Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa
File: 0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa (raw, json)
Hash identifier: gezwBWrYOy73glieJ1oXWlimb2VUru5sknbrj08nBHo=
Subject key identifier: B6:06:1A:11:4D:18:CB:12:A4:23:D1:54:5A:74:A6:71:C5:35:9A:E3
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584937D93655CAD3F02ED9A3D240
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 16696
IP address blocks: 216.120.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:36:55:ca:d3:f0:2e:d9:a3:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=1d037521-4f37-4e4f-873b-e522fbd7e426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:16:8a:cc:55:97:37:a9:a6:6e:b8:22:c8:
7b:cb:9c:52:45:75:e9:63:d5:7e:2c:e8:4f:a4:c6:
55:bc:95:1d:de:d2:1e:3e:09:07:01:80:6f:c3:54:
a1:7f:2d:78:35:64:27:e8:2e:4f:cc:09:c7:a9:bd:
d5:6d:9a:4f:1b:4e:ed:b3:00:09:42:b5:d4:df:99:
76:85:21:9b:e7:38:86:47:af:dd:fa:26:bb:12:62:
35:e9:82:bd:42:fd:d3:60:5c:11:b2:7e:36:2e:81:
2d:1b:cb:8a:b7:72:b8:30:ad:12:32:31:8f:54:a7:
e9:16:9a:ab:f3:92:c6:ac:39:fa:7f:85:4e:fc:a0:
93:47:e2:4c:94:17:e6:0c:6b:8d:a9:59:04:95:3e:
5e:33:64:25:90:ed:29:d4:39:c2:ad:47:34:76:e6:
e9:af:df:87:02:49:e0:fd:d4:1a:f9:d4:81:ec:3c:
6e:56:a6:a7:62:2d:b1:10:d9:e7:4c:a9:a5:7c:5e:
d9:c9:7a:4c:3a:bd:fd:a9:53:20:18:1a:8b:5b:ae:
b1:59:fc:bf:48:8a:ef:dd:c3:b2:bb:68:b2:ae:f3:
d0:47:9d:d1:a7:86:36:9e:ce:ab:b7:56:78:3a:17:
af:d3:fe:42:23:83:c4:ee:7c:24:f8:5a:28:ce:cf:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:1A:11:4D:18:CB:12:A4:23:D1:54:5A:74:A6:71:C5:35:9A:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0dfbfe87-cbf2-3203-99a9-79dae9f09d50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:89:c1:e4:e7:9c:7b:08:e7:c3:12:7f:cd:63:27:27:34:9d:
14:52:33:65:6d:7f:b3:b8:40:10:3b:91:c4:32:97:62:80:55:
32:9d:07:4f:01:e6:c7:a1:70:d5:b6:ee:1d:51:78:1f:bb:21:
6b:1f:03:d2:c2:6b:81:11:51:11:4f:2d:ae:41:68:83:05:8e:
8a:a7:01:dc:c2:97:53:ce:37:09:63:76:e2:df:f6:42:b4:35:
d8:2d:84:a0:11:4f:dc:c7:d5:86:d0:20:88:00:9e:63:ed:76:
b1:9b:72:32:6d:92:79:b6:2f:25:6d:bb:c3:91:85:16:8a:45:
44:e2:82:4d:f3:da:fb:6b:cd:64:f4:a0:89:fb:cf:9f:7a:7e:
14:ea:47:80:14:19:98:1d:b7:cd:ed:ed:70:c4:74:b3:5e:d4:
10:9f:58:0a:54:a8:30:a5:a1:56:39:af:32:48:35:a6:a9:f3:
a6:11:2b:37:59:af:b1:be:f9:83:0c:ce:c0:c0:d7:c6:25:fc:
68:e6:6d:fa:ee:a9:a9:49:51:36:b3:e5:b2:04:7f:1f:e0:ad:
7b:de:55:52:d3:e8:51:eb:dc:da:3a:bc:31:53:4a:cb:83:ae:
25:15:6c:30:84:55:1a:b8:79:1c:e4:d9:42:81:5e:b1:36:ef:
34:04:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:36 2025 by rpki-client