Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
File: d0ad8b12-f500-35ad-bbab-c68990fd814c.roa (raw, json)
Hash identifier: 3n+B4w+0pPamJ/neMg/qCNsdM4sSj4OzVKXyuUfMcy8=
Subject key identifier: 0D:49:6D:EA:67:A5:70:01:61:17:5C:03:39:20:68:37:F3:F8:60:F2
Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial: 010D0C9F43285848F05305087BADEC8AF2623B00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
Signing time: Wed 19 Feb 2025 22:08:10 +0000
ROA not before: Wed 19 Feb 2025 22:08:10 +0000
ROA not after: Tue 20 May 2025 21:08:10 +0000
asID: 20454
IP address blocks: 125.253.70.0/23 maxlen: 32
125.253.72.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:53:05:08:7b:ad:ec:8a:f2:62:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Validity
Not Before: Feb 19 22:08:10 2025 GMT
Not After : May 20 21:08:10 2025 GMT
Subject: CN=8a604a05-db5a-499c-9051-833f19945fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:c8:38:7e:1b:65:ef:aa:46:51:63:50:5c:
74:12:df:1e:20:27:27:ee:d4:82:ab:e8:30:d2:f3:
5b:5f:64:e1:53:01:eb:e8:d7:e5:bd:1e:2c:40:63:
a3:3b:60:11:f3:cd:aa:11:2f:68:c2:ea:71:2d:00:
72:04:3c:9b:a0:53:82:53:80:5a:8a:05:92:56:44:
35:8b:e8:ea:2b:eb:f0:72:4a:55:8f:54:27:31:5c:
21:ba:9e:32:d2:5d:ed:fb:db:61:54:ff:3d:bb:76:
ed:11:d2:01:6e:fb:46:e3:c2:c5:89:78:34:ea:9d:
5d:09:b5:14:4d:a0:7b:db:02:cd:f5:b7:e4:09:e1:
43:7e:01:1d:98:3c:37:17:66:9a:3b:a8:b2:2c:8b:
e2:1d:d4:e7:6b:48:55:31:33:0e:56:95:cf:75:c7:
1e:db:a7:4b:f1:56:b0:7e:55:e5:a0:a3:f6:8b:20:
4a:d0:bb:47:25:92:a2:c5:58:c4:8d:46:2c:36:0f:
1a:5d:8c:35:fe:90:e7:aa:62:dc:d9:ff:f9:5e:25:
73:8d:2b:e1:b2:89:f0:f3:8f:af:25:3f:c1:03:59:
64:c2:51:02:26:bd:fd:fc:4e:33:79:54:a2:65:c8:
9b:2c:f7:15:70:ec:2c:ef:b3:b9:db:51:3a:4b:b4:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:6D:EA:67:A5:70:01:61:17:5C:03:39:20:68:37:F3:F8:60:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
sbgp-ipAddrBlock: critical
IPv4:
125.253.70.0-125.253.79.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a3:70:2a:14:c0:10:69:3e:8f:76:11:54:30:04:7b:86:f9:
24:69:de:15:65:a9:63:b8:ca:22:4a:a4:86:38:3a:96:c9:b2:
78:e9:9f:50:d9:09:f1:92:16:30:51:cf:f9:d0:c3:7f:16:cb:
d2:57:b8:fd:fb:a4:b9:97:48:e7:af:e1:2f:fb:7d:bb:fd:0b:
16:ab:ad:c9:71:46:e6:a9:70:61:85:e1:b3:3d:46:28:79:85:
af:5d:69:9d:b9:e9:1c:44:eb:11:73:fb:9c:a3:81:49:73:d5:
1d:03:2b:ff:26:f3:63:a4:7f:d6:30:81:28:33:d4:7a:8f:d8:
3d:f6:67:1b:1b:84:8b:3d:1c:ec:ab:59:c1:0f:99:0a:ea:9d:
fa:f5:7f:10:4e:a6:38:15:e7:2d:47:cf:2f:8a:42:3d:72:0d:
2e:20:2d:8c:21:7a:05:6d:66:3d:e7:df:35:0b:22:14:0e:13:
5e:83:70:a5:63:5c:92:fd:94:22:42:68:02:ce:b7:96:72:b2:
01:e4:34:ec:2e:6d:8a:ee:d9:1d:18:a6:ce:39:e8:89:ce:04:
63:8a:64:ae:c0:09:0b:6b:cd:d4:61:39:a1:62:07:0b:de:42:
31:2e:bd:af:75:f8:f2:b7:58:56:a9:fd:f8:37:4c:05:13:18:
f3:1e:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:20 2025 by rpki-client