Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/15bf383d-053e-38e5-b44c-6ce1f41eec83.roa
File: 15bf383d-053e-38e5-b44c-6ce1f41eec83.roa (raw, json)
Hash identifier: t0DVvLZ1It+okTCBC8Pg7YkxM35oxt3WBhjoJ84C8Fo=
Subject key identifier: D4:F3:52:19:56:66:56:37:B9:FB:FC:BD:CE:F8:69:59:74:F7:3C:7B
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584905B6B633BC885D08D1C29C24
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/15bf383d-053e-38e5-b44c-6ce1f41eec83.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 216.120.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b6:33:bc:88:5d:08:d1:c2:9c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=f84acd5c-f8f2-4820-a99e-6e172054e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:f0:d9:a3:10:4c:42:20:e9:c8:a7:c5:d3:
c4:5b:44:c9:e4:60:85:16:98:c4:2a:ae:a8:4d:3c:
4d:83:0e:ac:76:53:b5:ac:11:88:6f:90:a5:16:7f:
e3:a1:9b:26:4c:c4:f2:4c:0e:f6:a7:cb:f4:75:9b:
90:f5:83:02:af:84:4e:e1:52:14:e0:53:a1:94:59:
16:47:21:63:22:85:f1:73:a6:ce:34:08:b1:4e:e2:
1b:35:59:e5:0b:fc:a1:97:82:75:d6:07:bc:c2:2e:
33:eb:d6:86:93:31:a9:d8:75:92:37:25:10:7c:72:
cb:22:de:0b:69:85:83:ab:3a:63:ce:cf:75:d4:d3:
cb:86:ac:09:9e:66:e8:22:9f:0d:85:d4:df:e5:a2:
8f:86:de:be:61:22:1d:58:67:5d:73:90:2b:92:e8:
17:22:c4:46:28:60:64:11:42:b0:32:65:7f:a9:dd:
3d:e6:d2:8b:37:54:c6:76:73:e4:47:fc:cf:ad:e0:
83:9f:a9:63:ed:ff:0e:25:14:c1:8c:f4:34:74:62:
52:6e:7a:90:15:ff:db:a2:b4:3a:d2:bf:ed:88:b5:
d7:d0:c9:15:d0:82:de:d1:87:a3:5e:58:40:f9:f8:
53:34:54:15:6f:52:e3:73:eb:ec:1f:54:92:d0:0b:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:52:19:56:66:56:37:B9:FB:FC:BD:CE:F8:69:59:74:F7:3C:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/15bf383d-053e-38e5-b44c-6ce1f41eec83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:09:7a:fd:28:e3:1c:0c:6d:8c:85:18:15:e1:37:62:f9:81:
77:d9:90:8d:85:9d:69:a9:46:38:6b:7a:14:ba:fb:62:0c:72:
e8:f8:3a:f4:78:5b:a1:3d:ee:0d:2b:fd:1a:1f:cb:32:63:44:
e9:6f:99:bf:d1:8b:60:d1:9f:ed:26:50:95:08:18:2c:9f:9f:
2a:86:82:d1:3a:0f:d8:47:c5:9a:08:1e:4b:e5:55:34:bd:59:
fc:0b:df:c3:ea:ef:d3:c5:03:e0:b8:89:f2:15:34:92:8b:b8:
e2:34:89:f7:5a:08:fe:3c:d8:71:2b:cb:36:25:c9:0a:5d:6d:
a2:1f:a8:e6:f1:65:42:6a:49:93:87:62:f5:86:bb:ea:2e:f6:
af:83:fc:da:56:05:45:e1:31:dc:d6:02:98:12:aa:85:cf:4c:
95:82:1a:20:47:e5:3a:be:e7:c5:dd:c4:93:2c:32:8b:e7:cf:
69:6f:e3:65:4e:34:3a:cc:c8:63:c6:13:1f:0b:07:34:37:4f:
72:c0:2a:aa:ca:3c:9a:6c:d0:40:a1:3f:6e:23:18:f6:e9:b5:
6f:c4:5b:b9:d2:3a:e6:94:7f:c1:50:1f:bb:9a:14:89:18:8f:
11:4e:db:26:aa:7a:94:57:d1:82:89:9f:d6:bc:8f:dc:a7:99:
bb:0f:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:18 2025 by rpki-client