Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8259fc-7912-3b34-aa64-ca724a5f6122.roa
File: 7a8259fc-7912-3b34-aa64-ca724a5f6122.roa (raw, json)
Hash identifier: au8rX2UY8YhkYqKbjfKTpdibo4BVJ7VXw3YtOLkwCLk=
Subject key identifier: 09:00:70:FF:AA:52:1F:BB:3E:58:D4:98:C2:69:FA:6C:A8:43:98:70
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA122EC5C087F17F4459200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8259fc-7912-3b34-aa64-ca724a5f6122.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:22:ec:5c:08:7f:17:f4:45:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=f4547317-f26d-4352-87c6-24ac34f534e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:1f:47:13:c1:79:b1:7f:dd:ca:ef:32:13:
3d:1a:1b:70:5d:f5:6a:30:f7:4a:c6:ed:b1:9a:61:
0a:93:66:94:cc:4f:8c:7c:cd:15:31:a9:88:9d:03:
4b:b2:f8:f2:83:db:23:b4:cf:9f:9a:75:9d:16:37:
81:5f:18:c3:64:ff:d1:fa:5a:ab:52:7a:e2:70:fd:
cc:ff:db:bb:af:24:1e:e1:e1:d8:c3:bd:84:b0:34:
21:6a:2c:27:a8:76:0b:5f:d5:80:b0:5a:e5:63:a5:
0e:06:df:1e:9e:6a:3e:3d:29:33:9c:dd:f8:4c:e8:
c1:87:e1:d5:8c:e6:34:1e:75:44:ac:4c:ae:9d:b1:
b2:ef:a5:09:a9:76:70:e2:33:be:ff:58:d3:c6:9e:
0a:56:d8:19:76:3b:1c:4b:0e:76:8a:77:f5:01:5f:
00:c2:19:ba:93:a0:33:49:ce:a5:79:f9:e4:c8:a1:
3f:18:da:89:33:58:03:bb:d5:f3:7b:86:08:f7:7e:
8b:2d:66:d0:75:95:97:67:48:c8:94:b2:89:d2:c0:
76:63:ee:0d:00:fb:b9:58:95:c1:79:14:ac:93:04:
fd:c3:74:85:47:dd:d3:2d:d1:e0:cb:ff:fb:b9:a5:
f8:c5:45:39:3f:be:aa:55:59:77:46:68:48:d2:42:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:70:FF:AA:52:1F:BB:3E:58:D4:98:C2:69:FA:6C:A8:43:98:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8259fc-7912-3b34-aa64-ca724a5f6122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:68:4b:25:33:2e:62:94:b8:c2:88:18:24:d8:bc:28:df:11:
19:1e:36:0b:f2:20:37:c4:27:a8:46:7a:d4:16:c2:6a:6f:2d:
3b:fb:88:e7:49:df:97:39:27:7d:16:aa:5a:af:60:fb:b5:dc:
39:8c:4b:6d:d0:c6:6c:12:0d:d3:11:ac:50:be:8b:d9:33:bc:
22:eb:8e:9f:2c:a7:70:49:50:86:fc:69:0b:fc:12:21:4e:6c:
2b:9f:29:d9:ae:96:aa:99:0c:d7:cb:78:43:2d:b0:1e:cd:de:
83:37:ca:d4:62:97:56:37:58:57:01:84:b2:ce:7b:78:77:0b:
ac:02:e2:4f:84:4b:8c:15:98:64:5a:c0:da:8c:44:c4:2e:ea:
1d:39:62:f6:27:86:62:eb:ad:18:25:d0:fc:1a:10:c4:de:6e:
a3:f1:c9:23:1c:37:ab:e5:fe:0b:85:e5:e2:13:d4:f9:f6:e9:
8c:75:34:c0:4a:d5:dc:02:03:b0:42:6e:99:2e:bd:3c:9a:c9:
4e:9e:58:05:56:e8:a3:96:65:28:05:2c:00:a8:4a:d3:a0:6a:
ce:19:33:49:8c:c2:08:94:f7:7a:66:2c:b4:41:3d:b7:39:d2:
ad:a5:86:40:f7:30:30:38:81:a6:ac:1d:21:94:f4:3e:d1:76:
ce:d9:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:45:19 2025 by rpki-client