Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bc6b1342-48a4-39ec-993d-be97d3a3459f.roa
File: bc6b1342-48a4-39ec-993d-be97d3a3459f.roa (raw, json)
Hash identifier: zJWMPKfvVBgqvwGEAEm6LiQfvN4gXhvOYHqJWn0MjzQ=
Subject key identifier: 2C:C8:21:21:20:CE:9F:6F:BE:CA:0F:DF:4B:0B:A1:0D:92:C0:97:39
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12B466960E1D8783CE400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bc6b1342-48a4-39ec-993d-be97d3a3459f.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.251.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2b:46:69:60:e1:d8:78:3c:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=e49539cd-9e83-486c-a257-4ac7116ae8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:52:f7:f0:d0:36:68:c1:90:2c:4e:63:d3:
a1:58:94:f7:35:65:50:60:65:47:32:37:b7:93:0a:
13:9f:18:9f:ac:54:9a:6c:28:c2:ce:49:19:5f:00:
34:7e:60:35:8c:01:bc:4f:c9:19:ed:0d:61:33:55:
d0:63:d7:f3:5c:c8:6b:51:d1:57:02:58:89:be:e4:
ed:e6:1f:09:3d:bc:5b:72:56:86:46:66:59:84:35:
29:0a:f9:5d:46:a8:0a:19:e9:47:41:cc:ff:29:cc:
ba:45:9d:1d:2e:96:0f:8e:87:db:b5:c0:4b:84:ad:
a8:ce:e3:e5:9a:36:a9:2e:65:d4:04:60:7c:95:e3:
9a:3f:6a:8c:65:5e:44:a5:80:87:68:8a:05:61:9d:
ee:f5:a1:b4:8f:d7:80:7f:51:cf:66:47:14:c9:c0:
cc:3a:25:ab:74:30:5e:f2:c3:df:fd:02:d7:4c:c3:
f8:d5:13:f7:15:72:fc:43:13:9e:92:64:02:4e:dd:
d0:35:4a:29:0a:35:7b:c4:4b:85:ab:68:c9:80:72:
02:57:40:c6:c3:a4:94:3a:bf:6b:54:3a:8e:99:4c:
50:47:1f:bb:95:c1:27:c6:97:ff:1f:99:03:23:56:
9c:93:74:ae:31:3e:60:ba:f6:6e:a5:42:a8:df:41:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:21:21:20:CE:9F:6F:BE:CA:0F:DF:4B:0B:A1:0D:92:C0:97:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bc6b1342-48a4-39ec-993d-be97d3a3459f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b1:f0:17:46:f5:d9:41:63:53:27:4d:b6:3e:6c:4c:00:11:
b5:53:b8:43:7c:00:bd:31:a2:c3:80:26:f5:2d:30:23:41:eb:
cb:a9:94:2f:29:75:7a:32:33:c6:00:85:43:9e:b4:f7:db:e3:
c7:d0:6f:f5:e7:af:aa:75:ca:b1:ea:4e:54:31:bf:7a:36:ed:
ed:37:fb:34:59:56:a0:4e:df:d2:a4:ff:e0:bb:1b:06:00:29:
7e:af:dc:18:0b:1e:48:63:59:b0:cc:4e:fb:9b:93:c9:e3:92:
88:61:32:ce:81:23:7b:08:94:82:95:5b:23:2f:0b:83:6c:66:
58:cb:16:94:5b:45:ab:a3:ca:5b:11:c7:1a:1a:c6:e1:e9:68:
76:05:a7:32:a9:4b:20:2c:93:4a:48:bc:ef:0a:b8:63:60:45:
ef:4d:04:d8:1f:ab:99:c0:fb:3a:0d:b8:b6:bd:18:a2:4b:73:
75:40:47:c1:be:19:35:b8:1c:78:49:6e:f2:61:01:bd:23:ca:
99:0b:dc:6a:96:33:cf:48:73:61:f5:49:a5:c2:e9:48:03:c3:
35:9e:df:d2:14:6d:43:9d:97:c9:89:39:5b:4d:7a:42:71:99:
dd:ed:90:bf:b5:4c:ff:37:2f:a2:4f:31:be:d8:1d:d8:9c:55:
a8:8b:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:39:09 2025 by rpki-client