Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d917417-38e1-3644-8592-3ec865cce6fc.roa
File: 1d917417-38e1-3644-8592-3ec865cce6fc.roa (raw, json)
Hash identifier: 2Dqm/euJIMpSfolf7WYj0M2CkeL0wAH3nOTM5mLUbcI=
Subject key identifier: C0:EC:BA:AA:28:F2:29:CC:2C:E2:54:42:00:2F:0F:B9:ED:E0:6B:53
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58180DDB5FF57149AD96B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d917417-38e1-3644-8592-3ec865cce6fc.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:80:dd:b5:ff:57:14:9a:d9:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a3758a95-dd98-4257-a317-3a65e1483505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:f9:8f:0b:fe:85:92:3e:f2:e2:45:4f:3c:
ae:b3:fa:9b:cc:e8:ec:72:37:22:52:6c:c1:7f:cc:
ef:fb:bb:dd:f0:bc:11:33:46:fe:7e:a6:fd:0e:3b:
76:2f:0b:a2:46:de:02:85:34:9b:40:cf:54:80:c6:
fb:9a:92:69:59:39:fa:0b:71:66:2b:b3:cc:12:35:
d3:16:5f:f1:4b:b5:30:88:49:1d:bf:b4:74:cb:dd:
8c:e9:f5:35:7c:f1:1b:25:b4:1d:84:31:dd:8f:a5:
9d:e0:7c:04:08:ea:a4:36:34:16:d2:49:98:35:44:
5b:04:ca:e9:6f:2b:0d:a6:0d:4f:a2:78:9b:52:75:
87:6d:04:4b:db:42:93:1f:32:72:18:f6:a8:c3:39:
9f:56:e4:87:6d:01:f1:aa:c7:20:0a:9d:8a:75:12:
c2:c3:7b:e7:b4:b5:78:3e:22:a4:fc:7c:e0:69:b4:
32:82:e6:9e:15:98:9f:9d:d5:44:b3:f4:c7:15:55:
b4:5c:af:52:b7:be:92:fd:df:05:00:e3:0e:9b:af:
6b:ff:f5:20:93:22:b5:76:09:83:49:8d:15:fa:8f:
c1:56:96:bf:60:e2:e1:13:85:28:38:26:5c:1d:55:
e4:35:b4:4a:2e:a2:de:e9:22:78:39:62:e6:d7:5d:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EC:BA:AA:28:F2:29:CC:2C:E2:54:42:00:2F:0F:B9:ED:E0:6B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d917417-38e1-3644-8592-3ec865cce6fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b2:50:40:80:58:0e:78:5a:4e:05:42:fc:4c:26:c6:b7:94:
b7:a3:fd:d2:d5:2a:34:75:07:22:cc:b5:28:a1:3b:49:5d:d1:
f6:4d:60:c9:d9:84:e7:b4:dd:17:67:fd:80:eb:48:54:13:9d:
99:73:d2:fd:53:b0:d0:68:06:b6:d5:b6:8e:c8:8b:3c:ab:13:
2c:1b:a9:77:26:38:8d:0b:6e:4b:7f:5a:41:5c:91:82:cf:65:
54:e8:4e:1f:f6:6c:00:78:75:7b:5f:19:e4:0c:73:e3:18:38:
2a:93:64:50:99:2f:43:27:f2:0b:58:88:03:5d:41:ae:4f:ac:
5b:88:26:24:26:40:04:8c:2c:25:4c:62:cc:a1:27:2f:ae:7a:
17:e5:6c:af:86:37:ef:17:d7:03:28:03:ab:55:95:0e:61:51:
9b:ef:cf:c3:00:5d:ff:6d:c0:cb:fc:f5:f3:d6:0a:52:5e:66:
72:65:b3:ef:ae:26:8b:c9:21:6a:2a:bc:0a:34:61:b1:53:5a:
11:00:28:1b:21:56:61:21:b6:99:83:b8:25:97:5e:fa:04:ad:
93:d7:12:01:7e:3c:d3:23:5c:2f:7b:95:09:a4:99:68:de:47:
b8:c9:a4:66:d0:3f:53:dd:b9:91:e0:3d:b5:6a:93:ab:23:c6:
36:04:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:56:06 2025 by rpki-client