Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa
File: 75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa (raw, json)
Hash identifier: Y2BNIwL6df4L7BRa+3nS4MJktf4smdI1IS//b1pLjqc=
Subject key identifier: B4:BD:A6:66:F0:E5:C0:D9:B9:8F:40:C1:33:CB:73:B6:CF:D7:27:9F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AAF0494CA7DB13D3BBF40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.250.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:af:04:94:ca:7d:b1:3d:3b:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=8bcca204-d6d6-4f02-86b2-5e996d75821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:47:1e:1a:11:6d:00:a2:7f:c6:29:c5:b2:
36:20:5a:7b:b0:16:f5:a1:ff:b3:ee:7f:a1:f3:cc:
de:c1:a8:31:7e:b9:17:14:3f:bf:66:0d:af:10:2e:
90:aa:57:dc:bc:9f:2b:7e:e5:48:49:c9:dc:e9:38:
59:bd:9d:9b:c3:c2:99:05:88:d9:70:00:ac:0f:5a:
56:df:06:8d:47:3e:67:0d:2a:03:8c:e8:bf:26:e4:
42:0e:a1:42:ca:17:5f:0c:5b:94:19:b6:14:31:8e:
d6:6f:6f:94:87:34:3e:27:47:fd:c6:01:46:70:16:
08:b9:89:1a:84:05:de:44:1f:a4:c7:9e:17:23:c0:
31:5a:e8:3d:1c:ac:59:4c:77:34:11:db:4f:e4:7e:
89:b6:09:ab:25:9b:12:e9:0a:55:51:28:98:5b:60:
a5:f6:a5:02:f4:05:d5:22:3b:aa:8d:d0:07:43:d0:
6d:e2:90:c1:b8:bf:3a:2c:cb:01:75:5c:98:c6:a5:
65:87:b1:a5:2e:e9:3f:c0:a3:21:49:d8:a3:fa:ec:
0d:49:98:41:e8:99:85:1f:54:df:08:d9:d8:51:f6:
40:74:59:8c:16:d9:35:01:18:db:f8:04:47:04:f9:
2a:2a:65:31:6c:6e:3c:13:a1:db:f1:34:ea:99:4b:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:A6:66:F0:E5:C0:D9:B9:8F:40:C1:33:CB:73:B6:CF:D7:27:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75c9efea-9247-365b-a5cf-f6e5a0a11c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:9b:b8:22:2d:02:59:31:6d:3d:cc:df:82:6c:09:fa:49:2a:
a1:8a:10:45:bf:50:e4:a4:77:a9:35:89:2d:63:d9:24:e8:77:
bc:9c:b9:29:98:70:25:93:fd:b2:77:e2:49:b6:f9:92:f9:3e:
aa:46:8d:4e:9e:11:16:3a:bc:4a:cc:73:9f:04:e1:f1:c8:e4:
11:84:ca:8f:b2:a6:dc:4c:e0:b1:79:a7:e5:ca:77:b7:94:dd:
59:c9:1d:6a:3e:46:16:ee:04:97:27:b0:d4:6c:ee:a8:c2:b9:
51:7d:f5:aa:db:8f:7c:59:59:b3:9b:70:f9:f8:82:cf:ef:7e:
14:09:9a:76:70:e4:40:0f:7f:0e:32:96:a6:dc:35:3b:7c:e6:
bd:4b:0f:f5:9e:49:04:7c:ba:fa:af:52:e4:2c:74:4c:9b:1b:
7d:03:2f:28:66:56:f7:e6:18:ee:f0:ad:52:c0:7a:5a:df:25:
72:c5:ec:2b:ab:10:0a:2a:58:83:82:39:b6:1b:75:c4:40:9b:
65:da:e5:fc:bf:a3:bf:34:20:f2:93:57:24:fa:16:b6:7e:0c:
40:7a:82:15:46:7a:0f:7f:2c:fc:79:ef:3e:6e:30:68:c4:cd:
6a:ff:f5:f9:ac:55:3b:e1:2b:d8:43:ca:02:53:35:ec:f6:13:
93:9c:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:04:05 2025 by rpki-client