Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ebb322b9-0966-3417-97dd-a33081e8db64.roa
File: ebb322b9-0966-3417-97dd-a33081e8db64.roa (raw, json)
Hash identifier: xdrc5qOAVe1Pmq1XPplscpzHmO3bl1xMaGRJKYdQ4Os=
Subject key identifier: FF:40:36:C8:73:A6:C6:B3:8D:73:71:68:6C:AC:EC:1E:29:5A:10:79
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8FBB7B87E8CB3A0D3700
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ebb322b9-0966-3417-97dd-a33081e8db64.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 162.223.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8f:bb:7b:87:e8:cb:3a:0d:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=35682b94-8be2-47ef-bd45-52e778041e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:e7:a1:69:c6:15:e2:b1:e6:25:87:96:7b:
68:b5:1c:01:07:b5:b4:04:9c:7d:62:62:58:20:a6:
32:5e:8b:33:31:3e:63:12:31:50:cc:59:20:21:84:
b4:1b:56:41:76:1f:88:a9:ca:8c:b9:53:51:66:02:
07:e8:aa:3b:f3:e9:04:ce:94:b4:ee:45:ed:ff:05:
35:b0:22:9f:86:b4:67:72:16:d1:3d:3d:3c:29:67:
50:c6:ad:ef:f8:71:99:21:66:7a:31:dc:b5:8a:d2:
80:95:5d:66:64:3a:b1:ab:85:97:db:21:bb:ab:78:
82:54:35:8e:eb:1f:98:0a:36:a3:18:88:fb:71:33:
18:83:46:a2:de:83:63:d3:d3:20:73:22:db:be:cf:
45:2b:ab:46:63:4b:18:25:27:a3:60:45:f7:b8:3e:
d9:6f:11:bd:99:68:12:b6:d1:64:cc:cd:53:9d:b7:
13:66:85:78:a5:f6:95:53:a5:3a:a2:99:9b:3a:9a:
59:7f:2a:20:2e:92:f7:a5:6d:95:c7:37:a5:de:13:
07:ce:80:d0:b1:05:b6:14:17:02:0d:f5:db:bb:85:
46:2e:08:27:42:ba:cd:c7:6d:0c:f9:21:2d:5f:f8:
f9:0c:15:54:80:f3:c5:2f:c6:18:2f:8d:20:dc:e9:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:36:C8:73:A6:C6:B3:8D:73:71:68:6C:AC:EC:1E:29:5A:10:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ebb322b9-0966-3417-97dd-a33081e8db64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:07:3e:e0:04:cf:02:27:ed:7d:78:6b:1c:37:2c:24:5d:7a:
1d:32:50:58:5c:f0:bd:e2:c2:6a:04:4d:48:81:b5:72:76:54:
10:00:44:aa:43:d9:5e:f2:55:33:ea:3c:32:8e:87:c9:d1:d2:
dc:4f:c6:8a:81:2d:fc:67:6d:76:de:74:23:c3:e4:da:7b:42:
e6:d9:67:b6:a0:ed:3a:02:31:3d:2c:ef:e9:c3:45:11:05:be:
24:12:0e:41:42:d5:a5:93:36:fd:50:07:c3:08:53:c4:7b:39:
fb:48:62:0a:f0:39:2c:27:b5:4a:d7:c2:a7:52:e6:75:0b:a2:
98:4c:ce:a2:43:49:7f:81:32:58:ee:4b:c7:71:3e:2b:b1:44:
08:28:04:0b:90:9a:73:88:17:84:84:de:04:58:15:b0:35:91:
e2:e3:ed:07:c2:65:28:c5:d0:fd:f5:c4:cc:8d:30:4e:77:ab:
eb:32:74:40:8a:42:45:de:f6:6f:17:19:16:97:9f:e8:49:ee:
3c:fd:c2:a0:73:01:7d:fb:97:7c:77:b1:13:68:b5:1d:c8:6e:
c0:b9:49:4f:c4:44:53:14:01:a5:2f:82:84:2b:38:64:55:77:
2f:1f:31:b9:3d:f9:3e:dc:23:b9:29:07:7d:d7:d6:fc:4b:63:
69:dc:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:52 2025 by rpki-client