Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/817275aa-9a5e-369b-adf9-b3f707627480.roa
File: 817275aa-9a5e-369b-adf9-b3f707627480.roa (raw, json)
Hash identifier: MKDRpmC4x9eDkx36or6rdBuIH+q37GjoKpb5hWBOBFM=
Subject key identifier: AD:29:6D:63:A5:4D:16:E8:F7:8A:26:5F:C1:52:61:02:64:05:00:55
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285848757CC18FACD5E372D805C440
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/817275aa-9a5e-369b-adf9-b3f707627480.roa
Signing time: Mon 06 Jan 2025 22:07:50 +0000
ROA not before: Mon 06 Jan 2025 22:07:50 +0000
ROA not after: Sun 06 Apr 2025 21:07:50 +0000
asID: 153377
IP address blocks: 216.224.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:7c:c1:8f:ac:d5:e3:72:d8:05:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jan 6 22:07:50 2025 GMT
Not After : Apr 6 21:07:50 2025 GMT
Subject: CN=bf7670d7-dde4-4c4b-bd33-391cc7d1330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:5e:71:3f:82:fe:28:21:84:ad:82:d7:37:
50:ac:d1:2b:38:9b:59:7f:55:49:ec:0c:bb:8a:c8:
84:44:7e:d9:56:40:73:40:ee:61:94:7e:45:a2:ca:
c3:b8:c6:0f:a7:c4:96:65:ee:e7:66:71:cd:4d:e5:
fb:e4:73:40:02:ce:08:46:55:fe:b1:5c:01:f9:df:
83:bb:89:f3:13:34:78:5c:04:c2:1a:cb:2b:62:4d:
52:2e:83:4b:d0:06:22:bc:bd:a7:91:bd:b3:6c:06:
0a:1c:f0:3c:91:7d:c7:d2:4d:98:12:88:cf:33:63:
bf:c6:f1:39:28:df:73:15:36:0a:32:07:ee:50:f3:
7d:fe:81:bf:bf:77:82:5b:db:52:cc:c9:cd:c3:ee:
54:73:7a:50:b3:e2:20:de:0c:31:bc:e5:63:3a:c7:
71:a3:6e:60:b7:52:57:2c:6e:b4:21:17:9a:b2:b1:
e1:a7:f9:95:a5:0d:d4:6e:a3:bb:6c:71:a1:35:e5:
17:80:e0:b0:62:76:4e:f0:d4:0b:ed:4b:d1:6d:11:
dc:8d:07:94:18:f2:8a:8e:fc:08:a7:5a:4d:8e:5f:
ca:f8:cc:bc:29:de:0a:90:b0:48:2c:ae:32:6f:b2:
7b:77:b3:66:c5:bb:59:06:66:3a:c7:eb:6b:c3:62:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:6D:63:A5:4D:16:E8:F7:8A:26:5F:C1:52:61:02:64:05:00:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/817275aa-9a5e-369b-adf9-b3f707627480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:9e:78:a0:d3:bf:22:bc:13:7f:9e:f1:30:1f:03:8f:8d:d0:
3d:39:fa:aa:65:86:d0:7f:47:01:82:86:2e:12:b3:09:2f:e3:
66:49:c7:ec:2a:6b:3f:e6:8b:e0:e8:2e:1f:73:78:04:64:2b:
bb:79:b8:f2:8c:32:ab:e8:64:04:4b:2f:d3:08:72:73:94:cd:
19:a8:6d:4d:e2:24:81:31:e7:43:42:63:ba:f3:cb:b3:96:2a:
a9:a6:b3:de:60:91:2f:a5:43:07:8e:c3:2d:04:74:22:b3:cb:
63:91:72:e4:60:49:e0:5c:07:b3:65:dc:19:26:18:73:4c:a8:
bd:a7:5a:45:09:0d:2e:78:67:28:07:5e:24:11:37:99:0b:c5:
54:79:bf:89:2f:ac:be:2e:f7:41:e3:f7:e3:2f:13:90:ef:e7:
3b:12:ac:22:65:65:33:6e:c7:9a:9e:85:e6:06:46:b4:51:7a:
90:a4:7d:43:5f:1b:29:66:ce:dd:5c:51:fe:c3:15:57:b2:dd:
d9:71:c9:f0:14:11:9b:c0:4a:31:d0:25:99:11:1d:1f:16:e5:
56:62:8e:7c:94:6b:f7:d1:e8:53:d7:1f:10:50:e1:30:15:30:
fc:82:9e:54:d4:53:93:c3:36:ed:fe:96:dc:a9:d6:d1:e0:2a:
66:cf:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:41 2025 by rpki-client