Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/15bf383d-053e-38e5-b44c-6ce1f41eec83.roa
File: 15bf383d-053e-38e5-b44c-6ce1f41eec83.roa (raw, json)
Hash identifier: vwT45RoiOAeaeqv9I3X5HqYkfkuPc8H1C1S4Z0NJq/g=
Subject key identifier: 70:A9:B2:11:9C:1C:84:84:EC:EA:45:DB:D4:64:E9:C4:83:5F:09:10
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584824FA8DD5E85013B36DA64900
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/15bf383d-053e-38e5-b44c-6ce1f41eec83.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16696
IP address blocks: 216.120.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8d:d5:e8:50:13:b3:6d:a6:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=419f2173-867e-41d9-aba4-00150473321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:fc:78:78:c4:c3:3d:25:70:c7:e5:98:ff:
67:dc:28:65:f9:d4:2a:43:cf:cd:08:57:f9:f0:f3:
cd:8b:ad:01:65:8f:1a:7f:ba:2d:5a:46:4b:72:2b:
93:39:f3:9e:44:0a:39:4b:c3:8f:a7:53:64:0a:97:
bb:44:25:df:9d:8e:8a:25:4b:91:2b:95:eb:cc:86:
34:2c:8b:b0:89:f5:4a:62:ca:11:a6:9c:51:62:96:
d7:12:58:12:13:92:c0:a7:e4:02:00:88:7b:2f:22:
13:69:e0:9a:11:b7:ed:4c:61:ee:2d:39:3c:eb:b1:
40:c8:4f:b5:22:ff:2b:66:0a:50:65:22:08:8e:ca:
a7:f2:a5:1d:be:5e:e9:8d:da:01:d0:56:c3:4d:6e:
3f:68:63:ec:44:40:96:e5:16:e1:5d:49:79:62:00:
43:30:e8:57:68:aa:b5:23:61:41:23:01:e1:70:77:
fc:d6:b3:a4:a2:df:d3:5d:46:a5:b7:1a:80:1d:9e:
12:9b:e0:d0:3d:32:37:8a:22:44:1d:2e:67:e3:15:
6f:8f:71:70:29:fb:69:40:a4:7c:67:87:98:d1:28:
70:22:5a:82:0e:85:f7:4e:91:dd:e1:f9:ba:11:44:
20:c7:2c:3a:4b:ac:0d:3f:2a:52:b3:32:bf:3c:31:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:B2:11:9C:1C:84:84:EC:EA:45:DB:D4:64:E9:C4:83:5F:09:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/15bf383d-053e-38e5-b44c-6ce1f41eec83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:a1:9c:b5:d5:60:e0:80:74:c8:27:11:ea:5c:a4:b4:ea:6c:
59:54:86:b2:64:67:e7:32:e3:50:b0:89:e1:c4:a4:f5:1a:0f:
ac:19:82:ae:ed:98:45:16:17:3b:66:80:dc:81:32:9f:2e:00:
72:58:38:7a:3a:e6:26:6c:52:5e:67:cd:0c:83:5d:ee:20:18:
0b:9a:bb:d4:41:83:60:ca:4a:86:57:e8:be:6e:aa:ce:6c:66:
a8:cd:76:1b:f1:7c:54:6f:c7:b1:bb:e9:5f:6e:7c:ad:12:9b:
97:67:75:95:25:cd:c7:5e:c1:c2:c3:14:07:4b:0c:d1:54:9d:
d3:db:07:c7:cb:66:3a:a8:6a:16:7c:68:95:25:f0:e0:88:03:
52:b9:51:3a:f4:54:fc:72:5c:c7:26:07:44:ee:87:00:8e:11:
b2:e4:98:a3:96:78:cc:23:0d:1c:57:01:04:81:6b:3a:cf:99:
07:cc:38:dc:22:51:a8:43:80:94:7a:7f:25:95:f5:2b:00:d6:
9c:3c:6f:0c:eb:55:82:7d:8f:a6:05:fc:fb:bc:7a:87:fc:56:
6b:41:dd:81:37:c2:a9:7f:bb:ec:ba:af:fc:19:25:75:7f:34:
19:60:df:5b:22:df:d0:a1:ad:bc:1f:a4:13:ff:48:99:96:35:
b4:93:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:49 2025 by rpki-client