Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa
File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json)
Hash identifier: lpoUBBiMnq4ivMrzYSIe32M9+UbOTfGbXUyAnF61XuI=
Subject key identifier: 4A:7B:F7:AC:1D:4A:31:B9:CD:34:D6:76:23:41:AD:22:A8:94:76:82
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12DC4760A69A0A527A360
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2d:c4:76:0a:69:a0:a5:27:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=42720773-44c6-446f-909b-03df53551510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:50:27:8a:34:da:a7:35:6f:b3:a4:93:60:
91:9e:67:1f:ba:68:7a:80:7b:eb:5c:4c:46:d4:cc:
a0:15:b0:2e:c1:f8:e8:2a:23:fd:17:b4:f6:24:49:
35:1f:b7:6b:d3:94:98:17:e3:e2:01:6a:b3:39:12:
c2:92:04:9e:3c:8a:90:d2:03:be:c6:00:ca:a6:c1:
eb:03:6c:06:0c:b0:22:92:52:e1:c0:70:58:2f:d8:
fa:c5:c2:6b:f1:02:aa:de:d3:1c:36:93:b7:13:2a:
a3:a3:27:31:9e:1c:08:ee:1e:67:f0:f9:1b:70:e3:
a1:dd:98:50:ee:36:f2:85:59:22:56:4e:8a:d7:8a:
e6:6a:00:71:a2:3d:57:f6:0a:95:7b:9f:3b:d5:f7:
ec:1b:ba:04:77:79:60:58:62:93:96:6b:2d:49:85:
c5:06:ef:e4:b9:60:22:06:51:dc:b0:e1:a8:ea:57:
69:7c:4c:eb:7f:42:34:74:6e:af:f2:3c:50:af:da:
9f:30:82:c2:66:6a:30:07:52:81:ae:9d:38:57:5f:
da:d4:cc:35:15:97:74:33:e4:a9:07:6f:36:12:81:
8d:0e:3b:75:ff:ba:4e:0c:fb:46:6e:a1:e6:79:2b:
32:32:9b:d0:a1:bb:50:8c:45:5b:d8:c9:ae:ca:97:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:F7:AC:1D:4A:31:B9:CD:34:D6:76:23:41:AD:22:A8:94:76:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:6a:4f:2f:31:63:2a:b1:42:a2:2a:8c:df:96:86:ce:4e:a8:
7b:83:5e:0d:42:8d:be:96:e7:bd:62:de:a4:50:40:33:f7:e5:
c9:fb:3f:3b:21:f1:22:fd:78:a8:37:23:e4:8d:46:ab:62:64:
80:11:8b:0c:86:ac:3c:4b:61:8c:d6:af:e8:96:20:4d:fb:11:
60:b3:bb:13:ac:d0:aa:86:42:6b:5b:bf:2e:d7:60:6b:e6:c8:
de:9b:1b:c8:d1:e2:8c:74:a0:63:8f:cf:b5:cd:06:ef:cc:9a:
dc:55:e0:3d:9e:d9:55:cb:81:0f:ba:8f:63:a6:de:63:d2:43:
a5:4f:3b:df:35:bc:20:a3:40:e6:cf:f8:5c:61:25:93:30:cd:
77:30:8f:a6:6f:d3:ef:f3:85:31:d2:12:aa:e4:36:4a:b5:c8:
e6:2c:82:67:5e:4d:b7:cb:de:35:9b:8e:ea:04:a6:ac:0f:ac:
b0:29:0d:ec:df:27:d8:46:2e:65:17:aa:4d:7c:3f:fe:63:8e:
b5:a6:2a:87:94:e8:9d:f3:cc:98:f6:5d:ba:2a:5a:6e:81:91:
99:bd:bb:38:18:c7:2a:12:c7:50:66:0f:38:6c:76:47:4c:73:
9a:71:fb:44:0d:6e:3e:c0:b4:3b:13:80:86:02:c5:0a:4a:26:
49:94:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:36:05 2025 by rpki-client