Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa
File: 5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa (raw, json)
Hash identifier: 35sUl9ywQm9es2OG3gO9Bmn0ItqJMhEs1MIEOmZ3S8o=
Subject key identifier: B8:94:77:2C:21:10:C1:23:22:3A:E4:55:C7:D7:E8:F7:63:B6:21:49
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584902EC1AA20E51FC8F33E3E000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 167.94.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1a:a2:0e:51:fc:8f:33:e3:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=fff023a8-41f1-43fa-ba0d-69c9da0fd1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:9b:05:27:e1:88:c3:b9:ba:81:c3:c6:dc:
e5:58:11:14:e0:8c:8f:1b:5f:d5:cb:73:f7:ae:78:
7c:0f:36:37:ff:a4:c7:39:dc:8a:f9:df:8d:6f:54:
25:dc:0c:e1:fc:5d:e6:4a:57:09:9e:b0:cd:37:cc:
ae:ec:15:97:ce:1d:a1:78:ee:c4:9d:28:35:49:11:
8b:38:64:c2:f2:eb:02:32:60:3b:e5:14:84:bb:9a:
aa:d8:78:34:a3:96:81:0d:03:03:5c:91:e2:88:8f:
27:3f:1e:e7:78:c7:26:94:29:e3:0e:a6:44:05:ba:
04:a7:90:0f:4f:20:04:ea:01:32:a4:d6:91:e6:db:
eb:31:07:c4:e7:6b:46:5c:f7:ec:04:45:21:00:48:
2d:6e:b7:f9:f1:37:d4:70:92:9c:4e:c2:90:11:35:
c7:e6:02:50:36:8e:53:e9:85:48:ce:a9:f3:6d:69:
49:af:c3:eb:82:c6:e2:3b:de:38:5b:1a:01:19:99:
91:12:bb:9f:ae:5c:e8:d4:28:de:a2:3e:45:1f:8a:
99:48:d2:93:24:7b:2f:2a:a9:34:3d:96:8b:ad:4a:
d3:23:1d:45:c7:5d:10:65:bb:71:03:f1:2f:86:66:
67:f6:c9:d4:4d:d5:3f:09:53:ab:d7:2c:a0:54:85:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:77:2C:21:10:C1:23:22:3A:E4:55:C7:D7:E8:F7:63:B6:21:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
167.94.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c6:8d:3b:e3:45:5d:cf:83:64:0b:56:3f:d7:77:5e:15:cd:
68:1d:32:18:07:1e:27:14:29:1a:40:6b:5d:57:b5:35:ab:4f:
7c:83:7f:1a:fd:39:74:92:84:a8:35:e0:43:b8:ba:43:65:d4:
aa:ce:71:67:91:0b:20:62:00:53:d2:9c:65:c1:6f:18:cd:1a:
94:95:48:49:c2:ae:66:73:81:73:b4:bb:75:67:6a:72:c8:f1:
de:c1:22:f3:16:fb:06:13:fb:a2:75:01:4d:fb:51:04:e2:82:
d9:0f:67:8d:bc:7d:ea:70:d9:74:cb:0e:6f:d9:73:1e:bf:9f:
8d:a4:81:e8:7a:f7:b3:67:f8:d0:56:54:39:35:dc:9b:f8:16:
47:fb:14:c5:a4:cd:68:b5:90:40:ab:ed:52:72:27:a7:f1:c3:
c6:a9:e6:c4:eb:21:51:a3:b1:e9:26:81:ff:16:5c:ad:03:26:
cc:23:57:a0:93:59:82:a7:1a:e0:89:8d:3f:64:85:17:0f:03:
1f:ec:56:f6:0d:37:23:45:09:fc:11:93:23:f8:e1:f5:b7:c4:
d9:11:56:9c:dc:80:cb:76:b1:5f:4c:e2:ba:1e:d5:e2:96:2f:
22:64:e3:9a:29:fa:91:28:92:b2:73:87:9e:ee:c0:ff:c1:59:
cb:9d:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:23 2025 by rpki-client