Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf7da1b8-ddd3-331b-9fba-48a3132c219a.roa
File: bf7da1b8-ddd3-331b-9fba-48a3132c219a.roa (raw, json)
Hash identifier: nQKxKopRlcJ8d7L4Kdn+L7/AFfJJKumE/9J0gFCbO9U=
Subject key identifier: 5A:2D:15:D3:21:E8:2D:42:1B:A5:38:7C:3F:B5:25:0F:F1:38:81:29
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848F00C4A826890EAED4BBC7B70
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf7da1b8-ddd3-331b-9fba-48a3132c219a.roa
Signing time: Wed 19 Feb 2025 19:45:39 +0000
ROA not before: Wed 19 Feb 2025 19:45:39 +0000
ROA not after: Tue 20 May 2025 18:45:39 +0000
asID: 204957
IP address blocks: 142.111.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:0c:4a:82:68:90:ea:ed:4b:bc:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 19 19:45:39 2025 GMT
Not After : May 20 18:45:39 2025 GMT
Subject: CN=d0060876-a36d-49ed-8d2f-98a5a438e059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:07:05:4d:da:5b:79:d5:39:7c:75:15:d8:bd:
67:3d:a5:a2:18:89:f4:a1:10:d5:a9:9b:e2:d7:d3:
f8:27:32:25:d0:36:8b:8c:8e:2d:8f:47:38:8a:c1:
f7:8f:fb:0d:6b:05:3e:e2:f8:c4:05:9e:36:d3:58:
88:84:90:3d:2a:e0:c4:2f:7f:34:0b:83:98:53:8c:
e0:d5:47:62:a3:36:5c:4d:ec:ad:30:2b:1d:eb:3d:
2c:b0:57:b7:9f:ba:b7:81:f2:b2:11:f3:1b:2d:20:
39:6f:4b:86:ce:64:6e:eb:36:4a:84:2b:a7:fb:62:
87:81:d5:bf:d6:d8:fd:63:42:70:83:33:f0:5a:4c:
3b:de:87:6b:7b:25:77:3b:31:74:ba:f5:0b:a8:ad:
a8:ca:07:48:a3:53:13:1a:ad:38:41:03:b1:d9:ca:
30:92:be:bd:9d:23:84:1b:87:f7:71:44:3f:4f:c1:
07:bc:63:88:09:24:35:8b:0f:5b:ab:51:3a:18:3f:
8f:bd:4d:b1:27:bf:07:f6:08:fb:95:de:22:43:68:
a7:81:bc:e9:90:8f:dd:b2:ba:d8:91:32:fc:3e:fb:
69:eb:eb:51:62:cb:2e:fe:40:03:c3:da:c2:4b:b5:
22:cf:fd:b2:b8:06:61:50:e4:f7:e1:33:bb:55:0c:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:15:D3:21:E8:2D:42:1B:A5:38:7C:3F:B5:25:0F:F1:38:81:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf7da1b8-ddd3-331b-9fba-48a3132c219a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.111.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9b:d8:57:c8:e3:ee:84:f5:6b:ae:30:29:06:7e:56:07:8f:
31:ee:e3:06:02:01:4b:0b:33:77:bf:9d:9d:9c:a7:ab:79:20:
a6:54:63:c2:76:e6:85:3a:50:97:ba:e6:48:ec:17:ef:80:82:
f8:9b:a0:c8:e1:c9:6e:13:9e:44:7f:27:0c:0b:93:64:c1:73:
61:9d:54:6d:ca:9a:9b:84:02:5e:c2:6b:4d:3d:04:15:4c:4e:
5e:0b:26:e9:2b:60:3a:c1:21:e6:bd:01:14:b2:a8:40:e7:35:
94:11:37:1c:b8:ec:87:2d:7b:94:0c:8a:d4:82:da:59:0a:50:
27:7b:21:17:0d:0a:35:4e:ab:aa:e4:5f:ef:a4:a9:ff:bb:c4:
95:fc:5c:f6:8b:19:09:91:4f:7f:10:13:b3:6d:b9:cc:d2:c6:
03:6e:71:e3:0c:be:b6:6d:bb:95:53:7d:8c:bd:04:18:64:37:
30:ea:bf:1e:c4:3a:1f:ab:7e:5b:24:26:54:60:60:00:cb:0d:
20:d1:5c:8f:7b:97:0f:9a:e5:73:8a:a6:75:7e:b2:4f:4c:ee:
8c:92:4a:74:bf:d2:60:bb:d1:51:8d:7f:46:78:b9:a1:9d:59:
ee:16:c8:cf:db:e0:9f:6f:e8:1b:4b:04:65:53:df:3d:2d:ce:
31:13:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:56:35 2025 by rpki-client