Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa
File: 9dbeb59f-5757-3035-b091-70de9d1fb12f.roa (raw, json)
Hash identifier: hXHuwhuE/fexA0XvUC6Xh9hzDhsMy1msKTmC6fxg4U0=
Subject key identifier: C5:C7:30:41:F0:A7:68:8E:0C:75:7A:18:FA:C5:DC:5A:0B:29:AF:34
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B3742519561375D685500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.250.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:37:42:51:95:61:37:5d:68:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=21f09204-96f7-4581-8d59-b6302ee348c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:e7:06:ce:19:be:be:1e:3f:69:dd:3c:41:
b4:d6:20:6c:86:65:5e:0a:0d:d3:51:04:01:4c:8a:
3a:ce:6e:ea:95:0e:69:cc:a4:d1:48:8c:03:9a:40:
87:a8:a7:6d:95:1d:ff:fa:2a:76:f4:3e:2e:4b:45:
09:51:3c:e1:1f:70:5f:4e:78:3d:a5:b7:9d:5d:14:
82:19:34:d2:59:5a:80:41:6e:52:b1:ff:03:f0:56:
77:08:74:e0:6d:35:b9:60:46:86:e3:60:19:65:17:
6c:47:c2:b3:63:e1:05:d5:99:0f:da:28:76:02:b3:
7d:39:8b:93:f6:c4:b5:ca:db:5f:6d:bb:eb:e0:f2:
0d:79:9c:fa:fc:73:cf:3a:08:ac:c7:0c:8e:b8:0b:
0e:af:8e:ec:94:2f:0e:25:60:7e:c4:7d:b9:4c:5c:
61:7a:b9:e4:3d:77:31:b1:f2:57:4f:b8:bd:a5:0a:
47:e9:23:0f:45:b9:a2:c5:37:c2:cb:4b:47:79:13:
38:d3:c3:2c:67:46:eb:0e:14:f1:da:95:9c:ed:fd:
ef:69:76:55:e4:cb:f6:85:6f:e8:47:3f:7a:52:aa:
7e:ca:80:93:1e:e5:76:e2:bb:14:5e:19:e8:69:29:
2d:1e:0d:af:c6:04:d9:64:fb:3f:f1:87:d2:ed:b6:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:30:41:F0:A7:68:8E:0C:75:7A:18:FA:C5:DC:5A:0B:29:AF:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:36:66:35:48:25:63:33:f7:00:69:ed:4f:33:d0:2f:29:3b:
3a:8a:5a:7f:92:62:5c:7c:7f:4d:c4:07:42:53:8f:53:d2:59:
fb:df:22:ae:3b:c5:fa:d1:47:96:58:ca:2c:49:64:4c:36:f5:
4c:67:d3:b5:8f:df:54:59:c2:dd:6e:7f:33:d7:03:b4:8f:e6:
40:7a:b5:70:30:b8:5e:98:39:c2:51:99:a2:bc:7a:1d:57:db:
81:89:a4:c9:81:48:a9:c9:af:db:7a:40:a8:af:8a:75:1d:1e:
b6:a6:8f:91:a4:7c:10:d6:79:97:05:0e:d2:3a:c7:6f:a6:0b:
e1:c9:da:13:54:9a:d1:17:a6:eb:f0:aa:57:af:b1:65:76:af:
50:8b:f8:32:9e:e1:bb:6a:00:11:84:71:53:f3:81:bc:46:27:
d7:b3:88:16:24:bd:66:f7:02:cf:b4:47:a5:b2:fa:ce:0c:ab:
5d:42:0e:c7:1a:55:94:90:df:d7:76:9d:0c:49:ac:5e:c3:36:
12:44:42:ac:16:25:c5:66:7d:7d:4f:a7:6c:5b:c3:6f:80:8b:
1f:be:6b:5a:a6:bf:13:21:5e:49:61:ad:a3:9c:5b:a7:40:ed:
bc:b4:80:74:c2:5f:37:85:96:db:1a:d6:a9:35:79:91:a2:8c:
0c:32:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:47:51 2025 by rpki-client