Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa
File: f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa (raw, json)
Hash identifier: CJUMr00UwQ9huS58+SL8G+eSFcBamCUtezU5zoanOAc=
Subject key identifier: 7C:B5:C7:F4:3F:23:50:2C:0F:58:57:59:69:2F:36:11:E8:D1:9F:3A
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584824FA8D32BB93D1852BA28640
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16696
IP address blocks: 204.209.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8d:32:bb:93:d1:85:2b:a2:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=3d1828ea-2f05-4c6c-bd25-dd32783bb407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:85:de:16:42:b2:d7:8e:25:4d:f1:cb:8c:
c6:02:3c:83:5c:f8:1e:b4:f4:8a:61:bc:17:37:6a:
12:89:88:b5:13:f6:e4:25:42:7f:e4:38:24:1c:d0:
74:6d:f3:72:2a:e7:7f:e5:86:0c:1b:5a:bf:b1:08:
60:b1:6d:f5:46:a3:4a:83:40:7e:3e:2f:d8:7e:51:
c9:16:47:70:1d:80:03:77:fa:2a:4e:da:6d:22:ad:
26:99:60:a2:e4:6a:d9:07:4d:07:bc:f4:ce:16:6f:
c4:68:f3:8f:35:05:50:40:5e:9d:e1:de:43:6c:26:
2d:09:c8:bf:c0:20:36:81:e1:a2:9c:ef:c0:c4:5f:
9c:e8:d8:80:88:ab:ce:1c:ee:85:b8:03:76:15:a2:
12:34:7e:d7:69:66:eb:00:76:33:b2:a6:c1:c0:dc:
f9:75:8e:e7:fe:36:a1:62:b8:7a:6e:fa:8b:31:e5:
f7:64:fe:a8:ef:82:d8:5a:44:e7:b9:73:62:d8:b4:
e0:e3:dd:81:f1:18:c5:11:bc:45:dd:c0:ff:bb:35:
0d:5d:2f:67:b2:1b:a6:98:88:6a:52:b0:69:93:b3:
9a:21:8e:bd:4e:6f:98:14:48:e7:e6:4e:55:de:5b:
be:20:4d:1e:ec:a0:77:91:b1:3e:6c:71:f6:04:5a:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:C7:F4:3F:23:50:2C:0F:58:57:59:69:2F:36:11:E8:D1:9F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:7f:b9:e3:e7:69:ad:c4:7f:8b:a5:5f:80:36:c3:d8:81:1c:
1e:d9:71:e3:f6:03:93:53:7d:93:fd:28:fd:a4:78:f4:61:61:
1f:9d:eb:22:fd:47:e4:19:81:ac:7e:60:19:d4:4e:ff:69:6d:
39:e9:da:33:1f:b3:f8:41:44:f3:49:c2:71:7b:db:e9:21:03:
7a:71:6b:0a:b6:b0:e6:be:06:4c:85:ba:f5:cf:11:fe:38:de:
0b:9f:52:c4:3e:10:65:5d:0b:50:a6:59:4c:83:45:35:07:a9:
54:f2:17:b3:6c:be:e9:f5:6e:86:07:ea:73:81:c0:28:8f:d9:
5f:82:a0:c1:ea:e2:da:e3:32:8d:54:50:e7:72:e1:c7:eb:74:
12:38:7f:a8:76:c2:8c:a5:07:7b:3c:60:7c:f8:d4:56:7e:0f:
59:02:7f:47:46:da:37:32:aa:12:a7:31:cf:69:a6:53:fc:30:
b3:a8:0e:7c:62:9f:3c:27:70:48:80:77:77:fd:41:16:29:74:
5a:b8:6f:1c:ec:f5:de:f0:0a:0b:9b:09:a0:c5:f9:bd:27:6e:
f9:25:59:1b:10:90:00:9e:49:54:67:19:e5:ea:72:53:52:32:
9e:6b:e7:0f:68:c4:86:2d:57:6b:cd:74:46:a6:f8:20:85:28:
da:62:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:14 2025 by rpki-client