Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa
File: 66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa (raw, json)
Hash identifier: L1TZ0njDJzKRAfkamdBSpWvUJfottqYf1Hf0fdrX1fE=
Subject key identifier: 99:3D:3A:B9:58:48:BF:78:97:3C:D2:C5:F1:E4:94:47:0C:96:98:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A7A0B470F808023F8432E
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.250.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7a:0b:47:0f:80:80:23:f8:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=db561437-b417-48d2-aa28-7657da67be1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:e6:35:5a:fc:88:43:68:a3:4f:79:57:8b:
f6:d2:5b:13:f9:80:b6:48:6d:8f:e3:c8:c3:51:6c:
6d:2c:d8:e0:e6:2a:fd:e4:59:9c:ce:42:fd:5d:37:
89:66:49:06:00:7e:ea:48:ae:b4:34:88:ff:f6:a2:
21:5f:6c:89:d9:95:dd:97:56:fd:b4:8c:6a:dd:7d:
a3:cd:ab:b7:17:b4:9d:d6:6d:0f:5b:00:99:cc:ec:
49:f3:c0:7a:19:5c:cd:88:9e:39:40:e5:39:19:4c:
ed:c7:77:b6:72:8a:8e:c1:6a:ea:06:f6:c1:dc:66:
af:a5:4f:93:0b:47:32:be:f5:f4:89:03:db:51:e6:
c9:64:2e:12:59:87:ca:04:8e:da:8b:00:bc:a5:5c:
b8:7c:e4:dd:80:de:42:ac:f9:96:a4:71:c8:11:53:
c5:71:6f:2f:a9:ec:d4:d9:1a:af:e2:ad:1b:f0:4f:
a8:46:41:d9:23:c8:2a:fe:05:7b:ed:42:9e:a8:47:
76:86:92:82:ad:72:80:45:37:d3:8b:db:9c:2a:d9:
9e:ce:34:f7:4a:26:a2:0e:4e:f9:fb:c4:7f:5d:96:
7f:0f:86:6d:bb:82:be:e5:9a:bc:0b:f7:ba:ab:6e:
54:2d:2e:ab:16:69:88:77:b9:1c:67:0d:27:8e:7e:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:3A:B9:58:48:BF:78:97:3C:D2:C5:F1:E4:94:47:0C:96:98:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:fc:f6:e0:53:6e:9c:4a:84:43:5e:fc:8d:c7:b8:84:f6:f2:
f9:82:85:a3:9e:01:c2:ca:ce:5f:2c:3b:a3:72:2d:f3:e9:85:
5e:02:9d:66:b0:b3:94:61:6b:62:4c:66:03:1b:6f:e6:8a:4f:
48:50:bb:b6:a5:24:74:f0:b3:79:d2:3b:88:1c:c2:ed:17:38:
8b:1d:b2:25:f8:95:06:d3:3e:6b:c8:24:77:3f:66:e0:fe:57:
4d:06:a3:eb:71:c4:fd:49:9e:05:88:ab:64:b1:08:3c:d4:e5:
fd:67:86:c6:a6:67:f6:68:1e:16:af:a9:3b:1c:c3:ab:b7:3d:
de:6d:e4:79:b4:c3:ea:20:cc:a7:8b:e1:70:4e:ad:18:70:02:
32:95:4e:61:9b:72:8e:2f:84:91:8c:e1:92:bd:7c:d6:4b:08:
07:26:d9:47:d0:04:65:12:40:02:ae:66:e8:cc:94:59:08:d9:
d1:48:e2:89:81:d0:bc:ea:e3:94:ca:1e:77:09:9a:30:ed:27:
7e:3f:bf:84:b2:12:29:c1:cf:5b:6d:f8:99:56:eb:ed:cd:f7:
25:8c:9c:cb:7a:d5:3a:52:02:6b:59:64:48:fd:10:f2:93:5d:
61:43:f5:67:5c:1f:dc:67:0e:b1:dd:87:61:64:33:ef:47:e6:
80:03:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:59:01 2025 by rpki-client