Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
File: 178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa (raw, json)
Hash identifier: 4IzwRrILcN1hwepeW7IT9X9I8F1+KehxX+z84Afi7mc=
Subject key identifier: ED:09:EA:9C:5F:4E:50:28:54:71:77:D7:BB:9F:F9:1B:C4:1E:20:C9
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848222FE50193DFF224E7218C80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 199.192.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e5:01:93:df:f2:24:e7:21:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=e21a490c-6b6b-40f5-8c35-a1a966bc2bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:28:40:e3:69:72:55:df:76:aa:1c:9b:1f:
d0:a5:af:63:c2:41:31:3a:3c:30:b5:3c:f7:a1:11:
68:4f:96:df:01:59:a7:62:90:7c:dd:a3:ad:0d:52:
ce:05:44:b3:78:02:b5:45:d7:12:96:e4:f5:9a:f5:
e4:aa:5e:84:d7:10:c6:a6:b2:11:36:07:01:4b:f6:
78:b7:63:a8:d8:61:8c:a4:85:a5:ee:25:fe:1f:74:
13:0c:43:33:88:8b:dd:b2:07:cb:8c:f5:38:21:af:
39:ca:41:2c:6a:b4:ea:90:d4:83:91:57:66:af:71:
ec:a8:f3:0c:19:02:27:90:a3:3d:db:e9:6f:10:d5:
9a:62:98:6d:4b:f7:33:3a:75:de:46:5f:66:e5:ac:
1e:43:39:5e:8d:19:af:1f:96:68:05:f6:db:ac:81:
1e:39:cd:71:9c:08:4a:1d:26:47:21:18:9c:c1:97:
b2:2a:ea:1e:bc:42:f1:5e:14:b2:59:f5:fe:d9:f1:
8d:d8:d5:89:da:15:35:b2:c0:da:0a:39:97:48:5c:
08:9f:2b:1b:a3:5b:1e:db:1d:20:e2:11:4c:02:bc:
c8:c6:d3:b4:98:77:73:4d:3d:56:5d:f1:ba:6b:96:
7b:84:09:8d:46:a5:7c:cc:82:4c:1c:55:7d:bc:0a:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:09:EA:9C:5F:4E:50:28:54:71:77:D7:BB:9F:F9:1B:C4:1E:20:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/178e0d2c-8a1a-3347-a708-9cf673f3edd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b2:18:3e:15:83:ef:6a:fa:18:20:d9:3f:5d:db:ed:4d:81:
9d:f8:c4:35:15:77:7a:61:23:41:44:2a:7e:0a:0e:04:0e:04:
43:4b:f3:93:5a:e5:2b:9c:ca:bc:5e:a9:9f:8e:25:7f:ee:c5:
6c:d3:c9:6e:0e:86:26:09:e9:38:66:ef:02:9f:25:24:49:91:
ca:a2:4e:7a:c5:f7:ad:fd:32:37:37:72:21:b0:20:ca:6a:43:
89:d2:59:d2:7e:a6:57:da:aa:1c:91:94:df:5e:3c:7a:37:08:
5d:a0:67:31:54:59:b0:f3:b8:2d:84:0c:f1:14:fa:cc:fb:d7:
fb:cf:36:74:e6:2d:0e:1c:ab:6c:ed:8d:9a:1c:4d:e1:48:e5:
f1:88:46:6c:21:8a:36:01:18:99:e6:c8:cf:cf:9d:0b:e9:61:
70:77:82:f6:d5:dc:f1:f3:ee:e7:ba:0f:2a:73:ca:83:54:c2:
39:fa:73:f7:87:fe:be:8a:a6:a6:03:f5:62:63:7f:2e:ee:b5:
38:aa:53:c5:9d:34:f4:94:8a:ac:00:42:e0:cf:75:fc:5c:31:
25:8d:7b:07:e0:9b:29:1e:bb:34:8a:1b:69:6e:e9:66:d3:d3:
a5:b0:70:26:f1:04:cd:f8:96:bd:8e:35:23:0a:d4:68:12:ba:
c0:26:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:23 2025 by rpki-client