Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa
File: a437d84b-eb8c-3132-8b30-68325fa0f33d.roa (raw, json)
Hash identifier: dFxDakILXjL8crWQmc6bz6UmISM6Ib6/b6TIdHPlRss=
Subject key identifier: 0F:BC:4F:E4:8E:28:22:13:DA:A2:AE:4E:66:97:C5:00:DF:B5:7C:4C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA125D909A4A78C5DB2FC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:25:d9:09:a4:a7:8c:5d:b2:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=6bdde51b-0d81-4321-aa85-83a2d82c1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:28:27:13:7b:4c:5f:43:19:e4:a3:b6:d0:
01:81:cb:91:38:cd:2f:40:34:42:5b:67:90:9a:44:
a3:fd:00:86:54:e2:ec:60:58:90:80:3c:ad:41:e9:
11:06:a9:60:2d:54:fe:72:c1:7f:89:91:14:43:27:
30:48:1a:f4:0a:60:cf:ef:06:c1:3c:5a:6a:83:16:
b9:c1:03:fd:6f:64:86:c5:06:28:a6:26:d6:58:bb:
a1:90:22:4a:79:1f:95:c8:0d:c3:4f:33:5f:d4:83:
bb:28:6f:a4:71:62:e8:9c:d9:bb:ca:c8:44:9b:93:
cb:2b:52:3a:72:a0:5f:05:32:2a:e8:5c:25:ed:81:
cf:75:89:1d:41:6a:87:84:ed:c0:fc:e6:26:3c:12:
55:9c:46:c4:09:cd:a3:40:36:33:45:e2:e1:8b:39:
c0:0c:4f:4a:e6:d8:5c:11:00:fb:fe:c2:c8:03:7d:
9d:3f:22:7b:06:99:99:4d:b5:47:e6:15:7e:6d:f1:
db:df:83:43:c6:9f:5e:68:2e:6c:59:98:d8:23:22:
c9:8d:fe:50:a0:35:65:63:41:54:6f:62:7c:b0:a7:
51:24:af:ac:b0:ff:ca:da:3c:82:4b:57:13:dc:90:
c2:eb:63:ef:10:f0:2f:95:a5:cd:6b:30:a1:1f:70:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:4F:E4:8E:28:22:13:DA:A2:AE:4E:66:97:C5:00:DF:B5:7C:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ed:ea:0c:13:e3:f7:06:2e:90:64:92:f1:cc:9a:20:73:8b:
53:69:24:88:87:f5:78:64:c2:7c:69:93:95:5b:59:e3:95:a6:
11:66:99:5a:12:ec:f7:31:9e:8c:8f:06:8b:97:b1:0b:33:64:
e6:74:a7:7c:2b:0c:68:6a:47:34:01:57:79:ec:3d:93:1b:91:
9c:db:98:5c:80:83:aa:ae:ba:fa:4b:af:ed:85:c1:8c:93:f4:
66:c2:8c:b2:61:2d:3a:4e:5a:39:e7:7b:b6:7e:1a:00:ab:e0:
cb:e8:d8:b4:2e:c7:a7:37:74:70:6b:43:13:5f:99:fe:85:27:
1e:d9:dd:c6:e3:20:8d:4b:6b:de:5c:77:0c:60:bd:3e:98:c3:
c3:d0:4a:38:d4:58:bb:fe:c5:61:58:f6:99:53:0f:2c:46:52:
60:5f:d2:34:b2:3f:59:74:d3:77:1b:8a:1c:b8:e9:c9:74:64:
3c:06:2d:e1:cf:97:a9:a6:ab:d1:04:ea:79:3b:fe:75:87:9b:
fc:d6:fa:b2:e2:73:e8:92:81:fe:35:cf:76:b0:1a:22:6a:dd:
88:66:86:2f:36:ac:bd:8d:e8:c2:10:ca:dc:0d:65:e2:ec:cc:
06:68:d4:00:a6:7d:a7:da:03:5e:fd:e0:a4:6a:ce:46:c2:db:
c7:98:c4:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSXZCaSnjF2y/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
NmJkZGU1MWItMGQ4MS00MzIxLWFhODUtODNhMmQ4MmMxNzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiosoJxN7TF9DGeSjttABgcuROM0vQDRCW2eQ
mkSj/QCGVOLsYFiQgDytQekRBqlgLVT+csF/iZEUQycwSBr0CmDP7wbBPFpqgxa5
wQP9b2SGxQYopibWWLuhkCJKeR+VyA3DTzNf1IO7KG+kcWLonNm7yshEm5PLK1I6
cqBfBTIq6Fwl7YHPdYkdQWqHhO3A/OYmPBJVnEbECc2jQDYzReLhiznADE9K5thc
EQD7/sLIA32dPyJ7BpmZTbVH5hV+bfHb34NDxp9eaC5sWZjYIyLJjf5QoDVlY0FU
b2J8sKdRJK+ssP/K2jyCS1cT3JDC62PvEPAvlaXNazChH3CzPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+8T+SOKCIT2qKuTmaXxQDftXxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzN2Q4NGItZWI4Yy0z
MTMyLThiMzAtNjgzMjVmYTBmMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHt6gwT4/cGLpBkkvHMmiBzi1NpJIiH9Xhkwnxpk5VbWeOVphFmmVoS
7PcxnoyPBouXsQszZOZ0p3wrDGhqRzQBV3nsPZMbkZzbmFyAg6quuvpLr+2FwYyT
9GbCjLJhLTpOWjnne7Z+GgCr4Mvo2LQux6c3dHBrQxNfmf6FJx7Z3cbjII1La95c
dwxgvT6Yw8PQSjjUWLv+xWFY9plTDyxGUmBf0jSyP1l003cbihy46cl0ZDwGLeHP
l6mmq9EE6nk7/nWHm/zW+rLic+iSgf41z3awGiJq3Yhmhi82rL2N6MIQytwNZeLs
zAZo1ACmfafaA1794KRqzkbC28eYxO8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:07 2025 by rpki-client on console.sobornost.net