Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
File: ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa (raw, json)
Hash identifier: lqoo/C4abb3+TTeCpOPSssFDY+ObEvn0R6lny5rfeh8=
Subject key identifier: EA:DD:F0:6A:6F:1E:BC:3C:86:5D:DB:81:59:42:8C:C9:3E:6C:4A:F9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6BA61D15B399F499EF80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.250.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6b:a6:1d:15:b3:99:f4:99:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=dc72e048-3895-4160-8353-527c372a6d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:e4:b3:f5:56:9a:e2:f4:84:e7:9e:88:ee:
f1:3e:1e:9a:44:73:8a:67:43:19:c0:e7:6b:79:5a:
05:b3:29:cc:b1:17:15:c0:e6:f3:e1:ec:6b:9a:90:
3a:48:6f:cf:a1:6a:9f:2a:a0:ca:83:d5:98:d8:8a:
78:a3:e6:78:75:1a:1d:90:84:7c:a2:db:df:8e:8f:
0c:ba:3f:8e:c8:ee:b4:7c:cd:64:fd:72:99:d4:e4:
cb:a6:50:89:60:b4:d7:95:15:81:72:3f:52:b9:bf:
85:20:ce:7e:42:f0:04:b5:66:ce:21:f4:43:e1:43:
bd:50:24:38:83:ee:a8:71:21:7f:c3:8c:91:e5:c3:
e3:62:38:19:33:af:21:eb:d1:8c:64:f4:08:bc:41:
0d:97:99:45:36:11:b3:b7:88:8a:50:92:c9:7b:48:
a7:8f:ac:dd:75:cf:71:50:92:d0:38:68:41:24:00:
b5:6e:2b:41:92:95:39:82:0c:f7:ed:a3:bd:74:ab:
2c:d2:fb:65:18:b7:16:fd:a4:52:f0:4a:c4:db:a6:
97:37:23:e0:c0:dc:92:66:78:7e:73:46:cc:fd:2e:
d6:87:a5:29:52:b0:f8:7c:58:78:44:b1:e7:c0:a1:
22:23:4a:e4:de:f3:08:f6:a7:36:ee:09:45:fc:2d:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DD:F0:6A:6F:1E:BC:3C:86:5D:DB:81:59:42:8C:C9:3E:6C:4A:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:2f:e2:f2:38:80:ce:cb:aa:9e:2b:96:dc:2b:c8:06:00:a5:
a2:68:10:d5:36:52:0f:8b:5f:63:0f:aa:37:3f:c0:9d:7a:54:
10:22:1c:39:b7:56:25:2e:1a:17:a4:0d:e2:e8:45:db:b3:bd:
d5:21:4c:dc:ea:5f:a1:88:53:0c:cf:db:a4:4d:08:18:8f:6a:
8c:90:43:5a:47:b0:e1:69:5e:39:ef:05:ee:75:ef:1f:b5:f6:
9c:08:c1:64:68:91:e7:22:54:6f:f1:f3:30:52:3c:c3:34:8d:
0a:1b:55:b0:3e:d3:c1:d0:4f:03:95:61:58:da:2b:67:7e:b8:
f8:a3:ff:cf:ef:95:29:6d:32:65:be:e1:68:4b:a1:28:cb:32:
de:bb:01:9f:c0:0b:93:a6:70:85:a7:4c:5f:95:41:f5:ae:59:
94:cb:16:10:c9:9d:2c:b0:9e:83:eb:94:c2:fc:54:9e:38:f3:
40:63:d0:4d:fe:b6:07:00:33:f8:24:60:0b:a9:59:31:ee:14:
5b:00:7a:f3:1e:54:99:24:04:c2:56:bc:b3:c4:60:f1:b5:75:
4c:f1:e2:07:03:04:5e:c6:6f:4f:b6:0e:c0:61:90:79:1a:b1:
24:62:4d:28:49:ca:e3:a1:ff:59:66:4d:f9:cb:ca:7c:b1:67:
77:3b:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:23:24 2025 by rpki-client