Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa
File: 2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa (raw, json)
Hash identifier: 39219mtQ8OQUFyw6mRnaDNZoAbzwYFYM9Tzvf/3wxvw=
Subject key identifier: 3F:7F:10:06:8B:6E:EC:A2:85:E8:C7:9D:B2:D3:4C:63:BF:F1:BB:63
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12C86C961D3E0A4A384E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2c:86:c9:61:d3:e0:a4:a3:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=38b886c9-41a8-4cc9-a434-c48fe4c8c86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:d7:42:0d:13:fd:50:02:ac:56:7c:87:82:
f7:98:63:79:c0:95:f3:14:b2:cd:1d:5f:73:0d:f7:
72:51:4c:e1:13:e4:ea:8f:92:a2:14:9a:f8:c1:64:
90:a8:1e:35:64:8c:34:0c:bc:71:59:8f:3f:03:38:
7f:0a:62:90:61:dc:8a:94:d0:86:3c:49:2d:fe:7b:
27:bd:f2:8e:49:34:b3:84:1f:c6:72:b0:8b:71:56:
b9:09:e3:36:f4:61:7b:70:5c:72:97:aa:e6:08:5b:
fb:30:b8:52:e6:10:ad:3c:92:9c:e1:1f:cf:3a:ac:
c5:66:1b:32:d4:43:eb:07:ec:c5:89:70:88:4b:12:
ad:ad:bb:4f:93:ce:45:d2:80:05:60:c3:d7:7d:63:
cf:b6:bc:a0:37:d0:15:96:c6:a5:d0:0f:c0:72:5f:
c1:a9:2c:e4:3e:e0:57:ac:9c:69:7c:87:3c:e2:06:
c4:ac:64:a0:d9:f0:01:ba:d8:e2:81:18:58:68:04:
61:20:b4:61:9b:13:9f:55:17:64:25:17:89:fd:47:
90:ac:90:58:95:de:c0:88:cd:b3:d6:82:8b:4c:cd:
97:e2:0f:85:6d:95:62:33:04:a0:03:8b:b5:f8:c6:
e5:91:9c:38:5a:b4:b6:bf:73:5a:7d:34:23:93:98:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7F:10:06:8B:6E:EC:A2:85:E8:C7:9D:B2:D3:4C:63:BF:F1:BB:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:0c:1d:31:39:2f:24:cf:a2:ab:47:7b:a7:46:9e:c7:f4:44:
99:41:08:43:6f:5e:df:b6:b7:5e:3d:a7:51:0d:c3:27:e7:30:
58:9b:97:af:66:db:56:de:e5:d6:b5:21:c2:71:cb:71:98:cd:
e8:79:1e:df:36:d2:a0:f5:c3:5b:d5:2b:69:7e:ce:bf:97:ae:
66:5e:e8:8f:9a:fe:dc:7a:69:05:a3:e5:c4:17:c0:48:d8:34:
ff:81:25:87:2c:cd:19:03:96:a3:61:b8:2e:b5:09:4d:27:c5:
b5:03:5e:fd:82:44:17:84:4e:1f:4a:b4:62:76:49:a9:5b:27:
ac:05:c6:0a:80:e7:78:92:a9:f7:62:89:85:aa:2c:9d:22:42:
8a:ac:4a:ac:df:1f:84:da:6b:99:6a:82:44:fa:ce:e6:05:71:
24:2f:74:e6:28:3a:75:07:9f:b8:00:6b:91:23:ff:62:f6:ae:
3f:bc:f3:12:e7:23:98:e5:c0:48:5b:bb:66:f7:ff:9c:51:97:
9f:c7:54:6f:3e:4e:61:60:52:1b:7b:28:d9:68:4f:58:1c:be:
b2:24:f2:3a:11:d9:e2:35:8e:90:6a:48:07:5a:d4:43:5b:b7:
76:b8:ad:95:2b:5f:c5:11:53:33:2e:75:c9:d7:b9:5a:52:7b:
ad:0e:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:42:12 2025 by rpki-client