Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fc48759a-45e6-3a50-8dcf-0415b6c19399.roa
File: fc48759a-45e6-3a50-8dcf-0415b6c19399.roa (raw, json)
Hash identifier: TNQaJe2mUC8QlmrSbwDBJLwWc+NA/8t18MMyV5C8wE4=
Subject key identifier: FE:4F:B5:6E:E8:DC:DD:A8:6B:35:2F:30:A3:F9:90:A3:60:21:A6:0F
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584905B6B6732E3A5CBCA4D222C0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fc48759a-45e6-3a50-8dcf-0415b6c19399.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 216.247.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b6:73:2e:3a:5c:bc:a4:d2:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=9ff0b5b5-cc04-4269-a232-841c99ac2704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:c4:cc:54:34:c7:f7:46:d4:62:60:48:b0:
d8:af:f1:9d:c0:1f:e3:40:f9:1c:a7:64:41:05:6c:
d3:1f:bd:c1:19:7c:a3:fb:82:0c:2b:33:64:2d:f4:
7a:79:72:4a:5b:fb:94:09:bc:db:ed:f8:57:12:a5:
fc:79:8d:f9:73:88:c4:64:60:c4:09:d5:d3:4c:03:
f9:b1:db:9b:a3:b7:96:12:9f:28:ae:e9:ff:c9:b2:
bb:21:41:e8:ec:69:87:12:c8:a9:46:89:d3:ff:2b:
c4:61:16:55:ba:96:0a:33:3a:21:0e:7f:3f:03:41:
fe:bb:35:a6:aa:05:f7:f9:c5:9b:bd:cf:ec:47:7c:
a9:a7:90:e4:81:18:32:6a:05:19:a6:09:da:0f:fe:
96:14:96:5d:6e:66:e0:dc:0a:27:61:f8:47:5c:a5:
e3:ef:d1:2d:32:5f:8c:52:57:06:4b:35:3a:1b:10:
31:74:4c:14:16:9e:e1:4c:4a:92:ce:53:bd:6a:f0:
71:25:c7:d9:ea:5b:90:20:5f:62:90:71:7d:fd:be:
ed:9c:48:1f:83:3f:92:e5:63:64:9c:cc:40:32:d6:
13:ae:d5:9a:2a:5f:80:70:fa:f4:19:94:d6:e1:f4:
a2:98:80:50:01:7f:86:f7:33:77:50:5e:61:ed:c7:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:B5:6E:E8:DC:DD:A8:6B:35:2F:30:A3:F9:90:A3:60:21:A6:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/fc48759a-45e6-3a50-8dcf-0415b6c19399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.247.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:3a:ad:48:b9:b9:d2:a1:1a:22:f8:04:22:a7:f1:1b:16:a9:
d1:d0:ed:29:a6:a3:b1:a8:52:5c:8a:08:4e:fc:04:43:a6:a3:
84:42:02:a8:d8:24:c3:2f:18:a4:3b:2f:8d:11:4d:e4:f1:c0:
d6:cc:49:0c:e7:f2:39:82:e1:4a:80:c0:2b:4a:09:c7:5e:a1:
4f:bb:bb:3c:a3:ac:26:f3:64:d4:f5:e0:c7:13:7a:39:71:08:
10:4e:11:52:8a:c0:ac:db:73:8f:0b:19:c4:6f:14:59:6b:fe:
57:6f:7f:fd:e7:a8:8d:a6:b8:bc:99:2f:2e:21:a3:9d:d3:f1:
f4:97:ff:9b:9f:98:6f:b9:d8:c6:03:ba:a0:c7:dd:25:72:53:
bd:22:f5:95:3d:a5:12:78:e3:6d:4b:2f:58:54:a9:65:1d:e0:
ca:1f:f4:7d:ac:41:b1:43:bd:74:0e:c4:3a:3d:31:07:d4:2a:
78:e4:8f:4e:58:27:e0:88:0a:bc:86:84:17:d4:ce:f5:44:f9:
5d:92:53:76:68:b4:b8:14:7f:46:06:64:76:07:30:8c:7b:92:
46:44:d9:47:02:e0:d8:fe:75:57:ed:65:5c:3b:4e:8a:88:88:
d9:c7:d7:f0:b0:5b:e8:81:33:ea:72:c2:38:21:97:9f:f3:28:
75:b1:0c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:40 2025 by rpki-client