Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/34272a80-5f28-3c46-b963-4434bbbee70b.roa
File: 34272a80-5f28-3c46-b963-4434bbbee70b.roa (raw, json)
Hash identifier: I14EMrt8RL3ToO0MpJwmLK3tqPXgKLtgWc23/CMJ9hY=
Subject key identifier: 77:D1:BB:BE:0E:00:50:4B:4B:A7:80:39:FD:50:3A:44:08:C8:84:2A
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584824FA8DC5A5F34A64D9107080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/34272a80-5f28-3c46-b963-4434bbbee70b.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16696
IP address blocks: 216.120.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8d:c5:a5:f3:4a:64:d9:10:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=b29fc000-1fcf-4c66-aaf8-791c7d645288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:43:50:28:d5:95:ce:d0:46:4d:3a:b9:53:cf:
a5:92:76:61:28:63:22:04:b8:21:a7:d0:a0:25:fe:
eb:28:a8:c3:18:47:bf:d1:63:87:4b:16:18:77:9d:
17:61:29:5c:41:88:6e:d6:25:66:0b:32:83:ae:db:
dd:5d:a9:66:16:be:c3:fa:ee:03:de:9b:4d:ed:3a:
47:ce:f0:6e:db:75:42:2c:3d:e8:e9:c2:22:67:6b:
13:cc:2f:88:e3:b5:95:83:e3:5d:87:a7:9d:21:97:
f2:bf:d6:7d:3c:44:87:c7:88:54:54:ae:09:71:49:
65:ac:92:c5:55:b1:d5:29:be:cc:5f:47:17:f2:9c:
15:63:08:de:4b:93:e1:69:8c:3b:ca:77:61:81:78:
c1:eb:fc:a4:3b:05:43:68:c0:fb:0e:99:a6:d2:e7:
23:c1:b3:35:dc:28:95:d2:80:d3:73:21:70:0b:43:
d4:f9:99:02:da:c9:42:c3:95:bc:f2:4f:0a:26:b2:
be:f3:68:1a:73:ec:87:6d:b5:7f:c8:ab:d0:52:c6:
d8:0c:22:75:97:d7:a5:b9:2e:82:2c:74:40:52:75:
0f:02:e1:a7:1a:c6:48:4d:3e:90:b1:ea:6f:a0:dc:
3e:3a:2a:5c:e5:4e:16:8b:bb:a2:e3:7d:67:dc:60:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:BB:BE:0E:00:50:4B:4B:A7:80:39:FD:50:3A:44:08:C8:84:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/34272a80-5f28-3c46-b963-4434bbbee70b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:aa:63:97:3e:64:42:72:9a:ba:35:4e:52:b5:c2:99:17:aa:
f6:ab:52:92:ce:b8:e9:f5:8e:93:6d:74:7b:fe:2b:8b:e4:2c:
1b:cc:a0:17:fc:cd:83:67:21:fd:5b:bc:f3:d0:b5:5a:8e:1c:
4b:8c:27:98:ed:66:bc:8c:d6:2a:07:a5:34:15:83:75:90:f1:
7a:65:c2:5d:0c:7d:2d:6f:05:df:39:72:b6:64:03:f9:6f:1d:
64:e9:97:32:e6:49:81:69:58:71:1c:01:ca:fb:c0:3d:33:ee:
67:06:f2:56:33:26:2c:d2:92:bb:94:d1:d9:4f:38:7b:26:ae:
da:07:da:9e:76:11:7f:67:1e:ff:31:29:6b:83:1f:c2:f9:24:
26:fc:ab:d7:c1:8e:f1:ea:c0:44:72:78:fb:b9:0b:9d:3e:af:
bf:f9:1f:8c:5c:45:49:0c:b9:26:e0:52:4c:70:50:96:cc:c9:
28:b0:87:7a:58:4b:3e:53:8b:d0:9e:92:a9:57:cc:05:f5:64:
82:a3:1b:f0:6d:87:31:a9:aa:54:c6:05:ec:9d:ec:e9:b3:63:
45:5e:0a:d1:1d:ac:50:fd:72:77:f7:ae:2b:f9:ea:34:70:77:
ce:52:b1:8e:2f:e4:37:07:d0:74:c2:e1:c9:26:d9:f9:9f:4f:
0b:c6:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:04:41 2025 by rpki-client