Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa
File: eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa (raw, json)
Hash identifier: cQpJAnNjPxd6bkKshLToPtUCVCvkCEOy7ztFnnfGZiU=
Subject key identifier: 2B:3E:3E:01:99:B0:ED:69:0A:57:3B:36:53:25:ED:A6:D8:2F:B1:A3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A555C7F661E96FE8B6E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:55:5c:7f:66:1e:96:fe:8b:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=77156e43-a87a-4e84-b5af-c6e48752d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:e3:c9:12:d8:47:43:9a:c6:ba:eb:5a:3a:
83:6e:c0:9f:46:b7:97:c1:d3:9f:2c:7f:c9:1a:c9:
a6:a7:13:db:a5:b3:6c:46:d4:51:65:68:cb:78:93:
76:69:4c:6b:7c:6d:c9:1d:43:04:9a:4a:48:c3:60:
d3:1e:a5:34:f9:27:5f:90:21:b0:78:48:5c:2c:72:
77:ae:d7:66:b7:f4:e2:a9:55:f3:4f:cf:65:12:68:
4e:91:ec:e8:01:44:8b:04:2c:b8:f0:c3:ef:30:6d:
4c:65:64:16:0a:eb:9e:0e:6e:b2:54:fa:14:32:ad:
9f:53:22:6c:05:85:41:c6:87:ac:10:91:cd:ec:3e:
e9:26:01:41:aa:0b:af:4d:9f:58:b8:c0:8a:28:f1:
27:93:7e:1f:11:f5:58:85:93:62:b8:72:be:95:bf:
16:93:3b:79:5f:8e:ad:76:de:48:5d:ae:29:99:f4:
4e:d8:e8:34:97:c5:5c:84:73:cc:4e:04:0f:0e:01:
80:6d:95:88:73:28:71:04:6d:7f:54:01:66:22:d5:
32:cd:16:b5:af:ee:f2:9d:af:57:b0:9c:69:16:54:
fb:3b:97:b8:93:76:f1:25:1c:d3:47:ac:d9:21:8d:
15:50:a2:5c:5b:00:1b:b2:ec:c0:ba:ac:ec:80:8c:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:3E:01:99:B0:ED:69:0A:57:3B:36:53:25:ED:A6:D8:2F:B1:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:1d:81:b6:46:d4:71:98:d9:a2:59:90:c5:6a:04:db:c5:e3:
7d:3a:53:ca:b2:9f:0d:e7:59:60:91:5b:04:75:22:02:64:da:
c6:2a:65:7b:cf:89:83:bd:cb:39:5d:e1:ef:b4:09:06:92:27:
06:57:d1:aa:dd:0d:2d:e7:6e:0f:90:a5:e0:8c:c1:67:f5:46:
c4:6f:13:e2:e2:e8:94:ed:09:66:85:22:bf:34:36:7f:ee:fd:
27:e6:19:54:bb:ec:15:09:4a:71:f2:d2:16:d0:77:c5:08:30:
08:54:10:c5:e0:0b:6f:0d:07:0e:6f:74:4e:41:09:90:5e:0f:
c6:dc:3f:f0:6d:04:1f:07:de:5c:de:ff:12:b3:93:3f:15:2e:
5c:d6:dd:1f:cd:fc:7c:12:c8:8b:10:72:ea:fd:69:ad:c3:d0:
3c:33:f1:6d:5e:88:e0:b2:1b:ec:ef:bb:09:35:6d:48:2a:7d:
9d:8b:74:b4:d2:9c:e8:a3:22:4c:01:da:7f:aa:f7:7e:df:5b:
4a:e2:8a:9a:ca:d4:f1:45:0b:c4:55:b1:23:9f:20:e0:96:5b:
ef:83:42:07:6e:ea:2b:07:3b:d6:b3:bc:04:29:16:46:24:92:
34:12:93:e3:c9:85:ba:4f:93:3d:34:50:71:1a:2f:01:d4:f6:
e7:28:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:20:57 2025 by rpki-client