Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa
File: 2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa (raw, json)
Hash identifier: +qT1mSpdOyGZzkCY3rJi3VXaT8FMeVoUZ2szFE1QeOA=
Subject key identifier: 35:24:04:88:07:A9:F1:F1:1C:32:06:0C:7E:9C:BF:DC:E9:FB:7A:EE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB3BA3BEC20CBBA833600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.250.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b3:ba:3b:ec:20:cb:ba:83:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=802a27b5-e5a3-42fd-a816-7e42909ab201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d5:70:b7:d5:f7:41:d7:4c:19:65:80:44:99:
95:0d:91:5a:a2:a1:c0:d3:2e:e2:bc:70:f1:37:ce:
2e:c5:f6:85:6d:9e:10:66:dc:50:54:a4:1a:89:47:
b5:d6:0c:ec:76:d3:2b:c5:67:23:5f:3f:06:e4:fb:
1e:75:c0:8f:60:a7:47:3a:83:ec:01:96:bc:a6:db:
c3:89:4f:1d:65:22:6c:c9:5e:15:86:e7:d3:05:c0:
b1:03:9a:1e:d1:5d:b7:27:56:e9:27:30:42:9d:51:
3a:22:ca:a8:39:a2:a8:f8:f9:e7:4e:c0:d0:e4:55:
51:ba:01:82:ff:e9:3c:5f:92:4d:0d:f7:d4:3f:c6:
ba:89:2b:dc:3a:fd:ba:e5:10:70:16:bb:7b:bf:fc:
28:92:bf:30:cd:e0:4c:42:44:2b:db:97:45:c3:f0:
ac:b3:55:51:63:a1:73:1a:15:74:2e:be:3d:50:c6:
37:a0:b2:39:d6:a4:8d:b1:2e:99:61:13:14:a9:7f:
0f:1b:fd:03:c1:10:85:66:7b:b1:f8:08:86:26:d2:
07:00:99:5e:d5:ad:20:90:bc:4c:7a:48:45:4b:f4:
1d:57:7d:d0:ff:eb:25:b5:98:bc:56:20:c5:69:a1:
ed:fc:36:74:75:4f:d2:00:d0:9d:19:5b:2b:23:a0:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:04:88:07:A9:F1:F1:1C:32:06:0C:7E:9C:BF:DC:E9:FB:7A:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a4:f4:de:08:86:15:9f:d5:aa:1b:06:d3:20:2f:46:8a:b8:
e0:1c:85:2e:4f:85:2a:d9:49:f3:d0:88:aa:77:1b:ea:7c:e4:
b8:f5:bf:0b:99:7d:76:0c:f2:6a:75:c9:35:be:3a:cf:fa:6e:
6f:d1:8d:b4:ac:e5:50:fd:1d:44:c1:6c:e2:db:40:bc:ab:fa:
e0:cd:f4:f5:03:ea:e7:ac:54:59:01:db:b9:ae:87:d4:63:c4:
0c:7b:84:0c:42:ff:47:d1:be:4a:25:a8:e5:76:de:37:ad:13:
d3:d1:b6:f6:f3:9d:2c:8c:15:95:71:ec:ac:e5:4c:ed:fc:4f:
4a:35:02:5b:ef:2e:eb:9c:a7:4c:e7:3f:97:56:cf:7b:55:33:
c6:91:72:64:3f:5b:82:3b:e5:4c:86:8d:ef:b8:e0:53:97:6a:
6f:8a:16:c7:d6:ca:db:8f:37:18:5e:4a:a1:d8:13:1d:c8:ed:
c7:e8:1f:37:34:c1:cc:dc:df:ec:6b:3f:43:bd:eb:f1:c0:d4:
a4:de:86:47:40:85:5f:a4:2d:bc:d3:95:be:37:17:5b:e8:fd:
57:8f:b7:06:04:61:d2:df:d0:6d:33:4a:69:e8:6e:7a:e5:be:
3b:0f:45:95:1e:37:62:7a:92:99:4a:cd:bc:2c:c5:03:bf:00:
50:2f:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:11:04 2025 by rpki-client