Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa
File: f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa (raw, json)
Hash identifier: vW9FO+NkA9rcADQOSY63lh4j8g6U6pU0wZmmtKSNjzs=
Subject key identifier: 12:CC:21:74:91:04:62:9F:C5:7B:63:9D:96:F9:1E:D4:00:A8:2F:7E
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584824FA8DF5E87BFD72588B8B80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16696
IP address blocks: 216.120.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8d:f5:e8:7b:fd:72:58:8b:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=b3ec8d89-b5a6-4e94-82db-5e491c0c92b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:71:2e:0e:df:f6:d0:12:cd:f3:93:7f:d6:96:
6b:39:5d:24:39:b5:2c:99:c5:7b:79:b4:4d:55:47:
74:4a:5b:df:21:ab:6b:bc:89:ea:a2:81:0b:63:32:
95:d5:a3:e6:20:e7:6e:1b:cc:db:59:fb:2a:fd:91:
02:9a:b8:c2:9c:26:91:b3:27:42:3d:2b:fd:bb:51:
30:99:bb:e0:71:34:ce:70:95:23:bf:ef:eb:0d:a5:
d1:b6:11:81:92:11:92:f0:02:6d:49:a3:d5:76:b1:
2e:81:32:7e:d4:32:8b:16:18:81:cf:dd:3a:9f:27:
e5:2a:b9:07:30:25:12:1c:bd:9d:10:b5:c3:f6:d3:
aa:a4:59:0e:a1:f0:67:10:db:0e:dc:60:02:2e:cd:
51:f5:31:1b:71:b7:fc:33:9a:92:57:7a:f1:91:20:
1b:f0:e8:f0:9e:25:07:36:5e:ee:72:bf:af:7a:72:
ca:81:f5:9c:51:80:d4:cd:9d:fe:86:53:d7:ed:a4:
34:e4:ed:09:51:67:d3:d3:8b:91:b9:e7:c9:86:a5:
6d:5b:33:7c:9f:9c:c9:a6:33:37:8e:17:46:c5:17:
d4:27:23:09:46:74:3d:77:8a:a5:ca:9b:34:8e:db:
2b:78:b2:8e:be:fe:34:b5:26:0e:ab:5a:af:12:7a:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CC:21:74:91:04:62:9F:C5:7B:63:9D:96:F9:1E:D4:00:A8:2F:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:d3:bc:3b:26:7b:46:64:18:65:42:e4:29:d3:13:01:21:c5:
91:08:f6:1a:f4:85:de:91:71:05:52:cb:c3:81:3b:58:a7:61:
1c:74:1b:3b:e6:87:d9:e7:2f:1d:be:fb:66:2c:12:5d:42:1a:
8a:2d:60:66:d3:45:17:de:fa:77:8f:df:d1:77:62:2b:b3:99:
b4:e4:a3:91:e4:21:3b:e3:90:5a:6c:dd:b4:40:d1:bd:8f:45:
cd:8a:05:81:bc:78:31:91:28:2e:73:2d:e0:93:2d:19:85:2f:
1d:06:38:62:22:ed:01:2b:43:cc:f3:5f:56:a0:9c:97:60:00:
b9:95:70:95:15:e9:89:07:68:4a:e5:15:2e:9b:d9:ee:ef:ae:
42:d2:c2:68:ad:d4:51:f8:4d:2e:8d:06:70:93:c9:30:93:8b:
bf:61:79:01:63:c3:4b:c4:21:48:19:b4:34:dd:fc:84:28:3d:
63:59:e9:e7:c2:6f:fb:e2:6a:2f:9b:e8:13:e9:c0:c3:3b:9c:
f1:6f:56:d5:38:63:59:af:ba:e5:1f:58:f7:e3:41:e5:5f:df:
f8:ef:68:08:3d:0f:62:a4:44:2c:b9:67:cf:49:f5:72:65:37:
78:98:b2:60:af:e7:e0:97:db:d5:92:eb:07:8d:f6:67:86:68:
1d:07:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:02 2025 by rpki-client