Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa
File: b3713e25-419a-33c8-af5b-3cb02587140b.roa (raw, json)
Hash identifier: obEPUyiF4vK2lDE30KZRf04kvTNcUFYkF/3Z9042n28=
Subject key identifier: 72:4A:49:47:06:A9:C7:3C:69:00:82:73:9A:CC:FF:4D:37:E5:F2:57
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817BCF29A9A34748125980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 11344
IP address blocks: 142.250.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7b:cf:29:a9:a3:47:48:12:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e8d42076-76ea-421d-9619-7e42b96a66e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:24:ad:73:fc:cd:a5:6b:79:a6:db:a6:d9:
1d:ce:9b:ff:b5:67:46:bf:db:e5:d3:2d:96:c6:aa:
73:fd:67:24:55:7a:5c:e5:94:ff:4f:9d:70:bc:35:
9e:e4:f6:2d:30:79:2c:c6:0e:25:0b:bd:c1:93:23:
9c:b4:6a:fc:db:e5:50:81:32:d2:ce:92:0c:4f:c8:
2f:87:97:61:f2:6c:c3:08:09:0e:ff:87:0b:45:cc:
f9:b3:c8:5e:ca:8f:89:5a:4f:95:a7:33:10:04:67:
10:ca:9d:27:5b:af:17:f5:d7:ac:63:0f:3b:1d:9c:
3a:7a:ad:2e:0a:cb:f3:5d:10:b2:41:29:8d:44:42:
ca:66:b7:52:2c:33:81:b3:20:20:28:98:89:7e:80:
7e:38:26:d9:6d:6e:e7:04:a0:52:89:15:45:a8:2b:
60:60:f1:34:00:66:89:07:12:ba:90:0d:b7:eb:55:
29:03:7f:dd:00:ef:cf:c2:07:64:eb:91:44:0a:46:
9a:b4:ef:89:01:fd:a5:d3:cb:8e:de:08:9a:cc:35:
13:2f:9e:23:6b:e8:79:55:dd:b7:52:dd:a0:bc:b4:
3d:92:9d:30:ab:56:30:5a:76:e2:7d:9c:78:36:23:
c0:05:87:d1:4d:e3:8e:34:05:80:5d:7f:26:a0:44:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:49:47:06:A9:C7:3C:69:00:82:73:9A:CC:FF:4D:37:E5:F2:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:4e:78:cb:b5:ef:82:4b:1a:87:e3:33:17:d8:bd:e5:2e:b9:
89:cb:de:80:44:16:72:52:57:43:c4:94:78:34:5d:98:4d:e7:
82:52:34:e3:f6:85:0b:2a:b9:1d:da:05:b8:aa:ee:67:79:57:
8d:79:0a:61:57:b7:c4:31:cd:c2:71:dd:cb:69:a9:58:c6:1a:
b4:fa:b9:ae:33:8f:13:21:d2:9a:53:a1:5d:9f:71:a7:44:25:
e2:04:fa:c1:d3:ea:3f:2a:84:c2:b2:b2:d2:b4:ca:4a:5a:b1:
58:eb:19:b5:5a:a6:b7:28:73:4b:9c:dc:42:3b:cb:55:74:4f:
aa:12:11:f2:74:b4:85:84:5e:3c:3d:f9:f2:07:be:88:49:1d:
0c:4e:d7:60:67:88:a2:6f:77:4d:a9:8d:a7:c5:e7:92:c0:83:
22:2b:2c:27:ff:32:66:b5:db:e4:8d:e6:26:57:f1:3a:68:48:
54:e3:81:16:bc:08:11:de:34:35:45:79:a4:82:00:ed:52:79:
f4:b7:f7:a0:76:fd:bf:bc:7c:13:f4:db:ff:33:3f:0f:a3:6e:
70:80:61:5f:02:23:ba:7a:b5:68:e0:90:fc:46:70:1f:2e:77:
a0:0c:3c:98:9a:56:da:3f:b1:97:41:9d:62:41:ac:32:35:3e:
8b:db:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:13 2025 by rpki-client on console.sobornost.net