Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa
File: 2496aed2-6643-3205-9f31-bcdb349f0efa.roa (raw, json)
Hash identifier: uFuMSHExUnUsVWxtKAf9/lCLXXaBfWZwCm8EdNDh2wg=
Subject key identifier: 7C:6A:88:D8:12:19:1B:6F:27:F1:24:8A:A2:FE:D3:DE:0C:33:FE:86
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12F7D337F5B6F5D556000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2f:7d:33:7f:5b:6f:5d:55:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=8cc6089e-0e10-4306-9f88-c34e34cd2dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:e8:74:2e:6f:6a:26:7f:28:e3:c2:07:98:
01:bf:32:0f:0e:8b:74:d4:3e:fa:95:2a:b9:12:53:
f3:a0:d1:3e:34:9f:04:fe:68:39:44:bb:9f:fd:d7:
11:70:c7:36:75:c6:19:8e:6a:e1:08:8b:0d:62:fc:
66:d8:97:7e:f1:18:3d:8a:d2:fb:5c:48:3b:28:db:
5b:c5:62:fa:bb:74:05:6d:3d:5a:bb:35:87:08:c3:
b5:6f:59:7f:60:22:f2:be:e9:74:ee:f7:8b:2e:57:
d8:dc:ee:0c:80:c9:a6:a3:20:eb:7d:e7:94:c6:99:
4e:b1:eb:8d:b6:e8:27:02:01:5f:9d:5d:d9:b9:b9:
02:1f:74:9d:1f:db:32:ea:a8:d3:38:07:c0:fb:c1:
a4:0f:c1:90:d1:82:9f:8a:bd:65:7e:4d:4e:aa:7c:
c5:64:78:ac:45:ab:ff:a6:e0:58:cf:4f:16:65:63:
f5:a9:45:a8:e8:1a:32:12:5b:2a:99:8f:40:35:24:
12:17:05:b4:79:bd:41:50:02:e3:23:c8:f0:13:18:
fc:dc:95:1f:1b:a4:71:f5:91:dd:e9:f8:5c:d0:f6:
0a:bd:63:d0:07:f3:6c:46:2d:40:20:f9:73:28:49:
ae:57:94:a0:75:d5:e9:21:ff:8b:8d:2f:a4:76:34:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6A:88:D8:12:19:1B:6F:27:F1:24:8A:A2:FE:D3:DE:0C:33:FE:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:87:fa:62:62:b9:6a:7f:8f:a5:cf:05:a6:76:ad:ae:78:c4:
d2:ae:58:5e:fe:68:5e:7a:31:7c:90:67:7c:df:f7:b5:f4:e0:
58:fb:03:0f:07:af:ad:4f:b9:49:14:a8:b2:e5:27:66:b5:21:
b0:b0:71:af:2c:57:85:b1:d0:4f:bd:9a:3a:bd:54:02:5e:05:
b6:ad:8d:90:09:df:83:08:4c:e9:6b:69:66:e0:00:ae:c4:13:
8c:cb:df:e5:b9:30:c7:22:ba:af:b5:0b:14:fa:82:c4:00:f7:
ae:b1:34:15:81:dc:7c:ad:f8:82:ba:04:5e:fb:89:e6:3f:91:
23:cc:eb:b7:01:88:91:62:ad:2b:34:3d:fa:97:8b:ee:53:f0:
a3:04:43:dc:97:31:40:7d:c4:27:77:b6:b0:4a:b8:6e:36:1d:
02:46:10:49:45:83:bc:be:bd:a8:45:91:df:52:b0:fa:5a:1e:
30:56:a6:6d:07:c0:4d:1f:e0:05:4e:95:35:9d:03:04:04:18:
9f:9c:7b:1f:ca:77:44:63:c0:47:16:e3:0b:ca:99:d9:3c:b2:
f9:92:13:a8:0f:c9:be:c8:9a:4d:db:a5:d7:47:ac:df:c1:8c:
35:90:5c:d1:9a:dc:14:c6:91:70:99:34:e6:ae:11:1e:59:48:
30:f8:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:40:40 2025 by rpki-client