Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa
File: 39791293-3e4a-31e7-bd76-093a1ea73ab8.roa (raw, json)
Hash identifier: yDOZtP90Wo/JRmqFtJ8aE8Jr0eOj+WI1EbZjfEaDuXE=
Subject key identifier: 92:4A:B0:E8:75:F6:0D:92:14:57:A1:AF:CC:65:E7:9C:5C:55:28:86
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582313F77B9CAB333BBE200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:31:3f:77:b9:ca:b3:33:bb:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a286433d-7f7a-47e7-9d33-d46f50b80b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:ce:38:bd:83:49:94:f1:98:39:d7:30:9b:
c8:f7:21:7c:36:f6:79:51:52:ce:a2:07:a9:87:15:
16:0b:8f:b2:7d:73:7b:47:03:e3:b1:50:e6:d9:74:
89:af:52:9a:64:29:9c:39:fd:cf:ff:ef:92:02:ed:
b7:84:a6:99:9e:ff:20:26:db:58:83:3f:44:ae:84:
ee:ce:af:9f:91:da:ee:64:a6:ac:32:d9:a2:45:e2:
42:d3:46:aa:2f:c1:54:04:33:08:4a:76:ca:1d:f6:
a0:c0:4e:36:cb:e4:eb:71:d0:b9:65:89:22:b0:c9:
0c:45:05:60:3e:f2:8f:4d:f8:33:e1:7c:cf:15:f1:
ae:33:de:e1:77:83:10:65:0b:e1:4d:91:12:72:86:
c7:76:c7:39:0c:c8:66:4b:65:f2:97:73:96:db:d8:
e5:b1:e6:ff:bf:96:57:de:bf:39:8c:42:be:bb:a1:
52:1c:01:3d:33:20:b6:22:51:75:ee:5c:f3:f0:4e:
17:9c:f0:18:24:81:e2:94:5c:0f:29:bc:d5:a6:5c:
dd:d3:86:4c:84:5e:ae:4a:1a:2a:79:6c:bd:62:2e:
64:20:2c:71:1d:17:be:74:e1:8e:ab:bf:e4:1f:00:
60:fd:e5:c8:26:32:fa:f0:88:48:98:0f:eb:b0:80:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:B0:E8:75:F6:0D:92:14:57:A1:AF:CC:65:E7:9C:5C:55:28:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:2f:8c:6c:45:72:18:b6:0c:fb:c3:1f:6f:b3:d5:49:f0:47:
a1:e9:8d:7e:67:49:de:5e:c6:5b:0f:d5:ce:33:b2:2c:22:08:
1c:e9:3d:fe:9d:69:1e:54:e7:13:fc:89:fd:a3:37:cb:bc:ee:
52:c3:8e:90:09:6a:83:6a:a0:94:10:a6:e4:0c:18:a8:e3:b3:
34:76:57:72:33:6c:fd:00:75:db:fc:bb:e0:13:c9:64:74:d2:
2a:74:fc:0e:8e:e7:03:32:c9:62:78:f3:a3:ee:d0:01:20:ad:
aa:7a:ef:d2:62:48:7f:8c:0e:ad:89:24:a7:84:d1:e6:40:1b:
ff:10:6f:59:86:91:55:03:32:29:cf:0f:eb:6c:cd:90:33:e8:
98:0a:2e:3d:46:ca:73:4d:06:a6:5a:54:ec:f1:5a:dc:41:3f:
d7:ae:5c:74:fd:60:31:b4:47:53:8a:7b:c9:49:e7:85:4c:e2:
e8:57:9e:3d:32:98:32:1c:87:7c:9f:7d:fe:dd:80:52:d8:25:
07:5d:5f:c8:ca:9c:d4:ed:5e:07:7d:73:0c:4b:49:45:98:06:
ee:e3:cf:04:73:4d:6b:9a:cb:2e:25:e4:f4:ae:bb:ea:84:97:
cd:69:68:bb:a8:c2:9a:a9:0b:81:96:ff:60:f0:20:90:d1:6b:
e5:2d:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:42:10 2025 by rpki-client