Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa
File: 0545dbf9-118c-39b7-9f00-b538a6304e31.roa (raw, json)
Hash identifier: 2Hx325e9nRanBqz5l0jTY1PHVzZynix8XKKPuihsuIM=
Subject key identifier: B3:B5:07:C7:F0:12:89:9E:FD:96:8A:5E:C1:87:8C:02:4F:97:89:BB
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF6146D2EE896A74B95EF580
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 67.221.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:46:d2:ee:89:6a:74:b9:5e:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=e7ae131e-892c-41be-94ae-5c931b4f6a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:40:a2:20:db:49:5a:d7:f9:bf:37:0e:d6:
9a:ca:c6:70:d5:ee:24:4c:38:9b:7f:0d:4e:f6:3c:
4b:e7:ba:b3:58:1f:ba:36:f9:21:03:da:03:a1:15:
ca:ce:92:83:4d:48:1d:2f:ca:02:3d:e1:30:69:7e:
3a:4e:9d:fd:11:94:e8:46:2c:d9:45:24:bb:51:14:
45:bd:fc:41:60:60:62:5e:75:ea:e8:ef:93:23:88:
c6:4e:e9:58:e1:44:58:84:8a:c0:2d:9b:25:5e:ad:
f7:f2:a3:7b:45:14:ac:a0:0c:87:8c:37:d2:7e:5c:
b2:dd:54:d7:8a:4b:b8:72:72:3e:11:5d:7e:2d:1c:
37:ae:b2:76:0d:8b:2a:02:75:b2:02:ee:13:fb:50:
16:00:48:14:2c:01:35:9e:d9:27:cf:0d:0d:b8:51:
54:f8:3a:0c:05:c2:b0:c0:80:3d:8e:18:4c:54:c7:
18:80:4b:ed:8e:4f:ba:64:78:1b:bd:3d:f4:d2:9c:
87:b7:15:a3:5a:6c:5f:24:21:ae:82:48:1c:fe:88:
10:97:70:d2:14:d8:e5:10:81:02:9a:e7:b5:10:a6:
c8:83:f9:04:32:bf:ee:f2:7b:ab:14:65:c7:94:05:
72:5c:53:a7:fd:be:f5:ac:a9:82:69:42:6f:eb:1c:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:07:C7:F0:12:89:9E:FD:96:8A:5E:C1:87:8C:02:4F:97:89:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:38:a9:02:b3:d4:dc:7c:7b:6a:34:cb:80:92:28:46:7b:29:
83:e8:22:a7:83:7b:69:fe:2a:72:d2:b9:0a:c8:9b:9e:2b:fc:
3f:98:3f:ad:49:17:5a:d4:21:1e:fa:33:fa:17:38:3d:aa:10:
07:00:f1:f3:98:60:ee:12:52:dd:b9:56:f7:e0:2b:e8:2b:fe:
53:61:58:a2:c1:22:3a:09:8a:08:d4:d4:af:5d:84:42:45:c0:
06:e7:4f:3b:a6:64:40:ac:64:50:83:7c:52:d4:8a:e5:4d:ff:
53:54:2a:92:a2:c3:d6:03:c4:d4:1f:5b:da:97:de:dd:4e:6b:
71:7d:ed:cb:3f:5c:94:c5:9e:d5:00:98:4a:17:9c:fc:2d:a6:
7d:b1:d8:e8:25:98:0e:bf:85:0f:bd:00:ed:9b:b3:5d:44:11:
90:d5:05:7d:70:63:e5:d9:d8:22:6c:70:91:c1:d8:f6:75:5d:
5c:3c:18:18:0a:3d:9f:e2:db:bb:ce:1e:b1:53:77:72:6e:79:
61:1a:36:ca:d0:01:0c:3b:ae:4a:87:9d:a5:e2:ee:19:e1:c2:
d6:98:b0:8a:a0:5a:42:a5:a6:1b:4e:aa:d0:39:54:fc:ab:a4:
54:a0:0b:65:0a:67:db:d8:39:2b:80:fd:7f:2b:9e:6d:19:ec:
cb:f3:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:44:13 2025 by rpki-client