Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa
File: df44435b-e5e2-3f3c-af09-a946a39238d3.roa (raw, json)
Hash identifier: olfHSRYIxMrHRIU436E7AV7EY1yTpSBdIbg4RYacBU4=
Subject key identifier: 34:D4:85:B3:74:BD:41:37:F5:50:13:9B:FD:EF:6B:A4:8B:35:8D:52
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B6807FBD83966AC59F380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.250.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:68:07:fb:d8:39:66:ac:59:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=1e2dc748-092c-465d-aef3-97e052fe1c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:97:6b:39:24:5d:d2:2f:a7:2c:0b:67:15:
82:c7:44:cc:81:be:0d:3a:f6:68:d9:5d:1f:40:2f:
47:d4:3d:51:3b:a0:9a:96:b2:56:a8:5c:02:16:1a:
81:3c:45:f9:af:ce:8b:53:53:e6:5a:fe:88:c5:c8:
1f:07:9f:50:14:66:5e:ff:d1:83:53:62:8a:c4:66:
5a:f1:4b:54:87:22:9e:9e:a5:64:4c:6e:b1:d9:e7:
48:f9:fc:03:56:c6:4f:08:1e:8a:8a:7a:e9:17:39:
e8:4b:a1:73:ef:f9:fa:67:3f:5d:c4:42:99:11:c7:
31:93:90:07:82:2b:f5:72:f8:a5:b1:65:dc:50:bd:
8e:7c:6e:7e:03:57:07:87:c0:ff:60:29:11:dc:56:
a9:ad:93:bf:83:9c:23:85:cd:41:12:95:c6:83:b6:
48:c4:9e:b5:d2:e9:c8:14:f7:bd:35:4b:16:70:cf:
8d:d3:2e:9b:bf:57:5a:6d:12:fd:d3:78:1f:1e:88:
98:d1:40:3b:d2:e5:27:cb:90:6b:eb:ff:c2:2e:b4:
88:23:5e:91:e9:e0:6c:81:a1:fb:81:96:94:57:50:
6e:c6:2a:82:e0:35:7a:22:ff:c0:82:67:61:ef:3d:
60:cb:e8:ee:fd:d0:6b:76:61:7d:f1:67:96:18:20:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:85:B3:74:BD:41:37:F5:50:13:9B:FD:EF:6B:A4:8B:35:8D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:98:88:71:5f:21:e2:c2:81:87:e1:f1:c6:cf:46:10:f9:5f:
a3:45:93:3a:07:31:07:a8:06:4b:13:0c:1b:38:64:73:cf:bc:
e7:c1:d8:17:07:52:85:d5:36:8e:03:dd:fd:6d:2b:6e:1e:f0:
00:31:5a:59:c3:e1:42:20:aa:84:f6:3d:b0:99:0e:70:7b:41:
db:97:50:d2:eb:32:63:09:eb:ad:e6:5c:d6:1e:73:3b:85:ad:
ec:d1:9b:b2:af:7c:4e:37:28:21:46:18:99:af:c8:23:90:2d:
ce:3c:b1:05:f9:83:41:0a:18:a8:ac:c0:90:62:b2:e1:98:5f:
e6:32:19:ab:dd:7c:37:5f:9e:2d:bd:3d:5c:92:36:f8:a2:63:
fa:f0:7f:51:d4:49:a2:fa:ef:71:44:a0:ab:33:b5:68:60:44:
69:18:9b:c5:1a:51:07:95:b7:c3:a5:49:1e:4f:08:07:a9:ca:
8c:d9:08:f9:07:54:16:2f:a9:7b:05:c7:c5:b9:85:ca:e1:86:
76:e6:a4:70:2d:ba:1f:36:3d:61:ea:e8:da:e7:31:02:84:39:
ef:05:6b:1f:cf:5b:27:3e:b4:a4:57:ba:a7:28:77:71:98:b2:
3d:82:12:fa:18:3a:5d:7f:db:88:f6:7c:77:cd:1a:df:e8:25:
73:c2:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:50:34 2025 by rpki-client