Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa
File: 0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa (raw, json)
Hash identifier: eq4kMURTLrvP4TgZ2NAMCQwfDxYK41xqYQuo2eFqdSc=
Subject key identifier: 2A:D5:7F:E1:ED:01:4C:CB:DB:BE:4E:56:EF:40:29:AB:A0:4A:78:F4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A5D9D13E9C27EE767C380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.250.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5d:9d:13:e9:c2:7e:e7:67:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=1b2d4d4d-2783-419f-b5e0-3fa1daf9129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:1f:5a:5c:94:58:51:bf:bb:c7:1c:71:85:
ee:d1:f6:af:05:f8:0f:56:d9:01:95:f7:b1:5a:b9:
f2:b9:fb:bc:78:5e:bc:79:11:9a:1b:c3:e3:a9:ac:
c9:b7:05:25:c3:3c:aa:cd:7c:8a:21:e7:a2:91:85:
94:9a:79:75:2f:bc:d1:2a:09:a9:8b:7f:fd:25:4d:
99:f1:49:2c:5f:46:39:c4:f9:a7:c4:5b:a1:ac:a2:
d0:4a:49:19:cc:9e:e6:81:ce:4a:6c:0c:96:54:dd:
6d:8b:ec:06:24:08:24:8b:6a:75:2a:04:20:87:16:
a9:47:b3:9a:b8:9b:e4:56:82:d7:04:34:ea:37:1b:
83:b6:7e:47:8f:83:1b:a1:6c:a2:8b:31:57:17:2b:
79:6f:27:d2:0e:09:de:7e:9f:85:b1:c3:8c:13:ec:
80:04:07:08:81:12:5c:e3:e6:15:63:47:d8:27:b7:
0b:52:86:9e:af:df:f6:43:3f:30:3d:70:83:f2:6b:
a5:48:90:30:28:da:98:27:0b:a5:25:d6:a5:1d:c0:
a9:43:bd:62:a4:e5:c7:97:86:e1:3f:43:e9:2b:32:
39:90:1f:0a:aa:4c:82:d3:45:1b:09:fa:86:fe:36:
11:2e:37:38:a1:55:82:95:c4:bc:02:b7:ab:f1:0d:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:7F:E1:ED:01:4C:CB:DB:BE:4E:56:EF:40:29:AB:A0:4A:78:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:2c:d6:41:7f:5f:bf:4d:94:5d:4c:d8:e3:58:c5:df:60:13:
b4:c0:74:4d:c0:ce:9c:c2:c4:f1:14:ad:e6:d7:2d:e1:44:f4:
a5:4d:ea:28:a8:a9:93:7d:2a:b7:56:f0:99:41:33:dd:f8:5d:
52:fb:67:1d:27:10:de:15:4f:cb:19:40:6f:6e:ab:75:b6:87:
5d:b7:b1:4b:6f:fa:90:36:38:fe:96:39:df:2c:22:e4:df:19:
4b:db:e9:eb:f3:de:9a:da:4d:ff:ab:a5:cf:8d:60:32:b4:19:
3c:aa:30:70:71:2e:76:41:72:ed:d9:b5:ec:9b:90:c9:84:ac:
7d:3e:51:14:1f:c3:0d:13:1c:1d:de:d1:7f:19:5b:0b:80:a4:
03:4d:57:5c:56:f5:ad:b1:8c:5d:23:0b:9c:05:33:61:a3:5c:
a8:b3:40:70:ef:87:ce:a7:73:5d:21:22:ea:1f:c8:e3:35:44:
0d:a7:6a:39:f2:77:c9:b6:98:e8:ad:26:74:dd:c0:ce:d1:10:
64:52:17:df:bc:5e:69:63:11:a7:08:e7:67:83:8d:c2:99:43:
f3:bf:bf:95:93:7f:77:8c:b0:93:fc:76:1b:7e:31:3a:a5:88:
c6:52:45:94:58:09:39:04:b6:db:96:ec:ba:c2:2d:ff:1f:4c:
3a:9f:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:46:18 2025 by rpki-client