Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa
File: f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa (raw, json)
Hash identifier: OC4tLaSBxn5+b9CiPOKlxkF83Pn78dWVQmJapDsA57k=
Subject key identifier: 31:99:41:B6:EE:B5:93:46:73:B5:B5:FF:50:55:C2:D6:1C:25:47:93
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A7440A5D675A0FC662580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.250.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:40:a5:d6:75:a0:fc:66:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a4064beb-f86c-4daf-bfb9-9768efb416f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:3b:30:5d:7a:e2:30:f4:01:9a:74:d6:0d:
a5:1c:2c:d6:14:2e:aa:bc:cd:92:ac:60:9b:17:3b:
12:19:23:41:5b:44:15:c5:ae:b8:cc:51:c4:34:e2:
f4:c1:ca:28:00:0c:48:3f:d4:35:a3:99:60:65:5b:
e7:ca:c7:6b:b9:f8:3a:0e:df:f6:49:00:8a:6d:6b:
4e:83:7b:dc:fb:1d:10:0f:6d:3b:f5:ad:44:3e:56:
23:27:6b:f4:fa:7e:15:b1:3f:90:f5:ad:c9:51:85:
8d:7f:1c:a8:5c:bf:67:6e:65:cd:05:67:2d:66:f4:
5b:d7:db:74:96:7a:6b:e8:bc:65:f3:ac:34:17:db:
2d:35:db:87:b6:a7:0c:8f:66:29:61:48:e5:4e:b0:
4d:98:c5:a5:ad:7c:72:7b:95:da:a1:29:25:52:2c:
b1:f5:4c:a1:ed:66:79:93:73:2a:c5:29:95:bd:2d:
86:94:0c:38:47:fc:28:5d:e6:98:0b:b0:a1:3f:07:
a0:6b:6f:b2:ae:bb:f1:88:85:3a:9a:78:37:8c:77:
f8:f7:96:96:d1:fc:84:c9:13:c4:b8:0e:60:09:cc:
ea:28:ea:1b:70:3e:c2:95:cd:00:33:7d:e5:6b:32:
55:9e:85:3b:fd:ae:49:bc:45:93:38:e1:48:17:0b:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:41:B6:EE:B5:93:46:73:B5:B5:FF:50:55:C2:D6:1C:25:47:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a1:73:5f:57:9e:78:3c:aa:61:29:51:0a:e6:bc:b6:92:58:
d3:4e:96:d4:85:a0:be:64:41:58:b2:37:15:6d:79:76:e6:96:
e8:93:18:e5:1a:99:33:f8:a9:43:cf:b7:fc:a5:75:24:b5:8a:
78:4e:cd:21:49:ab:ce:16:cc:18:56:7f:bc:73:98:69:1f:5c:
58:35:44:ba:b1:0a:eb:17:f0:24:7e:8c:b1:70:5b:39:ff:21:
db:a4:3b:ba:8a:40:27:8a:f3:04:51:c5:7a:08:7f:39:3b:58:
b6:98:05:6e:f4:de:6b:99:b0:0b:42:a2:28:48:c4:a3:16:06:
ce:f3:ab:f0:b8:89:20:25:d4:48:31:6b:45:29:45:02:65:c1:
e9:01:b0:b0:3c:dd:eb:19:69:40:95:9b:ad:c4:c4:93:a0:c9:
20:a4:c2:f0:f6:24:36:1b:f4:0f:b4:a9:56:cd:ef:2a:43:cc:
73:be:0d:d8:d1:3b:a3:95:dc:d6:cc:d5:ed:86:37:72:4a:d1:
e0:58:9c:b4:42:5f:8b:bd:df:da:0d:d2:8d:c8:f2:22:17:ac:
34:3b:a7:54:73:0a:b4:91:b0:4f:7c:41:9a:84:c2:fc:26:e4:
bb:95:81:bb:56:94:c5:4f:c3:a8:82:c8:fd:63:19:5d:d4:3e:
ee:e2:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:34:34 2025 by rpki-client