Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa
File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json)
Hash identifier: 3xKN5n6GAcv1OtNX0S0VtqtAPCJnMzM3VqMrrnEW10k=
Subject key identifier: 94:5E:A8:50:B3:EA:B4:D5:E6:A3:5A:50:7A:F2:72:7A:B0:D6:AD:1E
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A95B18156DEAD59E95800
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 67.221.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:95:b1:81:56:de:ad:59:e9:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c8826383-5bfd-4dbd-96e5-b1df8040db4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:f4:30:57:fb:f3:8c:41:48:46:5e:bb:34:
a2:4f:f2:47:c2:12:24:8a:3c:ff:7d:32:b5:3c:25:
06:e7:77:5a:70:58:fb:04:7d:67:c4:df:51:a8:40:
3f:91:5f:07:07:4c:81:01:98:c5:f7:88:b5:1b:95:
df:43:61:d7:a6:6f:b4:5b:c0:31:f2:e3:b4:cd:1b:
cb:79:f0:db:bb:d8:75:64:35:f0:d0:e7:ce:03:21:
a1:c0:c4:79:ac:70:48:aa:e9:5d:b9:01:6a:a6:f1:
a0:1f:a5:c7:2d:12:f5:d8:e1:a9:5b:68:3c:be:5a:
47:40:10:13:f2:61:af:84:90:a4:7b:a5:5a:0e:ee:
7f:9b:f3:fe:3d:7a:18:5b:cc:67:8e:81:12:1f:d1:
32:fa:00:b3:90:85:b0:e3:17:7a:19:33:ef:c9:01:
12:c1:71:75:28:9c:9a:88:0a:7c:f3:43:b1:3a:b6:
47:ad:0f:65:80:04:ec:9f:e3:e6:c4:93:c3:4c:75:
ac:ed:aa:86:5d:61:d9:61:95:c4:d6:5d:22:04:58:
55:04:c0:3f:03:89:a6:93:29:a1:5c:19:96:64:7b:
79:b9:2e:36:f3:cc:b7:fc:8b:a5:2c:26:55:df:33:
86:15:8e:20:cf:e8:15:4d:7b:a1:df:b9:de:1a:4f:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:A8:50:B3:EA:B4:D5:E6:A3:5A:50:7A:F2:72:7A:B0:D6:AD:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:64:e6:71:30:6c:f4:65:cc:d7:a7:18:aa:76:5b:88:62:d4:
a2:4d:93:fe:8e:c0:14:bc:d2:6e:1a:04:8b:10:e4:d0:8e:c9:
48:52:cf:b3:93:23:21:3a:79:04:7d:02:ad:2d:a9:62:4b:e2:
3d:66:80:bb:51:b1:ff:1b:75:c1:d4:5b:1f:aa:ec:21:ba:a0:
78:d9:3e:75:c5:50:64:a9:84:7a:12:a5:1a:e4:9c:69:24:75:
97:8a:11:5a:f2:de:e9:65:04:9f:c5:18:41:74:51:d9:5a:42:
ac:b3:cc:c0:4a:2f:78:a0:cc:0b:4c:8b:0b:35:85:b2:58:47:
60:d0:06:6a:16:37:d9:57:b9:d7:29:ee:7d:09:98:59:bc:76:
8e:38:4b:9a:68:f6:57:a8:58:c7:b2:21:d2:50:a6:11:65:e4:
62:92:94:0c:5d:29:58:89:89:f3:5c:3a:28:87:82:19:b7:fb:
14:d6:36:5b:33:e8:ae:15:e3:4d:fa:94:9e:75:49:81:d6:08:
d0:1f:73:47:f7:06:aa:43:a0:a2:2a:ba:14:9a:e2:a5:44:bc:
87:56:fd:ac:7f:27:d5:b7:1a:e6:79:ce:b2:c4:29:51:20:a4:
c1:08:57:7b:f3:9f:22:14:04:c8:dc:36:b7:5d:c4:74:a7:29:
25:d6:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:33 2025 by rpki-client