Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa
File: 21f90337-d188-3ea1-97de-8c8ca38cf817.roa (raw, json)
Hash identifier: La6y6uQyukLScgULBTY4ARHfZZgSFZGPPprvJxsPSIw=
Subject key identifier: AD:43:06:A9:DD:9F:33:CD:4D:8E:7C:3B:2D:52:2B:4C:A9:A6:2E:84
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF614709ABF0FB98831A6D80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 67.221.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:47:09:ab:f0:fb:98:83:1a:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=e74344ab-cb62-48c1-b1fd-68b9f8108edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:29:0d:db:79:ad:df:c2:1a:6e:6f:35:53:
de:1d:de:55:ed:a5:d5:ac:a1:e2:f1:16:f0:7b:27:
5e:f8:ea:20:c9:41:e5:06:93:e4:fd:f9:f6:15:ae:
92:c9:c4:d8:5c:11:75:76:97:de:28:85:a8:1a:09:
b4:d0:54:fc:30:0f:8b:01:54:f1:32:02:57:49:4a:
d6:fa:6d:41:7a:13:42:2d:31:79:71:92:5a:31:a7:
5f:8b:af:d0:8e:7e:b4:5f:41:67:6b:f3:43:46:7b:
8c:48:40:bd:0e:f1:67:8d:c4:06:04:37:5b:d8:7a:
d8:a2:b4:03:9c:cc:e7:ed:78:5e:a3:62:f2:f2:aa:
80:37:78:d3:f2:fd:bd:25:01:f1:e0:9c:17:bc:77:
6d:c0:86:8e:37:6b:28:3c:23:4e:9b:29:e4:d1:ee:
8e:d1:79:2e:c2:eb:22:4c:6f:50:65:85:d6:34:93:
50:92:db:43:90:48:13:5e:82:64:0c:68:e4:8d:00:
ef:59:72:2b:04:58:12:9a:f8:1d:22:ea:07:cf:90:
10:be:ab:37:d7:45:a1:75:ca:fa:57:37:ef:36:79:
ae:12:d9:14:ec:fd:10:34:7e:82:f9:7b:e2:1f:7a:
c2:07:b0:eb:2c:c6:24:56:25:56:bc:be:9c:dc:00:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:06:A9:DD:9F:33:CD:4D:8E:7C:3B:2D:52:2B:4C:A9:A6:2E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:66:af:99:24:b6:04:e4:17:1e:ee:a5:bf:38:a4:cd:c8:0a:
ec:f2:f3:b4:ed:20:e9:71:77:5c:44:99:58:48:f3:70:08:b1:
94:66:7e:0e:04:3b:6b:a1:26:8c:6f:49:df:8a:60:ef:61:e2:
b1:08:81:37:34:ab:24:9f:e2:16:11:8f:0c:c9:50:bb:5f:4e:
03:b3:5c:39:43:e2:85:78:17:51:6f:de:54:42:50:a9:76:05:
90:82:35:7c:1b:9b:f0:9d:83:61:7d:93:9d:fc:01:a4:fe:c0:
5e:c5:3d:ca:c6:6e:71:20:55:08:a0:f7:59:0e:0d:b9:eb:0b:
a5:60:a1:a6:50:aa:a2:76:ca:44:d4:47:47:fd:34:99:b8:60:
1c:55:94:5e:34:51:06:70:7d:8c:4c:2a:88:5f:c8:5c:f3:6e:
ab:81:5d:15:a9:55:c3:e7:db:e5:e4:1d:d7:56:dc:b6:39:2f:
84:fc:d5:93:99:c5:a6:29:cd:59:ac:3f:98:f2:97:e7:a7:33:
e5:4c:23:88:4e:c7:07:65:4c:2e:4b:d1:1f:80:1a:e5:5c:12:
8f:05:7a:0c:fd:22:01:7e:52:c3:63:81:19:74:73:5f:3d:c7:
ff:77:5e:d9:4c:46:32:48:d8:b7:7f:52:70:18:86:95:e9:49:
47:83:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:20 2025 by rpki-client