Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
File: e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa (raw, json)
Hash identifier: R8pNV9Lksm9ZYkf4GJ6oO29UGe7ihPPcUyy6w6dJKdc=
Subject key identifier: A6:2C:A7:CA:4B:9A:51:CD:00:53:5E:7C:83:8D:1C:C4:36:6F:3E:82
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584905B6B69B4C41FC7EA5917D80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 216.247.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b6:9b:4c:41:fc:7e:a5:91:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=4b81ad3e-b2ba-42d1-82f4-675bf0a2e7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:4a:56:dd:85:b5:db:61:70:51:5a:48:7d:
e2:e6:62:ad:71:95:0d:06:43:5c:dd:19:11:15:30:
0a:7a:0a:cd:8c:9c:ef:18:53:65:19:26:d3:4b:11:
7a:ad:bd:75:b3:4e:00:da:24:a3:07:b4:7f:f8:b4:
a0:bf:0e:91:2e:49:64:d1:8a:39:aa:bd:3b:32:bd:
58:89:3e:f6:50:d4:93:b5:38:f1:c8:01:b4:87:e5:
3b:ea:e8:b5:75:8c:2c:32:be:8a:80:33:8e:56:fb:
e9:c9:3b:38:66:42:15:5d:9f:6b:68:f4:8b:0b:48:
51:8c:3a:e3:3c:c9:b3:6e:37:31:f5:cc:0a:bd:08:
b1:98:c3:13:80:49:2a:58:e9:40:cd:86:40:ab:d6:
47:7e:1a:ff:5e:41:23:75:b1:31:26:86:30:74:ec:
c8:af:d7:73:22:6b:6a:14:8b:40:25:aa:67:b2:c3:
b0:e5:ed:12:3d:87:b5:d4:ac:52:ae:bd:f8:08:a7:
15:85:a0:64:e5:8c:4f:ac:9c:19:07:6b:8d:6e:6e:
d6:35:8d:cd:11:e3:64:c9:f2:0f:11:26:f4:66:f0:
e4:63:9c:96:0f:96:af:31:94:94:39:9b:fd:a2:0b:
88:93:6c:5b:3e:a4:46:6a:2b:16:ff:b5:12:98:e9:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:A7:CA:4B:9A:51:CD:00:53:5E:7C:83:8D:1C:C4:36:6F:3E:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.247.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c7:75:6f:57:b1:76:83:cd:ca:a5:d2:dd:0f:4e:77:0b:b2:
b3:68:9c:a0:50:ed:54:ff:bc:ab:58:11:4a:80:30:fe:55:39:
1e:2d:d1:3e:d8:a4:01:b6:c7:04:e7:70:2f:a5:61:32:87:a5:
55:83:2b:2b:fb:2f:7d:12:de:68:cc:80:6d:97:32:10:45:8b:
31:99:3a:ac:7f:6d:78:38:e4:c5:26:a8:8a:b4:6f:fa:ba:55:
01:9e:97:d5:83:de:51:19:86:61:40:80:09:4d:f0:f4:d1:a2:
8b:ff:02:98:08:c6:cf:23:b2:40:62:b9:f9:5a:85:de:45:b5:
92:3e:77:0a:c4:a6:d2:2f:32:28:63:e4:58:19:f1:22:db:f1:
fc:82:b7:3a:56:da:05:17:2c:56:1d:9d:0b:14:85:fa:e1:4f:
c1:de:7b:16:5f:86:59:57:dd:e1:ed:64:af:0a:d3:7c:4b:9f:
d8:13:27:9b:c3:01:46:b6:63:7f:ba:2c:9f:a3:87:6a:e2:31:
ee:7f:c2:43:07:53:8e:e3:09:e7:79:47:b3:e6:27:99:9d:0d:
21:54:aa:4f:d1:23:31:d9:cd:cb:18:1e:19:17:eb:f3:6e:bb:
a1:13:cc:2b:37:ac:ad:e0:13:67:85:87:a6:06:dc:87:85:b0:
86:ba:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:22 2025 by rpki-client