Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa
File: bf0ca975-c303-3fe2-acd5-fa91d979f203.roa (raw, json)
Hash identifier: Yb+uTewS79frre7QA3ygqqbS5EutlrHqG/FOTX9maGI=
Subject key identifier: C8:41:1F:30:B4:C1:47:06:CF:7D:25:0C:0B:B0:74:BF:E6:FF:27:5E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A569F02EA8A4AB54F0110
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 74.125.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:56:9f:02:ea:8a:4a:b5:4f:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=cb90931e-72ad-4f09-b14a-0782c053466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:c1:d9:fc:aa:3d:f5:bd:f4:39:98:50:a5:
57:98:28:fd:ee:58:1a:75:d9:f3:13:36:65:95:37:
9f:b4:51:07:ee:74:f2:b2:08:84:8d:05:aa:85:a8:
86:49:f0:10:44:bb:b4:63:d4:d7:cc:99:43:39:e6:
59:02:bc:03:09:75:fe:ad:bb:d9:a2:b7:ee:3f:c2:
72:c2:0a:3f:09:19:81:cb:d9:7f:6d:b6:de:cf:62:
28:18:29:80:0b:64:fd:f1:34:3f:43:d9:6f:19:5d:
cc:fd:1f:68:62:07:48:f4:17:a6:15:6f:21:aa:b7:
4d:bd:e4:55:03:00:ee:03:b7:34:26:f7:55:1b:0a:
f3:e2:6a:7e:91:36:2d:5b:35:e3:30:9d:73:5a:b3:
ce:51:20:c6:d0:39:44:68:14:ab:98:c8:80:13:87:
3a:1f:5b:22:d2:3d:e4:7f:a8:bf:95:06:4b:6f:e5:
2d:e3:58:08:e7:a5:b5:06:26:0f:a3:81:84:f7:62:
97:43:e4:dd:36:2a:b1:cb:32:dd:22:bf:dc:62:4e:
de:ac:55:d3:07:a9:c5:d7:b1:b9:df:2d:ec:ad:39:
f1:79:9a:af:1b:7a:d5:05:f4:fd:6f:41:20:cc:0c:
ba:9a:b1:6a:4a:25:1d:7d:ba:fd:bb:2d:08:a0:0e:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:1F:30:B4:C1:47:06:CF:7D:25:0C:0B:B0:74:BF:E6:FF:27:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf0ca975-c303-3fe2-acd5-fa91d979f203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:50:78:52:e6:f9:e3:9f:28:d0:6b:c6:0f:72:f3:bd:49:14:
5f:b6:84:66:67:ff:15:51:21:3f:87:a6:cd:e1:a9:f6:b7:17:
0a:24:f5:5e:ab:e0:a2:f9:6f:29:ec:1f:6f:ab:96:ff:1f:ab:
b0:22:71:78:27:90:f4:26:df:e3:84:db:12:c7:c8:3c:08:26:
74:09:6e:66:7e:ef:d8:c9:83:36:b6:00:8e:d3:af:be:83:51:
81:2f:96:df:23:ba:50:7b:19:39:aa:22:f3:84:a6:a3:e8:69:
f8:ca:9e:26:1c:36:9b:00:2e:7e:4c:2e:1a:a5:00:5a:9d:c1:
7e:2b:ad:0c:00:df:b8:2f:30:a6:29:b6:a5:c5:7f:da:cf:f7:
16:07:1b:97:ff:be:08:61:9b:0a:68:b3:04:8d:3a:f6:96:b7:
00:3b:5b:b4:25:4a:70:10:8c:9f:5b:52:80:12:31:84:f4:4e:
f6:4c:9f:fd:4a:8d:5b:4b:7e:c6:15:90:05:ee:0e:78:b7:f3:
96:48:9e:b9:b6:46:26:df:b1:96:72:8a:de:cc:93:ce:af:a1:
d5:4e:be:5c:dc:c7:93:78:57:89:1c:41:e3:32:2b:87:06:0b:
20:a0:fb:06:bf:4c:4b:7f:55:39:11:d6:d8:95:18:77:41:3b:
fe:03:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:35:40 2025 by rpki-client