Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
File: a687c46a-89db-380a-b337-cdc67c4ee430.roa (raw, json)
Hash identifier: en1FNaMYv9SZ8j8ipdV9gNXYFZiKDjAGVZ8oMQN/fD8=
Subject key identifier: F4:F5:60:FB:ED:CF:9E:08:FA:D0:D7:DC:11:C5:33:E8:CF:2F:F5:6A
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848C6E639CFA36A6F18A7CF7080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 25961
IP address blocks: 69.1.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:39:cf:a3:6a:6f:18:a7:cf:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=3ca29af7-d9af-48ac-ab39-c043eface7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:3b:db:e6:77:0f:14:50:45:ac:94:a4:af:
4e:b3:d7:67:eb:51:65:6d:64:80:e9:79:c8:77:4a:
6e:94:9f:17:dc:60:0b:ba:56:87:68:e5:16:eb:f8:
bb:85:d6:3e:a4:a8:08:09:4c:fb:c1:ae:39:0b:cb:
6d:d4:b7:e6:65:25:cd:67:6d:b2:05:cc:fe:11:93:
cf:2f:95:93:9f:49:5c:59:4a:c2:6d:68:79:82:51:
4e:1a:73:99:ab:5a:00:97:73:f0:7c:16:cd:18:ef:
6a:96:78:4e:29:63:18:a6:98:45:e4:85:a0:b6:a7:
23:66:3d:04:85:97:da:4c:fc:9b:1e:da:05:69:f1:
ad:94:29:d9:09:56:b8:e7:bb:27:02:66:35:42:67:
d7:0c:da:5d:dc:24:c1:bf:cf:b8:98:51:d8:84:7c:
9d:c1:11:fe:35:98:14:42:1a:ef:2e:dc:5c:7b:1e:
5a:9c:02:de:bf:4b:c1:3f:2d:15:07:82:53:13:8e:
18:d1:4e:32:bd:2e:05:a5:2a:72:6e:48:b4:35:70:
28:46:bb:b7:03:1e:d0:9c:d5:e8:65:fe:c0:44:a5:
2c:32:d2:2b:23:dc:3d:4c:8e:3e:6f:0a:78:cc:22:
d3:d1:a9:28:26:76:ff:ab:56:a3:b5:74:43:bf:21:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:60:FB:ED:CF:9E:08:FA:D0:D7:DC:11:C5:33:E8:CF:2F:F5:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
69.1.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:84:21:68:7b:6f:65:97:35:ea:3f:5d:46:79:c3:44:68:2e:
34:dc:8f:e0:0f:bf:39:8a:00:b1:4c:0a:43:ad:ab:08:8b:39:
f5:1d:6e:01:fb:ad:b5:e8:41:4e:c3:07:a2:02:8b:71:56:c0:
65:73:3f:9b:f2:52:9d:d7:4a:03:8a:9d:50:22:da:8b:1d:9d:
24:4d:f6:19:11:2a:e9:a4:57:91:31:e5:db:3c:ff:6b:c0:c7:
4f:71:43:d0:f6:32:9b:2f:78:c6:97:29:9f:08:1e:f6:b4:42:
33:36:19:7f:f7:66:95:0d:ed:c8:3b:93:20:c0:ab:17:f5:ef:
67:b8:3c:17:e1:ed:3a:71:ab:3f:74:a7:fb:1f:8e:a7:1f:ae:
b8:51:87:2d:a2:c4:7a:ae:9a:e6:c1:e0:ad:1b:94:d2:82:ca:
7b:1b:55:e2:32:e7:b5:30:a8:49:1f:12:c8:a5:83:31:52:22:
f4:5d:84:a9:c2:4e:ac:d1:fa:93:6f:51:37:56:19:43:0d:eb:
1d:9e:d6:b9:bb:15:b9:5a:28:e9:76:c7:72:7b:b2:62:ca:c5:
af:14:15:37:d5:41:88:09:6e:7d:6d:10:10:49:25:92:f1:af:
a7:3e:04:24:f2:f2:0f:63:9b:9c:78:86:0f:9d:e6:07:2d:6a:
3d:be:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:18 2025 by rpki-client