Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
File: 9ff280db-99d3-3021-aa5e-b41e7078f63b.roa (raw, json)
Hash identifier: WWhaQS/jZWtYaV7BL1xweoqJT9B05Md4r+16mfmlF3s=
Subject key identifier: 94:0C:6A:04:7A:25:AC:3A:45:B5:6F:5F:CF:5F:3F:59:26:32:98:83
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584902EC1B439AC63E3DFE270300
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 170.199.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1b:43:9a:c6:3e:3d:fe:27:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=17b68956-46ba-40a0-bebc-8b8ba0f0e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:91:3d:e4:d7:c9:a8:da:83:13:ce:ed:42:
61:d3:2f:16:38:42:04:09:ea:14:39:f6:06:5c:51:
79:ca:bd:fc:73:10:59:fe:62:80:9f:5f:8e:ce:22:
48:6f:b4:a7:08:6a:d2:90:07:22:f6:74:c8:a6:78:
a2:e2:77:5f:e3:e2:d8:bc:c2:63:2f:99:db:5c:a5:
54:14:f3:34:15:8b:09:c8:ed:6d:b0:9a:32:8d:7e:
d5:be:73:60:4b:c2:b4:7c:7a:13:25:0b:5c:6b:a3:
a0:2d:eb:d4:17:68:5b:7f:f6:64:9e:5e:36:b5:3b:
1e:42:85:5d:65:a3:b4:e8:e1:61:bc:50:25:b8:e6:
67:86:2c:de:3c:84:71:69:d1:90:fd:f7:75:a0:bf:
f4:ea:7d:33:0b:25:62:db:87:3f:82:9f:44:4a:96:
fc:65:ea:85:c5:6d:af:18:c7:2d:d9:79:78:1f:80:
f1:cd:cb:28:bc:b2:cd:05:d6:ee:ea:67:8e:11:b5:
0e:05:1b:b8:50:0a:b4:31:82:2e:28:43:da:34:ec:
60:f9:1b:6b:52:2a:9f:1a:5a:d3:fd:29:6d:ee:76:
99:a7:90:c4:73:17:2c:05:c1:c0:84:47:f2:c9:5a:
2e:73:c2:2c:bb:63:9e:5a:86:ec:df:31:42:55:74:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:6A:04:7A:25:AC:3A:45:B5:6F:5F:CF:5F:3F:59:26:32:98:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:1f:a8:16:1d:f2:00:51:90:96:07:b8:7f:f7:ad:16:90:69:
97:dc:c1:f8:47:f7:70:98:14:76:bd:5e:01:18:b0:2b:91:e5:
cc:1c:eb:83:94:8b:80:12:c7:3c:0b:7c:e6:7b:d8:bf:fd:85:
69:5d:ab:62:c6:8d:bd:36:ea:09:7d:aa:0c:f0:d8:ec:27:b1:
e7:b5:0f:f0:26:bd:ad:f5:11:64:19:c1:39:33:9a:60:a1:e5:
65:2f:5a:f5:92:59:fd:ba:f8:39:e9:1c:dd:79:b9:3f:69:a3:
68:e9:e5:b3:ba:21:32:3c:6e:90:74:50:de:62:9f:12:d0:6a:
c5:d0:7b:5d:de:70:cd:28:d9:5c:e3:d3:ac:e4:56:f1:9c:ff:
5f:4d:f3:e7:be:f1:73:0c:5c:44:27:6f:5e:32:f2:5d:0a:29:
4b:d7:53:83:f9:1a:e0:ab:36:ab:4a:d9:94:d2:5d:12:0f:a0:
86:d1:4a:f9:95:bf:80:a5:e1:32:57:2b:2a:db:8e:3e:56:28:
9a:0c:29:57:36:5d:68:46:5d:79:96:dc:ef:1c:3b:ac:af:44:
62:65:4d:18:69:3a:70:e3:53:f2:08:b7:e2:cb:7f:bb:6f:9c:
cd:8f:b4:3a:1e:3f:77:e1:ea:f1:c7:fc:74:a3:92:ad:9e:2d:
0b:70:a4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:14:14 2025 by rpki-client