Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa
File: f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa (raw, json)
Hash identifier: DWhnBJhBEAWGPglc3HgqpFmcgnx/gIwVhKQT+y7cf3s=
Subject key identifier: 90:16:17:DE:3A:D3:54:A4:FC:F2:71:04:E7:D7:ED:4F:F8:B9:5D:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12F15ACE16FF375843400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2f:15:ac:e1:6f:f3:75:84:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=5ef7bf61-a233-4715-bcd4-6be997cff6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:6f:3c:64:fd:69:57:00:1a:1d:9f:51:dc:
83:4c:bb:a4:2e:16:5c:c5:f9:f3:05:40:80:81:90:
c6:53:e8:39:a7:4b:15:06:7f:31:c7:64:31:4f:5c:
4a:19:91:43:2f:91:fc:64:d0:2a:6c:2a:13:94:62:
0e:e9:5e:c5:f8:1e:5f:ff:d2:0a:0f:3f:c3:fd:55:
a3:77:88:c0:da:2b:f2:ea:14:28:68:61:f8:60:33:
38:96:eb:5b:72:a9:41:03:f5:7e:e0:42:b8:04:98:
c5:c0:03:5b:0a:05:b9:16:43:b9:3f:af:ea:81:0c:
42:33:75:46:2b:71:d3:01:80:03:7b:f6:b9:1b:cf:
27:0b:40:4b:31:b0:5a:68:ef:01:d9:c8:22:9b:83:
97:52:de:b9:38:d4:72:8c:49:8a:0f:d9:e8:24:77:
c9:40:be:43:16:08:87:10:e1:da:e4:4a:8d:d7:07:
4c:22:97:b5:66:2b:db:9c:d0:fb:54:c3:6a:a1:71:
59:e2:4c:9a:29:94:a9:cb:37:d6:93:b6:f6:e6:50:
36:08:0f:57:15:8d:d1:96:e8:25:58:f8:f9:38:87:
25:9b:4f:a3:1c:b9:b8:2e:96:59:81:2c:4b:7c:1b:
3a:1e:bf:00:be:b2:c8:6c:46:f2:0a:81:95:bd:fd:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:16:17:DE:3A:D3:54:A4:FC:F2:71:04:E7:D7:ED:4F:F8:B9:5D:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:f2:8f:32:c9:86:de:f1:8d:42:cb:58:ec:1a:80:95:8b:2b:
1d:a7:02:8a:aa:9e:98:38:3c:a9:a7:ef:19:20:2c:26:1c:d9:
09:a9:7c:96:af:7d:04:59:85:2f:e3:32:e7:43:f8:ff:04:cc:
2d:ee:02:89:fa:3e:68:59:8f:a1:d2:67:fb:a0:3e:f7:1b:aa:
fe:2d:c9:3a:22:2f:18:c3:2f:94:d3:2c:3f:dd:cd:e0:38:f9:
af:fc:5a:e7:6a:b6:34:72:98:50:77:20:59:b5:23:e7:86:19:
a3:92:b5:52:dc:5a:d7:d4:07:0e:49:37:d6:ac:61:f1:21:61:
84:11:42:53:bc:af:6c:83:3d:6b:3b:74:e9:36:2c:5f:cc:c5:
28:c3:2c:7c:1b:41:a5:41:9c:01:14:1c:2c:2e:f6:c3:b5:b7:
d5:ab:c8:96:0b:9b:d7:5b:fe:10:cc:83:e1:8d:75:d1:1f:36:
e3:bd:c5:9d:7e:eb:48:08:94:dd:bf:f2:ab:97:34:3a:8e:71:
36:7c:7a:e8:f3:4d:d8:e9:ea:b2:3e:88:c4:84:31:bb:2f:d1:
b7:32:ae:b2:67:ef:cb:c0:5d:cf:0f:3e:8d:32:58:63:44:7f:
46:ef:4e:cd:fb:9d:df:5a:9f:44:49:4a:3f:8f:cf:95:eb:bb:
55:38:41:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS8VrOFv83WENAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
NWVmN2JmNjEtYTIzMy00NzE1LWJjZDQtNmJlOTk3Y2ZmNmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ9vPGT9aVcAGh2fUdyDTLukLhZcxfnzBUCA
gZDGU+g5p0sVBn8xx2QxT1xKGZFDL5H8ZNAqbCoTlGIO6V7F+B5f/9IKDz/D/VWj
d4jA2ivy6hQoaGH4YDM4lutbcqlBA/V+4EK4BJjFwANbCgW5FkO5P6/qgQxCM3VG
K3HTAYADe/a5G88nC0BLMbBaaO8B2cgim4OXUt65ONRyjEmKD9noJHfJQL5DFgiH
EOHa5EqN1wdMIpe1ZivbnND7VMNqoXFZ4kyaKZSpyzfWk7b25lA2CA9XFY3Rlugl
WPj5OIclm0+jHLm4LpZZgSxLfBs6Hr8AvrLIbEbyCoGVvf0uhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAWF94601Sk/PJxBOfX7U/4uV2hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjVmN2JmZmEtMDI5ZS0z
ZmNjLTlmZTQtOThkZWI2OGJhM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALyjzLJht7xjULLWOwagJWLKx2nAoqqnpg4PKmn7xkgLCYc2QmpfJav
fQRZhS/jMudD+P8EzC3uAon6PmhZj6HSZ/ugPvcbqv4tyToiLxjDL5TTLD/dzeA4
+a/8WudqtjRymFB3IFm1I+eGGaOStVLcWtfUBw5JN9asYfEhYYQRQlO8r2yDPWs7
dOk2LF/MxSjDLHwbQaVBnAEUHCwu9sO1t9WryJYLm9db/hDMg+GNddEfNuO9xZ1+
60gIlN2/8quXNDqOcTZ8eujzTdjp6rI+iMSEMbsv0bcyrrJn78vAXc8PPo0yWGNE
f0bvTs37nd9an0RJSj+Pz5Xru1U4QQs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:34:28 2025 by rpki-client