Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa
File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json)
Hash identifier: 9Be9C0LtBEpIox1s0BoVK3odUmZLQ6DfXheads2QG2s=
Subject key identifier: A3:BC:ED:BE:39:CF:AE:5E:F1:50:31:C3:24:E7:2B:F1:EC:89:53:FE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A710FB9428CC5C49E3480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.250.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:71:0f:b9:42:8c:c5:c4:9e:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=ee34a87d-b124-4e1f-8370-71da2096fceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:4e:79:56:61:ac:31:e5:05:70:13:ca:79:
18:b5:2e:d0:a1:7f:c6:b0:dc:49:c1:b8:5e:21:b0:
4f:29:3a:b9:f3:bc:2c:7f:30:b0:60:e2:6d:3d:1d:
f0:a3:2c:04:d2:1f:d6:6b:f8:c1:14:84:1c:6b:d7:
c4:28:11:ca:fd:18:d6:ad:56:31:cc:cc:d3:e8:c4:
47:ef:88:17:a7:0a:a7:93:07:c7:d0:21:56:f1:ba:
8e:83:af:c7:be:5d:0a:12:72:ea:97:b3:98:1a:de:
d8:1e:09:98:db:90:96:85:d3:bf:8a:bf:26:a0:b4:
bf:66:7e:3f:f2:86:b7:29:bc:5e:a0:a9:de:39:8b:
1f:db:e4:b7:32:81:17:8b:fb:20:9d:ce:5d:66:07:
61:e6:02:bf:bc:5c:e3:67:49:e7:34:7f:b0:56:b5:
87:10:bd:c8:ce:53:81:ee:66:24:72:2b:0f:94:da:
da:f3:7a:eb:7b:3c:a8:c6:28:e6:f8:d0:10:75:20:
73:3b:4e:ba:f5:1f:ab:c9:d2:20:25:55:3c:b7:df:
4a:f1:b8:43:96:b8:3e:c6:69:de:1c:d0:d5:18:f4:
7e:5e:c3:66:69:5c:cf:bb:16:e7:de:fb:d8:ab:6e:
b1:f9:a1:43:73:74:a6:35:4c:c7:57:c8:85:dc:fd:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:ED:BE:39:CF:AE:5E:F1:50:31:C3:24:E7:2B:F1:EC:89:53:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:95:5b:6e:82:c2:ea:b1:55:04:e0:74:72:99:36:07:a9:6a:
53:09:93:13:bd:28:2d:10:84:3a:37:e8:9d:fe:79:2e:bc:06:
ca:5f:76:64:42:2c:59:65:0a:2b:9b:e4:14:d6:1a:89:aa:d2:
91:be:f9:6b:f6:2a:6f:5c:17:f6:97:47:08:e5:c0:ca:8b:92:
44:e9:d9:59:cb:f8:1d:9c:ba:45:bb:b3:9e:e2:01:ca:1c:03:
40:18:90:84:0a:74:9d:d7:46:af:fa:e2:45:d7:28:b9:60:88:
03:4f:c2:f8:d5:41:e0:92:59:98:a7:cb:a3:d1:a3:a0:87:73:
bf:5f:4b:41:00:74:2c:6d:a8:f4:3f:3d:6d:eb:ed:f3:5c:38:
16:73:9f:1c:21:ce:2f:fb:ac:e5:7e:92:21:b0:5c:69:24:fc:
f3:bd:db:aa:ac:77:27:54:88:2c:f2:1d:4b:04:6e:31:a8:8c:
64:f4:a3:42:3a:29:97:57:8d:39:f3:e5:c1:e9:da:e8:a0:06:
4f:e0:07:9f:7d:f3:2c:71:9d:0d:c2:4d:ce:32:54:9f:a0:c3:
c2:9d:e5:32:c2:59:18:dd:8d:92:f4:67:31:7c:5e:50:17:6e:
74:13:a6:09:d9:b3:85:28:93:7d:80:28:d8:2d:8f:48:85:b0:
81:62:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:34:34 2025 by rpki-client