Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa
File: 2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa (raw, json)
Hash identifier: NkmbR5c2Uvdbj7nWhuq5c/GNsfBtEL6slfW/KnB+lwk=
Subject key identifier: BC:23:65:F0:AE:47:BF:DC:4F:6D:B2:F2:E8:C7:F8:7D:68:8C:DA:43
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58185C28156B4E758653600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:85:c2:81:56:b4:e7:58:65:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2c485286-97d8-40df-bdf9-15db64de47aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:72:7f:ac:d6:84:52:b0:b4:0c:8d:37:c6:
37:7f:26:b9:b1:25:14:8a:b7:56:8c:4c:20:83:c8:
26:e3:b3:20:a2:e2:41:71:90:72:12:1a:a9:10:27:
95:21:a9:19:61:4a:f5:60:9f:e8:d4:30:ed:87:ad:
5f:60:f7:c6:2d:ea:5a:54:05:b8:24:c4:c8:5e:b3:
c4:ec:e6:84:92:73:9b:72:c8:a3:d7:dd:62:9b:ca:
77:d2:b6:2c:d3:90:79:6b:f6:f1:64:a5:75:22:3b:
9a:89:35:e6:c5:c2:ad:0a:99:84:7a:75:15:5e:ec:
dd:1f:55:80:ca:9b:04:14:e3:b4:84:d8:a2:c8:46:
60:49:19:a7:52:cc:95:48:64:cd:16:40:18:32:bc:
b1:0e:1d:e3:9f:22:09:fb:a2:49:0f:0e:5e:c5:e9:
b7:5d:71:82:23:f6:98:e7:49:8e:8b:f9:66:a2:b2:
ff:3a:e6:c8:bf:95:9a:04:06:64:b4:0d:4d:3d:30:
63:9f:df:0b:1d:f9:52:60:43:a2:de:22:61:a1:5c:
ab:5c:0c:2e:af:c2:8c:d3:4e:c2:18:8f:c6:2d:4a:
7a:e1:52:ce:45:14:87:03:b7:75:47:52:20:d2:b8:
86:6f:be:eb:51:29:61:01:16:34:7f:77:4c:11:d6:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:65:F0:AE:47:BF:DC:4F:6D:B2:F2:E8:C7:F8:7D:68:8C:DA:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:5e:9d:cb:d5:b9:21:88:be:ab:3c:65:ef:6c:d1:9d:3a:fb:
03:b4:34:64:fd:85:45:95:f4:b0:6c:5e:70:54:c7:d3:09:b1:
79:2a:ba:2b:fd:5d:c2:60:a4:c2:71:59:ef:49:e4:e2:88:0b:
fc:e0:16:7e:c7:84:82:39:19:e6:3e:7f:16:55:4b:9a:12:4a:
31:e7:bb:d7:df:99:ae:5d:c2:c5:e6:55:d8:0a:4d:94:33:f2:
2f:20:37:f7:83:b5:03:fc:c0:ce:d5:89:9c:eb:ae:b0:48:80:
ca:30:fc:3c:b0:03:94:41:cb:8e:6e:34:72:43:83:c7:46:e7:
2b:cc:2c:bd:5d:6f:df:fc:18:d6:18:f3:ac:28:82:9b:a3:51:
c1:99:0d:8f:ab:43:09:7c:b2:20:75:54:6f:b3:39:c6:36:33:
20:d0:0d:da:fa:5d:a8:43:7d:ff:78:cd:e4:11:4c:ca:f0:b8:
73:c4:d5:40:50:f7:7c:0a:90:3d:bd:dd:aa:32:24:a0:65:a7:
fb:73:6b:c1:50:4e:a1:dd:58:42:07:22:18:bd:09:aa:98:3d:
a9:9a:b1:58:e0:e0:f2:6f:77:4a:45:da:78:c6:ab:3e:da:ef:
c7:65:11:55:02:4f:5e:36:12:71:92:2c:00:6a:cd:5d:30:1f:
ef:67:a4:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYXCgVa051hlNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmM0ODUyODYtOTdkOC00MGRmLWJkZjktMTVkYjY0ZGU0N2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpyf6zWhFKwtAyNN8Y3fya5sSUUirdWjEwg
g8gm47MgouJBcZByEhqpECeVIakZYUr1YJ/o1DDth61fYPfGLepaVAW4JMTIXrPE
7OaEknObcsij191im8p30rYs05B5a/bxZKV1IjuaiTXmxcKtCpmEenUVXuzdH1WA
ypsEFOO0hNiiyEZgSRmnUsyVSGTNFkAYMryxDh3jnyIJ+6JJDw5exem3XXGCI/aY
50mOi/lmorL/OubIv5WaBAZktA1NPTBjn98LHflSYEOi3iJhoVyrXAwur8KM007C
GI/GLUp64VLORRSHA7d1R1Ig0riGb77rUSlhARY0f3dMEdbhlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwjZfCuR7/cT22y8ujH+H1ojNpDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg4OWEzZWYtMjgxYS0z
MDhlLWE4YjAtODJkOWI5YjJhMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBencvVuSGIvqs8Ze9s0Z06+wO0NGT9hUWV9LBsXnBUx9MJsXkquiv9
XcJgpMJxWe9J5OKIC/zgFn7HhII5GeY+fxZVS5oSSjHnu9ffma5dwsXmVdgKTZQz
8i8gN/eDtQP8wM7ViZzrrrBIgMow/DywA5RBy45uNHJDg8dG5yvMLL1db9/8GNYY
86wogpujUcGZDY+rQwl8siB1VG+zOcY2MyDQDdr6XahDff94zeQRTMrwuHPE1UBQ
93wKkD293aoyJKBlp/tza8FQTqHdWEIHIhi9CaqYPamasVjg4PJvd0pF2njGqz7a
78dlEVUCT142EnGSLABqzV0wH+9npIE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:03 2025 by rpki-client on console.sobornost.net