Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa
File: 5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa (raw, json)
Hash identifier: rrTFMUPmADU7IPOpr+ZZDgZxSKLOP98Y6AG10H+66yQ=
Subject key identifier: 9E:B9:29:40:F0:E4:2D:84:47:4C:9D:5C:A4:2F:73:4F:1C:3B:75:66
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58203F95C6717E97043E880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:03:f9:5c:67:17:e9:70:43:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c3de8457-3794-459b-afe0-38a3d4589c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:21:7a:3f:85:23:22:b5:4d:58:a7:c1:1e:
d1:1a:34:29:56:d5:07:90:64:a6:10:ae:e5:63:8b:
4a:25:fc:e3:11:33:03:6a:52:2a:cf:cf:b4:65:7a:
27:00:d3:fe:0e:93:f7:98:8f:c3:7d:0b:ba:3b:d1:
23:8a:b0:35:cc:2b:fb:76:30:a3:3e:35:af:93:db:
df:cb:72:04:2b:7b:cb:71:eb:d8:a3:f2:c6:0a:c2:
aa:08:42:69:5e:0f:3d:bc:e9:ae:a8:1f:ad:cc:86:
07:ee:ff:12:b5:c7:bb:5b:95:97:b7:3d:3b:fb:3a:
53:34:c9:af:54:73:8e:bf:15:5c:48:51:76:12:b8:
b2:24:a4:5b:1d:8c:f0:58:64:ad:29:9e:32:f6:8e:
49:a0:5f:6f:80:e0:94:98:50:f2:99:cd:da:26:c0:
0b:70:3d:84:b4:4c:ef:e1:95:6c:72:a7:33:cd:28:
71:8b:27:f7:54:97:45:8b:69:24:d2:d6:06:de:49:
e0:99:ba:4a:50:be:da:2b:6f:b5:e1:22:55:eb:20:
8d:07:8b:47:b2:46:09:50:46:b1:95:65:b8:cc:ba:
fd:b5:aa:eb:68:df:3c:45:e4:f9:0e:6b:5f:41:27:
d4:30:2f:cd:c3:13:c2:92:bc:5e:93:f2:6e:9d:49:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B9:29:40:F0:E4:2D:84:47:4C:9D:5C:A4:2F:73:4F:1C:3B:75:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:66:38:6a:61:14:cc:36:59:fc:8b:a3:06:c3:bc:4b:d7:b6:
05:ee:53:e9:ca:9f:8c:eb:f7:c2:8a:5f:09:46:7d:02:4d:e9:
ac:65:14:9d:7f:f5:f6:61:4d:0a:f6:08:94:d4:73:04:ae:89:
82:3a:25:b2:88:2e:ab:5e:33:50:61:a2:10:81:00:1d:85:bc:
85:bd:94:a5:f0:f3:80:1b:60:ab:fe:9a:1e:9b:f7:80:2e:a1:
83:91:c2:ce:62:37:9e:07:3e:ee:13:2e:a7:11:1c:5d:e8:6c:
4d:54:af:34:17:8d:55:c2:95:bf:22:bc:15:5b:95:c1:e4:35:
b1:34:1c:07:08:a9:f4:9b:3a:3f:93:47:da:a2:ab:0f:62:f2:
2a:c0:7f:36:09:7b:47:89:34:59:fd:6f:33:ec:c1:94:c5:63:
01:a2:a6:7d:1e:17:8c:b7:d3:6c:3b:97:21:e3:f2:28:7f:16:
93:f5:a5:9a:7a:f7:bf:12:61:48:78:49:62:3e:ff:b6:7a:01:
62:2f:0e:b8:35:f0:f4:5f:56:64:60:f6:23:18:bb:4b:15:80:
4d:03:c2:ef:a3:3f:88:01:df:9f:28:7c:05:c1:f6:b2:59:79:
45:95:0f:4a:b7:ac:71:61:bf:8b:cb:33:a2:ff:25:c7:e7:7a:
90:4d:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:04 2025 by rpki-client on console.sobornost.net