Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa
File: b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa (raw, json)
Hash identifier: s/PaC6p/0juUq8O1Gd4L7LVqJdHI6DU3Wd3tyRctj8c=
Subject key identifier: EA:40:B7:6B:70:33:5D:AC:22:8E:6F:E1:02:2F:CE:53:CE:AD:5B:FA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA13089019A06D1AA64AA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:30:89:01:9a:06:d1:aa:64:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=82af8c89-ad60-4cc7-a5ff-533bc9ec8e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:fb:19:2d:c3:93:a4:eb:bb:9d:28:06:55:
2d:76:9b:d9:73:a3:8d:be:aa:46:47:06:3b:51:64:
17:12:9a:db:a8:5a:d9:06:34:85:0b:db:f9:80:d1:
a0:24:6c:ed:9c:2a:e1:2b:8e:70:ee:d0:a7:11:26:
98:5b:cd:d0:22:74:87:86:bd:c2:86:80:21:7a:11:
65:a1:13:9c:d5:54:4d:f1:ca:b4:3f:e6:b9:65:2d:
e7:f0:ab:40:a3:41:7f:4f:16:17:e4:43:eb:c7:f1:
29:21:a6:fa:bc:92:47:76:48:e5:4a:a2:0d:08:56:
ed:26:b1:66:1d:1e:0c:72:ee:33:5d:05:53:8d:ec:
5f:a5:3b:2b:48:b3:94:ea:32:a7:3b:61:16:cf:27:
58:16:8e:a8:b4:5d:ee:88:2c:48:c0:60:a4:59:67:
24:41:ef:fd:35:86:21:6a:65:e6:b6:7f:86:02:a5:
48:6f:96:15:5f:00:91:1b:e7:cf:37:4c:89:75:51:
a3:35:4d:de:be:77:33:05:75:8d:c7:72:42:47:b2:
a2:29:bd:62:a7:5d:be:5c:7c:7f:44:8a:b3:b8:94:
11:45:20:e9:46:3e:37:c0:31:cd:53:98:14:0d:8d:
a2:10:73:ea:30:83:6e:96:a4:8d:8e:71:b5:dc:14:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:B7:6B:70:33:5D:AC:22:8E:6F:E1:02:2F:CE:53:CE:AD:5B:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:b0:e0:a9:5e:ee:a8:be:10:f4:99:3a:b9:02:0a:97:35:f1:
a9:da:5a:05:c9:08:d2:11:48:70:3b:5a:b6:e2:c6:82:a4:3e:
3b:68:08:e3:16:eb:d3:de:05:b3:2b:5e:85:08:80:83:02:ef:
3c:3f:99:e4:40:82:a6:23:2b:f7:fd:d2:5e:4a:91:ba:97:9d:
19:e2:71:33:5c:28:77:47:53:74:ca:51:9c:40:ff:85:c9:69:
50:28:90:62:30:44:da:46:04:ac:5f:fd:3d:66:da:de:91:f0:
68:30:7d:ef:96:bd:05:9c:46:28:3a:f4:1c:67:cd:42:ed:7f:
84:ef:86:3d:ac:6c:d7:d6:f9:2e:d8:82:53:47:d0:56:db:3d:
cf:df:f7:ac:ba:bd:6a:f1:1c:6f:3e:91:0a:e8:74:92:88:d3:
e3:f5:85:41:c8:ee:44:b6:2b:0c:94:c4:8d:a1:4e:4d:cf:2f:
32:ad:94:bd:a5:54:83:ec:51:e1:d8:1c:9d:73:f2:cc:3e:5c:
5c:0d:e1:ce:1a:24:4b:bd:13:e2:35:d7:b2:bd:78:57:cf:c6:
ee:d5:76:12:47:5b:2c:fd:07:2b:ef:f7:1b:c2:00:08:a6:c2:
b7:54:e5:f0:58:a1:5b:19:fe:2f:d2:72:28:f7:ba:f3:0e:d8:
47:9c:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:30:32 2025 by rpki-client