Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa
File: 1b06cec3-b87d-3d00-80c7-02d4e4430976.roa (raw, json)
Hash identifier: avhJphnydDaFbACO1RsaGuutd9moUjnOxyaw3BVn+0Y=
Subject key identifier: CE:26:BB:1F:88:85:BC:A4:CB:20:39:E3:49:C0:85:20:02:DC:1C:B4
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A969305E380602255B400
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 147.129.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:96:93:05:e3:80:60:22:55:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=4ae8a6eb-7cd2-439a-9a8d-3a3e4d43bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:ed:cb:c2:43:eb:94:e6:06:c8:85:0b:e1:
f2:4e:93:a8:cc:71:65:e7:4e:69:d3:7e:07:2d:7e:
a8:a4:20:41:37:ba:76:f2:8c:21:53:d8:00:c2:7f:
06:76:f5:a6:4f:cb:63:d5:e2:b6:00:11:8c:ed:db:
7e:b7:b2:9d:d7:3a:94:9c:b2:dc:3b:d8:5b:64:e3:
90:b7:73:f3:f8:a7:20:4d:e0:b1:94:0d:f4:8f:80:
c2:bf:9f:a7:e9:00:e7:dc:f3:f9:88:c8:35:f1:9f:
22:ac:0d:65:f3:31:53:46:93:57:8d:50:64:05:ba:
65:98:3d:b8:06:01:76:b4:01:69:72:21:8e:bd:e0:
ed:f9:b7:a1:86:df:8d:f9:9f:cf:65:c3:bb:71:65:
ac:5c:8a:36:19:3c:8a:76:b0:92:6a:fc:1e:8f:46:
cd:a0:53:aa:23:39:dd:e2:9c:d5:3f:ff:27:3f:11:
14:16:89:02:0a:58:9d:e7:e0:d8:7a:1a:1a:e3:ee:
e8:cb:cf:c9:f5:58:de:44:06:35:8f:72:57:29:a9:
31:37:a6:7f:86:47:9b:8a:28:a2:36:ae:36:6b:85:
a3:61:51:7c:df:0a:03:ad:38:f5:30:e6:07:3c:8f:
8a:a2:6e:9c:37:3e:31:0f:c5:20:04:4b:c0:67:4f:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:26:BB:1F:88:85:BC:A4:CB:20:39:E3:49:C0:85:20:02:DC:1C:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1b06cec3-b87d-3d00-80c7-02d4e4430976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
147.129.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c0:03:a9:74:55:87:21:c8:3f:c4:01:23:ed:e7:c6:67:cc:
40:28:36:ee:b5:3a:75:e6:ae:c3:c5:7a:33:e2:3c:04:56:55:
a9:c1:ba:8d:e4:71:7a:11:9b:cd:5f:88:cc:e3:f0:59:9c:b9:
87:b9:25:c2:a4:08:78:e4:76:dc:b2:8a:70:67:ee:e0:a8:2d:
17:8e:08:c7:cc:3e:7e:44:47:31:4c:8d:bb:ad:95:1e:6f:65:
f6:9e:ee:8d:db:93:96:b9:e4:86:10:f9:df:ff:1f:da:38:5a:
cd:c5:a1:74:50:35:f0:51:c7:db:f5:d9:fa:81:66:5d:38:74:
db:e0:45:15:b5:f1:30:1f:ce:7a:b3:4c:75:08:11:5e:f0:70:
aa:5a:60:b0:cd:dd:43:62:51:ba:f0:c1:89:e8:2c:eb:41:76:
58:9d:95:3a:42:3c:ab:2a:f3:78:fd:55:ae:5f:d4:dd:5f:b9:
ab:d9:b0:64:75:9c:45:eb:11:2c:11:24:40:f1:5a:4b:ea:53:
75:dd:6a:46:ca:31:b4:79:06:c1:50:05:5b:e6:be:99:c8:cb:
9b:ac:06:72:39:78:a7:ec:f4:eb:fc:2a:9e:8a:5a:b3:4c:6e:
c6:0d:22:3b:7d:fc:31:c4:ff:8c:b3:80:0d:b4:54:f7:19:0c:
c8:ec:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:16 2025 by rpki-client