Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/768518d5-3ec1-3630-a79e-aa6386404597.roa
File: 768518d5-3ec1-3630-a79e-aa6386404597.roa (raw, json)
Hash identifier: WuiV0GgQOimaqu15WW3eh1v0HS+TmzzpXbBaKYq4m+Y=
Subject key identifier: 46:F6:F6:E6:CC:C3:39:98:55:52:4C:03:74:59:91:7F:E5:04:7A:73
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584902EC1B3722EEB05EC4CE6A80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/768518d5-3ec1-3630-a79e-aa6386404597.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 399063
IP address blocks: 170.199.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1b:37:22:ee:b0:5e:c4:ce:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=3424c543-c4c9-42de-801c-8558c09962c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:b9:ab:29:c2:81:3f:b3:92:c0:49:d9:00:
af:9f:bb:39:9a:4f:60:58:0c:0c:de:52:89:8f:e8:
6a:43:47:7b:d8:5f:9b:fb:2f:f6:b2:72:c2:d5:03:
ee:72:82:ff:ad:67:71:f8:43:9c:f5:2d:62:24:3e:
7b:23:24:7e:78:f7:09:1d:74:78:ca:d3:97:d3:24:
d9:94:0e:38:65:9c:22:29:47:11:dd:c1:c4:f6:b2:
5e:64:bf:8a:dc:c3:46:3d:6d:02:48:0d:61:e3:05:
5b:38:0f:55:9c:2a:e6:d6:8d:4c:02:2c:a8:83:69:
ce:ec:b7:74:70:c8:a7:83:0e:0d:05:5a:c0:c1:39:
6f:e5:1e:9a:af:50:db:47:d3:f3:2f:ad:36:29:d8:
24:34:a1:47:31:b4:0b:11:e3:cf:2d:dd:37:c5:31:
51:f8:ca:ea:fe:2b:e8:99:ae:4a:1d:3c:91:b6:a3:
a5:39:2d:78:ab:1e:8e:17:ee:08:a6:69:aa:d6:93:
aa:8f:08:bb:bc:68:41:32:de:04:71:a4:1f:2d:0a:
d6:b1:9a:22:1a:8f:f6:f4:4c:d0:82:a4:48:b2:8e:
d5:6f:a6:1c:ed:74:aa:d9:9b:75:94:ad:15:49:79:
29:ed:24:a6:f8:46:c0:71:01:68:0e:88:b4:07:a1:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:F6:E6:CC:C3:39:98:55:52:4C:03:74:59:91:7F:E5:04:7A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/768518d5-3ec1-3630-a79e-aa6386404597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:20:a8:c3:35:ca:55:09:37:52:f4:dc:4c:cf:89:c7:3d:26:
fb:61:a6:9e:66:c1:af:36:3b:49:46:df:2d:6e:c5:00:1a:bc:
89:76:f3:a2:2f:bd:8d:a4:6c:df:9e:93:ab:cf:91:e5:4a:c9:
f1:75:d0:51:b0:3c:97:77:be:d1:0e:c9:79:fd:18:eb:1c:d5:
fd:30:77:97:08:05:d0:cc:d8:f1:cc:f9:0a:dd:10:da:5f:60:
a8:3b:a5:3a:c2:e9:11:39:a1:58:14:20:72:09:70:70:f5:0f:
75:2a:aa:b5:1f:ee:0c:8d:4c:a6:f6:ed:08:b9:a8:e6:17:8f:
79:fb:6a:14:1f:76:62:eb:c9:41:5f:cd:3a:1d:90:55:e2:eb:
5f:dc:92:fd:25:3e:ac:c3:4f:13:58:d3:30:50:72:2a:43:d5:
60:f0:86:c0:ff:53:47:63:d8:75:17:e3:ae:23:cb:11:02:a0:
4a:c9:45:81:21:eb:46:82:ed:ab:00:11:69:d9:d2:fd:fd:0a:
e4:8f:3e:c5:06:25:ac:ec:10:0e:b8:63:fa:a3:70:20:67:20:
4a:3e:99:d2:ea:0e:22:3f:43:6a:5e:b4:bc:79:8f:99:88:0f:
3d:21:80:6c:06:c5:04:af:44:de:35:54:6d:29:61:55:df:c4:
1d:eb:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:07:59 2025 by rpki-client