Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/869dfb42-4617-335d-8656-0403de8cfe5e.roa
File: 869dfb42-4617-335d-8656-0403de8cfe5e.roa (raw, json)
Hash identifier: erWkCLNu7Lx+CHNgO37PO6tAmXLC/o5GRTRY/r5rDCA=
Subject key identifier: 8A:0E:31:74:74:54:26:7D:03:EC:9E:C6:EE:6D:65:0F:46:32:46:41
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817AAAFA8A85E256541580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/869dfb42-4617-335d-8656-0403de8cfe5e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.250.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7a:aa:fa:8a:85:e2:56:54:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=49ed2556-3e4b-4075-a391-44b903cdfea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:1a:91:39:56:a1:75:2e:b4:2d:50:b8:11:
e0:14:42:7a:47:19:c8:6b:7e:21:c3:d9:ae:e6:ad:
57:8f:b1:ae:3d:32:5e:35:94:b4:d3:df:b6:bd:35:
1c:98:32:ff:1a:0f:f3:e1:5f:e5:45:ba:a7:15:69:
01:af:c4:af:17:5f:86:78:2c:4c:9b:98:36:eb:10:
1d:71:a4:61:d5:3e:5f:13:f5:7b:07:ec:55:3b:ba:
69:ac:91:47:da:1f:25:83:8b:58:7a:36:1f:fa:7c:
c6:cc:54:19:b7:af:64:19:1c:20:42:d2:ca:17:bc:
82:cb:29:df:44:10:12:ab:75:9d:05:83:df:67:37:
82:32:9c:03:9a:ab:1d:a8:00:9f:66:08:60:30:ea:
57:88:06:34:ea:d3:e4:cf:77:ea:eb:04:fa:75:55:
4e:a7:d0:b2:d6:69:b2:85:84:d9:f8:80:ca:5d:44:
78:a5:53:f1:6f:7e:89:29:f4:24:58:56:cd:b6:48:
7d:d4:f1:36:6a:58:38:d6:4b:11:e4:fc:fc:24:f2:
86:d9:d6:6a:7b:22:02:57:3d:b4:7c:a1:13:1b:18:
6a:00:14:21:ef:d4:74:71:52:0c:15:05:2e:ff:cd:
91:34:2d:bf:23:ef:53:52:24:0d:a3:64:63:6f:08:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0E:31:74:74:54:26:7D:03:EC:9E:C6:EE:6D:65:0F:46:32:46:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/869dfb42-4617-335d-8656-0403de8cfe5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:dc:bf:41:94:d1:fe:e7:e2:75:63:17:db:dc:eb:85:c4:68:
92:bb:a8:d3:91:c8:7a:82:12:ee:ac:7b:55:e2:23:5d:2f:1b:
c4:cc:c5:d5:ba:ce:12:66:0a:63:f2:43:46:24:11:34:a2:d7:
22:f3:59:db:66:d2:7b:1e:27:c9:70:c9:d3:48:08:6f:79:54:
ec:d3:36:64:03:69:d0:de:9f:20:64:25:2b:8e:e1:71:61:0c:
c1:8e:b2:75:27:59:9d:d5:9d:21:77:e3:5b:90:92:66:cb:1a:
81:fa:0b:64:e3:8e:1e:fe:ae:86:2d:01:09:f8:45:bf:2e:ac:
73:65:57:a8:e5:b6:77:aa:b8:22:bf:70:f4:5e:37:71:59:ab:
bc:31:22:be:f1:9a:54:42:a3:64:7d:12:8f:7d:ca:c5:ca:d6:
ae:6d:fa:62:df:b5:b2:08:0e:3c:73:23:d6:98:8e:3d:61:7e:
0b:4c:6a:39:2b:51:45:3b:c4:93:1f:27:ca:35:80:b0:8c:29:
d7:5a:d2:f3:18:f4:f1:5a:aa:a8:6d:01:67:8b:2c:f5:fe:a4:
38:f3:20:55:70:52:19:c8:17:f8:a6:32:ef:03:09:05:f0:3e:
7a:aa:96:ec:eb:c5:7e:33:89:5f:56:8b:e0:0c:c7:95:f5:10:
9c:ea:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:46:51 2025 by rpki-client