Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
File: fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json)
Hash identifier: snCh3umru6/FPiF4J7Xp4+K8eUvlE+650lTC1oWGhF8=
Subject key identifier: 4A:B4:83:6D:87:73:DD:79:3F:7F:18:6B:F4:9F:B0:89:CE:9E:EF:A4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA1251B4DF8E465336A9300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.250.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:25:1b:4d:f8:e4:65:33:6a:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=5fa00052-d58e-4d54-8ef8-f2709fd73976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:8b:4c:66:fb:69:56:78:85:db:ec:a0:6c:
31:b1:fd:e5:f2:79:56:96:46:89:98:61:7a:75:95:
e1:32:94:b2:92:8a:33:04:89:1e:8c:65:89:88:2f:
5a:dc:0b:2e:05:f5:ff:a7:33:00:75:96:58:98:93:
38:58:91:41:8b:ed:e4:e8:2b:da:84:2a:6d:f9:9b:
9e:72:63:1f:87:be:af:e0:d6:bc:87:90:53:20:76:
a5:2e:7d:95:7f:a0:2f:2d:3a:e4:39:78:a5:2a:17:
a3:4e:46:4e:d3:4c:67:c4:9a:ca:1f:da:70:41:3b:
f0:f4:6f:89:0c:0c:66:7f:9f:95:65:05:c2:f5:3b:
50:96:ab:36:cd:87:20:be:49:de:85:99:ec:7c:3e:
2d:f7:e2:3a:04:eb:93:08:66:39:35:34:82:2f:bf:
49:87:46:64:ce:f3:cc:46:b9:5c:e7:bb:97:76:bd:
72:84:3a:f7:36:53:2e:a0:50:62:8f:bb:8f:c9:7a:
0c:20:da:26:e3:e0:54:ed:ec:88:84:71:19:0c:5d:
22:6f:0c:74:18:60:97:e1:ae:60:da:94:af:80:96:
08:94:12:32:4c:af:1f:b0:7f:ce:d6:e6:7e:ba:87:
23:9e:5f:6a:2c:5a:ca:74:71:a5:9d:f3:59:9a:51:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B4:83:6D:87:73:DD:79:3F:7F:18:6B:F4:9F:B0:89:CE:9E:EF:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:29:e3:54:5b:f2:dd:02:62:1b:18:dd:23:6f:8d:16:78:f2:
df:cc:06:db:0a:3e:43:66:92:b3:44:c7:37:cd:e9:3b:ab:63:
92:9b:9a:ef:ef:5d:1d:21:0c:ef:a5:c9:0f:ec:fa:4e:6e:a5:
2b:f9:a1:d3:5a:a5:75:3e:0a:fa:dd:e8:a5:bd:e8:e5:8b:82:
4f:b3:37:6d:34:41:bd:41:2c:d8:9e:7e:7b:2f:61:07:6d:af:
6d:51:55:11:ac:73:02:58:42:4a:5d:bc:d3:0e:41:8d:7c:94:
4a:e8:b5:37:9c:d8:55:08:c0:57:52:f0:7e:5d:a2:67:71:6d:
af:c8:78:f8:0b:54:13:23:98:02:c1:e0:b9:ca:9e:b0:9a:f6:
3f:9c:37:8f:e4:8e:9b:c6:e2:6c:8c:cb:65:c6:d3:f1:d3:8b:
92:05:7d:29:60:37:57:79:b5:0a:c5:a4:fb:19:83:01:57:95:
00:52:8e:f0:e5:a2:d2:15:3d:cb:7c:d7:ad:08:b1:83:c0:54:
9b:13:55:5f:4c:23:d2:58:3e:21:ad:ad:65:51:99:e9:cc:92:
d7:2c:06:55:dc:91:3d:f8:3b:05:b8:b2:e9:75:74:7f:d5:53:
a5:d5:5c:a2:21:aa:d4:38:3a:6a:67:79:dc:e1:1f:64:e5:07:
d7:9c:e0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:15 2025 by rpki-client