Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa
File: 586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa (raw, json)
Hash identifier: 6+LDZCIQYhkB5wXyN+xf/AnIlzMt559xDGH/tYHT+A8=
Subject key identifier: 52:12:EF:21:CE:B8:B2:E9:90:CE:7C:CC:43:F3:2E:DF:75:11:C2:09
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820500CDFF835CEF498CC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:05:00:cd:ff:83:5c:ef:49:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ffafd256-4bfc-4e67-90a5-0dd81ba47220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:df:be:b5:3d:9f:27:d0:26:cb:08:01:a2:
22:21:64:89:22:55:30:b2:b3:1a:0f:de:ac:ab:b9:
7f:63:58:56:98:cf:18:0c:c5:b7:3a:9d:c9:d1:c5:
f2:e6:b3:ba:c5:82:80:cf:0a:19:d4:3c:3d:ac:59:
bd:30:07:aa:6d:1f:1b:d6:ac:2d:df:54:76:c3:7a:
03:24:68:d4:06:5c:b8:1c:a0:57:38:49:93:44:ac:
be:b0:67:a9:59:e5:d0:17:78:b1:50:c2:43:41:62:
44:4b:c7:05:d1:bf:bc:43:d6:60:b4:7e:5d:a8:8e:
1d:42:88:5a:b6:7c:d3:40:8e:04:9c:ed:60:14:46:
84:bc:ca:7a:27:67:e9:9b:87:a8:65:77:3f:46:a0:
16:da:b7:be:21:99:7f:57:61:f3:25:79:8d:a8:3b:
97:b6:7a:42:bf:c3:84:a5:11:d6:3c:1f:86:c4:2c:
dc:04:50:73:05:aa:7f:16:a1:7e:bb:7b:17:e2:10:
e2:72:12:42:1c:5a:ac:52:df:40:7d:93:67:1d:e8:
37:ec:1a:f4:d2:01:b9:af:bc:76:5c:8c:db:0d:66:
78:b4:e3:3b:67:c1:9e:1f:49:a8:cb:e5:f4:e4:ca:
05:69:17:29:09:18:e1:dd:73:05:9b:07:c5:fa:c1:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:EF:21:CE:B8:B2:E9:90:CE:7C:CC:43:F3:2E:DF:75:11:C2:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:84:75:a4:c9:dd:d9:a9:ca:39:28:18:8a:44:10:71:b2:89:
5f:4b:ec:95:37:38:80:8c:c7:1e:6d:8c:6a:64:2b:e2:20:44:
9c:b3:f9:c8:86:07:b0:bd:13:09:0f:e9:b7:b8:a7:fa:7f:0e:
88:2e:97:e9:dd:8c:31:ed:f8:db:b6:6c:c4:cd:43:91:45:d7:
7e:58:6e:00:81:3b:ba:5f:08:07:68:b2:db:98:a0:41:86:89:
d7:09:74:9a:de:a7:a9:5d:c7:c7:5c:c7:aa:cd:53:7f:9b:8e:
b1:7b:1e:13:70:c5:6c:ca:b0:29:46:6c:07:38:e5:59:50:24:
af:28:67:0e:c2:9a:dd:4a:1a:2c:ec:03:e3:fa:83:62:66:e5:
69:5f:34:e5:cd:58:0e:d9:d1:a7:43:14:db:ed:ca:bf:04:4a:
7e:3c:f9:85:9a:e9:2a:d4:63:19:de:82:4b:7a:96:c2:4e:31:
8f:63:95:c2:85:98:36:7a:72:87:3b:81:83:f8:27:97:29:31:
94:3f:d1:9a:44:b1:62:c8:53:3d:e3:90:8d:b0:87:b8:61:41:
36:4b:58:30:97:c4:06:15:70:fb:43:52:cc:43:39:e9:0b:76:
65:05:f9:90:92:18:e0:01:c3:fe:ab:76:40:30:7d:21:8e:34:
c2:be:64:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:30:31 2025 by rpki-client