Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa
File: b45e4130-0497-38e3-9e94-bc71e24b4c95.roa (raw, json)
Hash identifier: 5z3JbY8wUXHTLqIY7hwUlOasLIitB2/uP4R16C0tJ3A=
Subject key identifier: F2:D9:D6:F0:51:94:42:0F:EC:6B:DE:6D:FB:F8:38:F5:C6:F6:30:9F
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF6147277A7791B8E1B4A580
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 67.221.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:47:27:7a:77:91:b8:e1:b4:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=4b2611f0-dc2d-44e6-b843-6eb507ea1bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:93:38:66:fe:9c:ec:4b:70:0f:92:3c:af:
cd:f3:d7:8f:da:81:39:0a:ef:4b:80:55:5f:90:30:
0d:f6:08:a1:9a:64:d9:25:29:22:3d:ca:49:d2:78:
86:73:69:fd:03:b1:0f:a4:51:44:16:2d:bf:c9:8c:
1a:5f:c4:6c:9e:c1:1b:7d:9f:8e:e3:eb:84:f1:32:
d0:25:df:71:13:0a:a1:27:73:a6:d1:13:36:16:d8:
25:a9:f0:32:28:65:60:0e:f4:d0:ea:f3:97:b6:d3:
81:f9:2a:5c:a7:d5:99:b5:6f:5a:98:6f:3b:7f:72:
c1:75:1c:ed:f4:88:f6:f4:20:a5:ce:9d:e9:a7:a8:
b6:2e:be:1d:fc:0a:66:53:f6:ca:6f:01:0e:2a:42:
68:85:45:1b:23:2b:9f:0b:4f:39:34:5e:5f:7c:b2:
50:d2:b5:62:d1:b6:2f:0d:b7:15:fb:a2:e1:7d:a7:
7d:f8:2d:c7:14:c6:6f:24:fa:1f:6d:80:65:ce:85:
57:06:67:f3:28:7f:b0:fd:40:c0:a0:90:a0:4a:cd:
fd:e3:b8:ef:31:6d:43:40:9a:47:95:b0:6b:d5:4f:
60:d2:59:b1:9e:af:c7:7d:2a:47:b6:5a:be:b2:7c:
35:2b:a2:6c:e8:f4:0e:be:36:43:8e:14:b8:16:e3:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:D6:F0:51:94:42:0F:EC:6B:DE:6D:FB:F8:38:F5:C6:F6:30:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b45e4130-0497-38e3-9e94-bc71e24b4c95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e1:f0:70:f3:32:16:4e:a7:77:1e:36:ad:1f:27:b5:d2:46:
09:8f:ec:b0:20:43:21:9d:4e:e1:fe:64:b9:0c:bb:57:ae:58:
83:89:bd:84:28:f8:98:e1:eb:9e:db:2b:24:e5:d7:de:a8:f5:
ec:c4:42:40:30:1d:b5:09:7f:b7:b0:8b:99:cb:76:a2:59:d7:
aa:0b:42:10:e3:f1:a0:21:9b:a7:9e:84:0b:56:7a:0d:89:74:
9f:42:d7:91:9f:48:39:4b:e7:fe:ed:61:cd:23:ca:20:d7:b1:
21:92:a7:5c:4a:4f:1c:48:c2:d1:36:d8:1a:47:0e:ba:56:5e:
aa:79:61:ac:2b:5a:65:22:83:0d:2e:a1:54:ae:bf:62:2f:e2:
98:61:fc:52:83:7f:ad:66:1b:31:3b:1f:7f:40:44:28:23:d5:
52:63:71:a8:24:aa:ad:ef:1d:a3:9f:44:5a:af:66:14:75:26:
57:0b:ce:c3:fc:a9:16:d0:a4:1b:5c:e3:73:86:c3:f5:ba:41:
06:2a:56:ec:3a:d7:af:6f:e2:c9:df:3b:a4:19:86:14:11:8a:
2c:2b:89:14:fd:19:c5:a0:06:56:25:07:8b:d5:d2:0d:12:90:
21:4e:b4:fb:95:d6:9a:99:ce:1c:21:a4:e0:91:78:97:6b:ed:
00:07:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:26 2025 by rpki-client