Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa
File: da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa (raw, json)
Hash identifier: cM/GTcA/9PBpWnW3VaMJnnVcaxA94TWNxBTt6pTe60k=
Subject key identifier: 55:18:43:DF:4B:F8:DD:57:1F:27:A4:18:DB:2C:79:EF:41:A7:20:51
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A61B121C0C04F5DE99100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.250.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:61:b1:21:c0:c0:4f:5d:e9:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0bee45c1-eab2-40f0-a61f-63bfef40d3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:32:72:6c:15:df:35:18:30:8c:53:c2:97:
45:c7:d6:a7:e9:02:ea:17:70:4b:c6:7c:34:ce:19:
31:78:c3:9b:c6:06:76:63:bc:19:7f:cb:a1:ea:a4:
c9:cb:2a:85:c9:df:71:1a:f5:e0:d7:06:8c:0d:56:
06:1e:f6:56:7c:7e:66:1e:45:a8:46:11:a7:4f:8f:
41:c3:9b:9d:49:fb:48:63:a9:98:4a:30:54:45:69:
80:28:33:e8:e3:80:da:43:4e:d2:33:05:91:4c:f5:
94:61:8b:46:c0:aa:a0:75:06:a8:b4:f6:1d:f5:15:
3c:66:1f:16:a2:d5:3c:92:de:d0:e8:2d:c1:49:b3:
19:81:2d:ae:23:01:79:89:47:3c:6e:a9:f3:50:31:
82:b0:d6:b4:32:31:96:17:60:13:ef:fc:d9:30:dd:
42:c9:54:92:69:69:8b:79:7f:84:ab:cf:a6:19:3a:
b0:13:b7:15:ab:0b:af:cd:04:6f:28:25:c6:8f:1b:
cb:4e:2d:dc:a7:85:34:6b:e7:99:ae:5e:12:36:c2:
f7:98:d0:67:6a:0a:9d:6d:bd:39:8d:28:9c:44:42:
e6:bf:1f:e2:f6:0f:4f:d7:91:b3:71:03:ff:e7:74:
b0:fd:f4:70:b9:86:13:2e:76:d9:60:09:7d:1e:4c:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:43:DF:4B:F8:DD:57:1F:27:A4:18:DB:2C:79:EF:41:A7:20:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:32:7e:42:8f:e8:85:a4:61:79:3b:30:a7:1c:db:26:8a:a5:
c0:06:97:d1:a5:f0:e4:5c:3d:b8:61:64:84:4e:d2:fd:8d:be:
cf:16:30:0e:ce:ef:b7:60:c9:11:30:b2:ba:13:47:b3:31:1e:
f7:f0:df:e7:76:d5:6a:eb:47:1f:af:67:02:1b:50:01:9e:0f:
90:b0:1a:f0:df:da:63:96:4e:90:e3:ce:3a:38:52:ba:a1:72:
7a:a7:89:61:77:de:32:22:d0:b7:76:54:11:86:dc:44:62:3c:
cc:58:2e:85:d1:d6:27:74:0b:e8:5c:7a:eb:57:54:5d:25:5a:
fd:a1:71:97:b5:c4:c0:a8:c1:b7:83:c4:b3:fd:81:46:22:ae:
2b:09:2c:d0:9d:ab:9d:17:b0:34:78:4b:56:bf:70:58:6e:df:
0e:b2:46:f6:a5:21:fd:2f:3f:64:04:5f:a5:39:f8:76:3a:84:
d8:63:fb:5a:7c:03:1c:6a:9e:55:d8:f5:30:cd:77:bb:9c:b5:
f8:69:26:a7:0d:78:d0:de:4d:74:94:75:de:07:c0:5e:90:5b:
d7:32:cb:92:9d:d2:21:9b:17:d9:26:34:32:fd:39:05:b3:98:
3a:a4:62:29:ae:57:23:95:d2:f4:90:39:27:5b:be:ab:1b:a5:
fb:25:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:08:02 2025 by rpki-client