Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
File: e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa (raw, json)
Hash identifier: gL2x2ItuKSgZQqmw2FZuobSqz0gNxcC3TqBhkUiYWFs=
Subject key identifier: 6D:4A:8D:7D:6B:87:16:8C:41:60:49:7B:42:02:45:70:49:CA:B6:88
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584824FA8E3E048D94DB00F97200
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16696
IP address blocks: 216.247.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8e:3e:04:8d:94:db:00:f9:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=0ad90270-524d-4f4c-abcd-64601fbcf35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:08:7a:76:de:0d:eb:e8:95:d2:23:31:5a:
c1:b4:1a:0d:df:25:1d:cf:05:82:08:9a:a5:c4:60:
f2:cc:05:1e:98:0f:7e:eb:40:2e:38:97:d6:d4:c4:
f1:6e:0c:45:36:57:d7:25:a8:cb:5a:28:ca:9f:60:
83:06:ca:8a:04:af:9b:99:af:40:36:84:25:23:10:
99:b4:40:07:f5:b9:99:97:4c:43:2f:5f:8f:89:b4:
ff:ef:4e:69:dd:db:4f:10:65:85:72:ab:cd:28:ee:
29:9f:28:ea:2c:8e:d0:dd:c9:4e:39:a6:bd:fb:67:
fa:62:92:8e:54:f9:48:a5:f8:ae:b5:97:b1:40:7d:
a7:09:3d:92:c4:ae:29:6c:fe:dd:16:c2:a1:c6:1c:
ea:a5:5e:c1:99:8f:66:60:ce:d6:d8:88:86:1c:07:
55:e9:9e:06:2f:45:9c:85:21:7b:0c:ec:3a:7b:61:
28:89:14:53:38:69:98:c9:cb:32:67:56:e5:bf:df:
a7:34:34:a5:71:7a:40:18:8d:34:a3:65:d2:6b:cb:
1d:13:6b:6e:4d:65:3a:49:ca:cd:d4:38:7f:22:f3:
b7:9a:e7:b9:cc:f3:3e:25:2a:11:b8:ec:37:1c:eb:
68:40:cf:99:c1:4e:dc:69:d6:98:77:f4:fa:4e:62:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4A:8D:7D:6B:87:16:8C:41:60:49:7B:42:02:45:70:49:CA:B6:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e7f89197-feb9-305b-8ff3-b130f29ecf5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.247.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ac:eb:5d:1e:3c:17:13:08:1e:c9:f8:93:17:9d:2c:8a:08:
92:73:ae:f4:28:1a:7d:36:bc:cf:b6:41:2f:24:80:35:17:01:
21:3f:e5:57:5f:d3:0e:62:b6:9c:88:57:6b:0c:8c:93:55:01:
30:ab:d2:93:ba:ba:35:c9:fc:79:b7:fe:1c:8a:4c:45:33:97:
66:6a:7f:a9:68:83:c5:e5:a8:6f:03:5e:5c:71:42:77:e5:3f:
64:33:6d:7c:f8:e7:81:5d:1b:95:48:60:cb:64:9f:97:58:ae:
c5:26:10:14:d5:a7:98:4e:78:c6:a6:54:ab:20:e5:14:6e:1c:
7c:8d:7b:16:73:b3:25:29:55:11:b7:15:32:bb:19:c1:47:09:
a2:cf:c8:90:b0:eb:e6:bc:0b:91:78:40:d1:89:1d:2b:8a:fd:
66:e9:03:96:03:8f:eb:ad:eb:dc:ba:e9:e5:1c:b3:ed:99:7f:
5e:48:28:4e:a8:51:10:8b:d2:c1:98:96:2f:35:5f:9f:cc:ba:
56:e2:59:cb:3e:fa:b7:92:c5:db:27:96:ca:68:3e:d9:f4:31:
4e:6f:28:5f:0b:9e:ac:86:ec:1e:6c:e3:19:a6:e7:c1:e0:86:
c9:a6:54:50:aa:b1:2d:b5:46:7a:3d:3f:e5:87:9c:1f:3a:92:
64:ef:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:05 2025 by rpki-client