b8:ef:
9f:67:05:de:8e:b6:bb:b8:74:3c:45:af:86:e5:fd:e6:34:57:
af:07:85:90:62:a1:ff:23:c8:00:1e:3c:32:fb:64:79:16:53:
c4:ca:37:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:49:16 2025 by rpki-client