Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa
File: b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa (raw, json)
Hash identifier: k942sy3DC1O9KNmadWWnhvhqbUWfvdFZ/hmVw7IdNBA=
Subject key identifier: A5:00:97:A8:FB:B0:E6:37:3D:42:D4:77:18:2A:E3:9E:13:20:CA:96
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818124322B6CB0F8E0D780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:81:24:32:2b:6c:b0:f8:e0:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5ff3587e-8bbb-45bc-b0ce-ba50061a58a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:12:3e:0e:b0:62:ca:cb:41:83:67:af:86:
46:7d:17:ad:8a:ba:15:b0:c2:c3:4e:5a:8c:24:a9:
f9:21:b7:69:2d:8e:55:60:32:e2:e7:ce:b9:44:9a:
71:3b:b6:c6:51:eb:59:17:9a:9e:be:ff:a8:e7:68:
80:30:36:c6:69:9d:b4:f9:7d:dd:df:f6:cf:99:72:
01:3b:9d:02:56:de:80:57:06:03:84:6d:bd:81:2c:
03:1e:7a:f9:a1:d8:52:28:01:ba:28:e4:d1:b6:a9:
67:c5:b6:79:25:3c:43:9c:a6:18:9f:32:04:ee:cd:
57:7b:5b:05:90:d0:ac:f7:46:9d:ed:97:be:32:93:
f9:aa:e5:a8:9e:34:d3:d8:f3:fb:5d:d9:91:58:5b:
53:45:0d:1e:16:50:b4:62:08:de:68:4b:43:4a:7d:
d4:16:00:77:5d:88:08:74:a7:d3:5c:97:6f:0c:17:
19:cc:73:24:09:6b:e2:11:e8:9f:24:27:1d:73:3a:
e6:64:9c:ba:0d:21:12:d9:1c:17:8f:40:a1:a5:81:
be:e1:56:ac:dd:a6:c7:55:f8:1c:3e:ff:f1:ff:d2:
6e:04:0e:2b:e7:d1:6f:59:3d:ee:3a:cc:8b:8c:f7:
c4:c0:e5:dc:37:ae:48:aa:9c:f1:a8:20:41:bb:29:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:00:97:A8:FB:B0:E6:37:3D:42:D4:77:18:2A:E3:9E:13:20:CA:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:bf:4e:22:b9:a2:12:6f:00:1a:fa:e9:3a:10:69:aa:63:c7:
d2:17:72:db:c8:2a:19:e0:43:68:71:85:67:4c:ae:8f:27:c1:
50:4d:92:fa:41:e7:4a:0d:5d:d1:d6:1d:99:7e:d3:9f:99:2c:
43:08:15:bb:7b:df:35:f1:2d:56:d9:e3:15:b1:d2:1a:5d:47:
6f:af:76:b7:b8:9a:22:aa:23:0e:fb:a4:af:88:bd:1b:9a:2d:
63:29:5b:98:91:ee:e9:91:c8:3d:c9:12:14:b6:d2:53:7c:25:
07:f8:23:58:7b:57:02:5f:2a:95:73:98:64:9f:51:9b:63:40:
a3:41:70:8c:cc:e2:ba:7c:a8:04:e4:fd:11:cc:7e:52:7c:22:
ed:c4:fd:c2:6b:f6:21:71:56:56:ea:31:05:68:04:c8:8a:5b:
b8:5b:0d:09:3b:15:74:84:6b:de:60:85:69:56:1e:ec:b5:5d:
e1:41:1c:70:1c:a7:90:e1:65:e0:03:b4:7b:4c:cc:1f:e9:d3:
a3:03:c3:f4:34:45:41:80:a6:10:c2:d5:69:06:ee:6d:50:1e:
8d:39:53:01:a2:18:84:43:d4:31:89:d2:70:0a:18:d1:3f:a6:
d0:3b:76:7f:b6:b5:5a:d8:30:c5:49:45:c8:36:37:63:75:db:
b6:0f:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:13 2025 by rpki-client on console.sobornost.net