Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
File: 9ff280db-99d3-3021-aa5e-b41e7078f63b.roa (raw, json)
Hash identifier: /Byvho0EhPUCLA/Y5gZC+soYoGQGxZ2eZ38Pm0r27eE=
Subject key identifier: D2:F8:33:3E:2E:AF:37:EA:47:C9:64:48:D8:56:DC:76:DF:BD:69:FC
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848222FECBBAEC6E52FE0CA3900
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 170.199.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:ec:bb:ae:c6:e5:2f:e0:ca:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=206e31ef-a53c-441a-84d4-14a85afa943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:86:ec:e5:f7:dc:91:bd:a1:75:df:f7:33:
6a:c6:41:8b:3c:3c:bf:9a:a9:10:d7:74:b0:9a:09:
fe:f5:e9:8e:ab:14:06:c1:36:d1:09:43:54:bd:77:
f9:4f:2a:a9:c2:8f:23:c7:a9:4e:45:fc:88:06:98:
fb:4f:f3:40:df:a2:db:49:0b:8d:69:94:49:80:78:
84:33:b2:21:39:6b:5d:9a:a4:3d:9d:8f:32:0f:78:
99:bb:d9:fe:29:6f:f9:b8:05:48:89:b4:37:57:83:
34:e2:61:2a:d7:1f:ad:3e:8f:23:64:d5:ba:4b:09:
38:8c:ce:46:3b:06:58:29:7c:a5:78:81:b7:76:6a:
40:a8:1d:75:e8:5a:6c:34:ab:e2:2e:2e:73:1d:c9:
a1:24:a7:00:43:a7:41:6b:08:63:d6:b4:c3:f4:63:
eb:cb:e7:a7:cb:bc:4e:84:71:19:18:03:be:ef:37:
ba:d8:1d:2e:68:eb:10:5f:2a:d5:68:45:2a:10:0a:
6a:2a:0a:3d:77:8d:bf:78:c4:07:94:67:43:0f:67:
2c:29:60:46:1c:d9:2c:bd:d1:20:59:b8:2d:73:f4:
9d:9b:c3:30:42:5e:c0:af:c3:e7:6c:76:5d:f7:a6:
ac:2f:30:c7:1b:1b:ad:7e:17:30:42:ab:a7:28:eb:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:33:3E:2E:AF:37:EA:47:C9:64:48:D8:56:DC:76:DF:BD:69:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:54:8a:2a:a9:44:2b:65:55:b5:ea:cf:54:55:69:29:fa:5a:
af:3d:38:25:d7:7a:6c:2a:e5:a4:4b:db:aa:ea:b7:e7:e5:5a:
52:35:0b:d2:3f:8f:9d:14:5c:5c:61:aa:d9:ce:2a:14:ac:1f:
07:7a:e0:33:56:e9:ef:3e:4d:08:76:80:48:ba:b3:a4:26:06:
ef:c9:46:df:f1:45:11:07:5a:98:4d:81:0b:b5:03:dd:f7:49:
84:53:20:9f:31:80:e9:06:ab:06:81:3b:ca:ac:b7:d5:c7:03:
c1:2c:4a:75:f4:2d:59:33:6a:c4:5b:fc:02:bc:6d:d1:ac:25:
82:89:de:d7:9e:68:22:02:c5:10:31:f8:0d:1d:7a:fa:63:5e:
e6:d5:ef:26:26:c5:53:4b:fb:9d:c4:b2:17:34:83:87:4c:45:
dd:b5:87:1c:99:79:61:7d:4d:48:e8:d7:f6:f8:2b:9b:9b:87:
fd:96:93:57:12:ae:b7:0a:d8:f5:61:de:58:89:67:a0:9d:23:
f8:53:c1:8a:17:77:18:65:bf:a1:7a:94:44:6d:27:f7:d3:b3:
34:c2:54:88:0d:63:22:91:79:06:3f:b7:62:8e:05:8a:9d:23:
99:da:e8:3e:d7:00:cb:71:bc:1d:61:25:b5:19:a8:f0:08:aa:
55:7e:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:38 2025 by rpki-client