Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa
File: df44435b-e5e2-3f3c-af09-a946a39238d3.roa (raw, json)
Hash identifier: eVPm+hPzPuRkWBvP4GueVhuWxegXFgOlpFxAH9vYNZs=
Subject key identifier: E6:55:82:53:19:64:45:F0:E7:11:54:F5:FC:DA:28:5C:89:F1:25:3A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582319EDFA09BC216FBDD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:31:9e:df:a0:9b:c2:16:fb:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=b532986d-db30-481e-9c26-ce1d8bf5594e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:31:8f:30:7f:09:77:38:a7:9f:df:74:bc:12:
21:db:2c:61:9b:37:af:e1:a1:11:67:7d:54:8b:70:
16:1c:07:65:c9:97:dc:8d:c2:7f:3f:6d:87:ef:8d:
4f:0e:2c:26:cd:62:b4:23:aa:8e:c0:79:b2:1d:d6:
f3:6b:db:83:37:3d:aa:58:38:1d:b3:04:79:22:07:
cd:23:3a:36:63:1b:62:c5:47:10:70:a8:05:71:bc:
bf:82:27:59:20:dc:d4:d4:67:72:75:b3:a2:02:7b:
1c:5a:a5:19:16:a4:a2:3d:3a:a0:41:70:7f:11:06:
de:e5:05:2e:f1:61:12:d1:92:e4:5c:fc:b1:86:bd:
51:02:23:3d:53:b2:54:57:b9:a6:87:ed:d0:0b:38:
bd:13:d8:93:85:b7:04:ce:68:63:98:b1:f8:8e:e4:
10:ee:6c:71:2a:73:d6:76:62:a3:a4:0f:5d:39:bb:
8d:60:a4:de:82:2d:6e:09:f4:56:ca:a8:26:54:b1:
4b:62:76:9e:34:d9:89:25:aa:c8:55:95:f0:f3:40:
96:38:61:41:85:22:8c:24:c6:06:03:3d:e3:65:ae:
3e:82:24:e4:10:6d:11:28:40:b0:4c:80:4c:0a:4c:
2b:1b:c8:ce:63:07:df:18:b8:9d:d2:f5:17:05:a7:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:55:82:53:19:64:45:F0:E7:11:54:F5:FC:DA:28:5C:89:F1:25:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:4c:fb:5d:e4:ee:3a:65:46:76:d6:40:12:b8:0d:65:ab:d7:
49:ce:10:8d:8b:35:d7:a7:97:4b:90:49:c4:42:e7:f8:21:7e:
5e:c4:30:8b:8a:84:bd:34:aa:b5:a3:6f:8e:5a:63:d9:c8:19:
68:4d:2b:70:27:d6:99:33:61:de:31:9e:2d:ca:80:ed:dd:b0:
15:f4:b3:49:f9:06:26:d0:d4:8a:54:d6:af:b2:26:56:ba:e0:
81:04:3b:b5:8c:f8:4f:ae:1c:ab:24:c8:5c:bc:32:a5:97:3e:
e5:37:58:4d:4e:89:ea:b9:1b:45:45:ca:d9:96:dd:b6:9b:14:
ee:01:d4:f7:a3:f9:5b:5e:0d:1e:88:fc:74:ef:1a:6a:ab:3e:
71:76:50:00:83:3f:ab:03:43:1c:61:ad:66:64:bd:e2:c5:34:
d7:c7:b2:6b:8d:1f:b3:11:58:26:da:f3:04:ca:15:5c:dc:47:
ca:3f:f7:3f:39:e9:3a:4b:3e:82:70:42:82:9a:9b:f2:65:5c:
2b:23:ba:83:13:f0:a6:d5:eb:92:2f:91:6c:08:29:66:c5:f4:
06:b1:2d:5d:73:ca:0d:01:50:6d:28:82:1b:3d:99:17:a7:45:
c9:a0:35:76:77:f8:46:b3:09:43:b9:4c:97:1d:a4:c3:29:4e:
5e:4c:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:14 2025 by rpki-client on console.sobornost.net