Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8c0b66e-4c4e-30de-927d-314d949f89cb.roa
File: b8c0b66e-4c4e-30de-927d-314d949f89cb.roa (raw, json)
Hash identifier: tMsOeuEBpOcSX6xXIVRgQc/5cQHZKEfUkxXSCKqa4TA=
Subject key identifier: C4:AF:05:84:00:1F:EC:C6:9A:C4:D9:55:44:35:DB:64:4F:B8:95:92
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA992DE6E261829035F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8c0b66e-4c4e-30de-927d-314d949f89cb.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 36040
IP address blocks: 142.250.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a9:92:de:6e:26:18:29:03:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=86bb8e4f-34c7-41c0-ad3c-0fdd6a7546ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:80:95:67:1e:05:33:31:68:0f:80:6f:0b:
c1:47:01:34:3f:2f:d2:cf:62:35:51:99:e2:81:af:
f1:94:ee:52:56:b1:2c:f6:78:65:f3:3d:77:ec:7e:
ae:f5:e8:2e:30:46:de:d9:3f:7a:96:29:79:82:ce:
5b:56:26:c5:96:73:52:99:e2:8f:58:f7:ef:5e:ac:
2c:0c:0c:cb:57:bd:15:e1:c9:eb:8e:26:d3:79:67:
9d:3d:2d:52:26:80:69:99:35:93:1b:2f:f5:0b:42:
c5:41:6c:77:8d:ad:76:33:86:52:1a:4e:80:a7:a9:
ed:c1:57:12:fd:85:a3:2a:46:13:cf:64:5a:cd:ee:
65:be:93:e0:71:f4:d0:de:9e:21:fc:76:74:7a:23:
5f:50:ce:95:e3:96:94:79:11:84:08:79:5d:82:c6:
cd:03:88:c6:53:bf:d5:4f:7d:86:85:b2:40:08:7b:
ed:56:e3:73:a7:15:27:06:7a:3d:18:28:cb:b0:78:
7c:26:1e:92:c9:6f:85:9e:15:9e:5e:bc:89:c3:d5:
1d:44:2d:b6:6b:31:da:d8:5c:ee:78:64:24:a2:d5:
12:96:8e:5d:56:d8:fc:dc:e2:46:ba:9d:a0:94:25:
98:c9:e1:71:5d:62:6e:0b:5c:c2:da:17:a1:b1:d1:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:05:84:00:1F:EC:C6:9A:C4:D9:55:44:35:DB:64:4F:B8:95:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8c0b66e-4c4e-30de-927d-314d949f89cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:94:d2:86:0d:80:85:b9:d0:27:d7:1a:72:e5:7e:a5:c9:37:
a8:52:f8:64:60:82:91:ef:f7:a4:c2:91:07:54:5d:ed:8b:57:
3f:fd:43:23:2f:e5:0e:ea:61:be:c2:34:8f:c4:fe:b9:1c:47:
2d:9f:73:dc:b0:c9:3e:58:21:1f:06:1a:c5:8f:17:93:85:9c:
1b:c4:d9:b2:2e:56:61:c3:f0:b2:19:a8:9f:44:14:7e:aa:d1:
c3:34:4d:a1:e7:fe:2e:08:4f:23:88:41:fd:ea:46:57:17:87:
8a:af:20:38:ec:d9:ab:fe:4b:f8:b5:8d:56:b6:d8:c1:55:85:
ad:2a:ea:5f:68:a0:61:a6:b9:f1:14:22:41:21:52:9d:50:bf:
c4:db:4a:20:7c:eb:e7:38:e0:f0:06:34:8b:34:ed:a1:18:bc:
aa:3b:b9:62:f5:92:78:d1:c2:5c:f7:51:fb:9e:f3:50:35:9f:
e1:28:79:02:46:2a:07:03:76:fd:24:f9:f6:53:37:1b:fe:26:
64:89:ef:fb:91:0b:d4:ff:9b:b1:93:3a:a2:c3:21:2d:89:99:
46:b3:ff:d6:ee:23:61:5c:df:6f:ab:67:40:65:7e:f9:ff:eb:
c8:59:a5:52:62:02:43:ad:c5:c9:a8:15:96:82:83:41:74:81:
c7:17:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:49:55 2025 by rpki-client