Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa
File: 4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa (raw, json)
Hash identifier: O7CuIeuh43yIfkSBTYcVhQkx2UJvj37r6f6lbn3MVDc=
Subject key identifier: D2:A6:2C:F2:05:6B:A6:FD:8D:26:19:10:9F:BF:30:7E:26:19:D4:EE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB625D811E48DFB514F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.250.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b6:25:d8:11:e4:8d:fb:51:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3e41be91-c324-4cd1-8661-a5f22d007b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:3f:2d:fc:d4:c3:98:72:f8:b6:03:1e:a6:
55:6a:a5:5d:0e:d5:39:af:0c:e0:44:79:0a:f9:4f:
9c:b4:c6:bb:14:fd:11:0c:36:bf:a9:cc:a4:5a:e4:
9e:7b:7e:53:fe:0b:eb:f1:b9:0d:0a:8c:3c:1c:e9:
48:27:6f:de:4a:a1:85:bc:11:b2:94:ab:c7:1a:aa:
a7:45:af:be:93:53:ea:59:42:95:cb:b1:66:b3:38:
20:65:2a:68:72:9f:91:dc:e6:5d:8e:23:e9:7b:e0:
6d:00:a8:0c:27:44:62:e2:70:e8:23:ec:61:3d:25:
17:ad:3f:b8:ea:45:be:79:90:21:1a:c3:45:6f:92:
2a:23:27:24:07:b2:c1:eb:a7:3e:5c:cb:56:d2:0a:
e8:23:92:13:2d:24:41:e5:aa:18:ee:4b:78:79:93:
e8:78:12:bf:dc:90:19:ec:0c:1b:e9:34:fd:61:10:
0d:81:45:c7:d9:bf:e9:62:04:b3:3c:80:a9:f8:3e:
c0:30:fb:93:a8:66:5f:45:d1:bf:c1:f6:66:bd:af:
5e:34:a5:af:38:34:df:ae:18:0d:53:d0:e3:1e:70:
c5:3e:a2:9b:16:79:9b:20:f2:a2:30:1c:65:00:f8:
91:a1:d0:9c:2a:5e:36:96:75:0f:e2:09:d5:5d:d4:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:2C:F2:05:6B:A6:FD:8D:26:19:10:9F:BF:30:7E:26:19:D4:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:d6:ac:51:3a:97:e1:3c:46:17:dc:50:e9:63:32:6d:b9:5f:
c4:9f:37:c2:5d:63:5c:f2:66:92:41:fd:0b:d5:8e:7e:81:e5:
b7:0f:5d:b2:9b:61:38:6b:ee:90:a3:53:6b:55:35:5b:02:ed:
cb:d5:99:e0:d3:f9:f3:34:2b:45:32:68:dc:ab:c4:c2:8b:0a:
73:3f:5d:1d:06:79:ba:90:52:0c:ac:20:47:d9:bf:c4:a9:40:
af:16:48:c1:b9:d0:3c:c1:df:34:00:7f:0a:a5:4c:fc:96:ec:
7d:9b:31:40:d5:a4:e6:82:36:57:a1:e7:ee:c3:d7:74:5f:ba:
04:58:35:27:97:51:c7:ae:ec:d5:a2:3d:76:5d:d8:bb:04:c9:
35:f9:5c:53:91:83:17:81:f3:5b:4f:83:f4:4a:7c:cf:fa:ad:
7e:e6:0c:84:c8:ba:4c:6e:4a:6c:03:82:44:4c:e7:97:2e:a4:
c8:1d:8e:55:0e:5e:f3:ea:f7:c7:46:80:59:4f:e0:81:b8:91:
a1:51:d7:6a:c1:86:5b:89:bc:af:60:97:0f:5b:57:64:6a:1f:
44:de:7e:10:76:09:72:70:16:4e:06:1e:bf:2f:73:03:0d:c7:
c1:82:cc:ad:ff:f9:dc:7c:e4:ce:93:1e:d5:50:94:fe:fc:5e:
2e:32:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:05:18 2025 by rpki-client