Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa
File: b06bceef-a146-3786-a710-c662d310f7f5.roa (raw, json)
Hash identifier: pvyd03e6A14/1lX89c/eDSFHfE+NBtk6oh5nBelsx/g=
Subject key identifier: 2D:3F:B5:E6:E3:C8:33:CA:03:7B:87:FE:CF:25:4D:F6:96:3C:55:E8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12C383313A0B183CD7280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2c:38:33:13:a0:b1:83:cd:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=d8558e47-21f1-4467-936c-62e87e0da2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:66:f6:db:67:6b:ea:50:87:45:a2:68:92:
6e:3d:83:0f:bd:79:33:15:c3:05:86:89:e0:77:23:
1f:68:9e:09:30:41:b8:f2:a0:7f:02:e6:29:9f:4f:
0d:cf:03:01:26:02:40:15:f9:46:13:45:0d:26:89:
da:cb:45:39:6d:82:0a:c3:45:31:90:c2:b9:89:45:
d6:5f:ac:67:93:67:d3:63:bb:b4:4e:9a:05:43:a8:
53:d1:8c:1e:dc:52:48:91:97:95:c1:d4:38:78:0e:
01:f0:8a:9f:f0:bb:01:8e:49:04:ae:7b:08:55:5f:
f1:a0:05:00:13:04:dc:14:e8:bc:66:bb:d8:22:57:
94:1f:ed:5d:66:69:66:c5:9d:4f:14:42:96:f9:4f:
e4:30:df:ec:3a:76:11:66:44:27:c5:82:08:9c:83:
e5:cd:6d:8c:49:a0:60:33:45:eb:17:21:e4:24:ee:
08:49:23:57:92:15:0a:96:5e:b4:e0:e7:94:25:f9:
60:38:2d:be:45:1a:68:d6:3a:eb:a0:78:9a:82:02:
f9:ea:04:d2:47:8b:58:99:9b:6b:10:3e:65:c3:96:
db:f7:02:06:0f:30:65:e2:59:72:81:df:ac:5d:ce:
73:3c:aa:fa:64:38:0d:64:88:ce:11:7a:ae:4a:6f:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:B5:E6:E3:C8:33:CA:03:7B:87:FE:CF:25:4D:F6:96:3C:55:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ec:0b:41:8f:44:79:78:0e:f8:e9:6a:27:9f:08:78:2c:d0:
f2:24:e8:97:4d:a3:a9:fd:f3:9c:05:d5:99:86:23:15:ec:b7:
53:f7:6d:8b:fc:cc:5d:a5:41:0f:db:4a:d7:72:77:b8:ed:2b:
71:b5:51:a4:a8:6a:f3:f4:37:9d:a4:94:68:56:1f:ef:09:bd:
b8:b7:8d:5a:ce:e9:7c:43:42:cf:57:24:15:56:af:c0:6c:0d:
ea:3d:c2:0f:de:87:4a:f2:39:f2:fc:63:c8:b0:bc:91:2d:fd:
1d:28:a3:a9:4f:20:31:e5:50:a5:3f:82:2c:aa:19:a0:84:b5:
52:26:c0:31:08:e1:1b:80:83:82:ad:21:4c:8a:92:5d:07:de:
c0:6a:5e:ee:84:55:82:26:71:73:20:6d:90:43:23:69:bb:9f:
3b:1c:63:68:2c:3e:e1:20:d0:6b:ac:92:47:fc:61:cc:d3:71:
84:d8:3a:0c:25:4a:31:68:41:0a:10:3a:28:91:6b:d5:82:52:
f6:5f:6b:f7:2f:26:e8:48:76:dc:1d:78:4d:23:8e:98:57:68:
a5:fe:fc:55:0d:04:d7:05:5c:1b:50:a8:bb:de:58:bb:41:d3:
7a:43:5f:31:40:0f:67:ed:ae:3b:4c:39:1a:94:28:9d:af:01:
fa:65:59:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSw4MxOgsYPNcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
ZDg1NThlNDctMjFmMS00NDY3LTkzNmMtNjJlODdlMGRhMmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dm9ttna+pQh0WiaJJuPYMPvXkzFcMFhong
dyMfaJ4JMEG48qB/AuYpn08NzwMBJgJAFflGE0UNJonay0U5bYIKw0UxkMK5iUXW
X6xnk2fTY7u0TpoFQ6hT0Ywe3FJIkZeVwdQ4eA4B8Iqf8LsBjkkErnsIVV/xoAUA
EwTcFOi8ZrvYIleUH+1dZmlmxZ1PFEKW+U/kMN/sOnYRZkQnxYIInIPlzW2MSaBg
M0XrFyHkJO4ISSNXkhUKll604OeUJflgOC2+RRpo1jrroHiaggL56gTSR4tYmZtr
ED5lw5bb9wIGDzBl4llygd+sXc5zPKr6ZDgNZIjOEXquSm8NLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0/tebjyDPKA3uH/s8lTfaWPFXoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA2YmNlZWYtYTE0Ni0z
Nzg2LWE3MTAtYzY2MmQzMTBmN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7sC0GPRHl4DvjpaiefCHgs0PIk6JdNo6n985wF1ZmGIxXst1P3bYv8
zF2lQQ/bStdyd7jtK3G1UaSoavP0N52klGhWH+8Jvbi3jVrO6XxDQs9XJBVWr8Bs
Deo9wg/eh0ryOfL8Y8iwvJEt/R0oo6lPIDHlUKU/giyqGaCEtVImwDEI4RuAg4Kt
IUyKkl0H3sBqXu6EVYImcXMgbZBDI2m7nzscY2gsPuEg0Guskkf8YczTcYTYOgwl
SjFoQQoQOiiRa9WCUvZfa/cvJuhIdtwdeE0jjphXaKX+/FUNBNcFXBtQqLveWLtB
03pDXzFAD2ftrjtMORqUKJ2vAfplWUg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:39:10 2025 by rpki-client