Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa
File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json)
Hash identifier: 76JdW9pwrDXXplnMSSpOiHPzhwholAfW9VIYbj+ZwWw=
Subject key identifier: D8:37:85:D7:C6:9B:EE:E9:CF:AA:CB:12:20:8F:6B:3A:6D:3E:5A:07
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848FD56C5BFB3D8B01CE6896840
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 67.221.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c5:bf:b3:d8:b0:1c:e6:89:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=c9e2d9dc-08ae-47e4-a2a4-ad6c0443b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:43:a7:e6:4e:31:45:ed:60:37:b7:54:e5:
b1:22:5a:17:54:f9:25:ad:63:f8:d1:79:7e:9e:0f:
db:60:e8:1c:67:bb:a7:b6:c6:5d:a1:b7:3b:22:06:
88:5b:e1:95:32:dc:a5:c1:7b:be:e8:4d:12:63:83:
76:d0:05:9a:37:93:3b:ef:56:ee:c4:6b:8e:a5:e1:
a4:b0:8f:d5:65:74:50:02:05:29:0b:f4:50:5a:e5:
65:39:87:31:ef:e6:1a:9a:ff:29:53:a2:c1:2f:4b:
7c:70:d9:d4:d0:42:f5:5a:0b:8f:97:1c:47:3f:90:
7a:19:8c:10:6b:98:89:2e:fe:4f:4e:93:8e:6c:5c:
53:e6:ee:36:38:36:18:32:b7:8f:5c:a6:5f:03:14:
d5:98:81:36:a4:1b:ec:30:69:f7:79:2c:cb:72:3c:
b0:26:19:55:ee:35:16:76:f7:80:11:10:a6:ae:dc:
a2:26:48:d1:c2:8a:96:66:07:21:4f:53:54:67:36:
05:95:ef:99:69:7e:fe:e8:79:76:eb:a9:bf:1e:da:
1b:bf:b0:ee:60:ff:cc:10:40:3c:1d:8c:16:ad:3b:
25:26:cb:2b:1b:f2:fd:f9:d2:3a:16:a1:8b:60:9e:
52:b3:bc:5c:b1:34:d5:30:1f:76:56:09:70:2f:f4:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:85:D7:C6:9B:EE:E9:CF:AA:CB:12:20:8F:6B:3A:6D:3E:5A:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:3a:35:b6:4b:11:35:a4:06:33:be:4c:39:04:86:38:19:e7:
10:98:96:46:67:46:ef:84:17:31:51:27:d0:d3:b1:36:c6:c3:
f0:df:2c:d9:54:cd:87:3e:8a:90:3f:0b:0c:be:cc:f2:0c:24:
46:74:81:e5:05:34:53:ec:21:bb:61:7f:3b:45:d1:9f:d5:ee:
6c:0a:27:1b:e1:56:bf:8c:8c:27:27:fe:d1:6e:29:d8:bc:c5:
7f:e7:e9:1c:1c:91:e4:9c:ca:fd:70:03:88:4c:a5:6e:5c:0e:
9a:4c:7e:b1:d3:c5:03:05:f8:43:2d:46:2c:97:9b:7f:1d:db:
35:8d:ba:6d:b0:6b:fb:28:e3:a3:01:cd:66:f7:c1:67:2b:43:
e1:47:f7:b7:2f:57:fb:be:ea:69:fa:c8:bf:27:9e:85:c4:88:
c9:1b:ed:6f:76:c2:e8:9f:78:72:be:fb:c8:95:4a:62:a9:65:
25:e3:3d:9f:54:85:7b:7e:ef:1b:22:b0:15:d5:12:7d:16:0e:
00:c6:de:c2:91:a2:36:2a:be:4d:da:05:cb:0d:68:3a:9a:59:
a2:17:4d:56:fa:65:24:ae:b2:aa:7d:6c:05:aa:24:50:e7:94:
04:1f:32:0a:08:c9:d3:e4:a8:a7:b3:fd:62:f6:30:3b:13:9e:
69:da:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:10 2025 by rpki-client