Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/05cbc5c0-cba6-3c13-a01e-11cb63a37997.roa
File: 05cbc5c0-cba6-3c13-a01e-11cb63a37997.roa (raw, json)
Hash identifier: 2DskTM2MO6xsE2gvq1/4c5AfLzCfZIDhAFmWZpvlujc=
Subject key identifier: 00:DC:61:7F:20:2D:44:3F:27:89:17:2E:9C:21:AE:28:24:0F:7E:A3
Certificate issuer: /CN=11cddc66-c1b2-4bbb-a5ef-e3a08f499f72
Certificate serial: 010D0C9F4328576D51CC73C042CFC1720B67558F
Authority key identifier: 26:BD:7C:37:C9:22:3B:7A:6E:21:EE:5B:31:30:43:2C:9E:0D:10:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/05cbc5c0-cba6-3c13-a01e-11cb63a37997.roa
Signing time: Wed 13 May 2020 00:20:21 +0000
ROA not before: Tue 12 May 2020 04:00:00 +0000
ROA not after: Thu 15 May 2025 04:00:00 +0000
asID: 32261
IP address blocks: 143.131.160.0/19 maxlen: 24
158.247.96.0/19 maxlen: 24
170.52.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0b:67:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11cddc66-c1b2-4bbb-a5ef-e3a08f499f72
Validity
Not Before: May 12 04:00:00 2020 GMT
Not After : May 15 04:00:00 2025 GMT
Subject: CN=3bee595a-52ab-4384-b79e-1165a48368cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:18:62:8d:e7:5d:b5:92:d7:ff:da:8a:7f:
10:57:c3:8c:3a:76:41:88:7c:a1:41:cd:bc:af:82:
14:38:6d:6d:8f:1c:7e:52:51:c1:32:ae:f9:34:71:
cc:ef:43:1c:51:01:46:19:07:5b:a5:f2:92:6a:31:
d7:cc:10:be:b8:b8:64:9a:5e:ac:1d:32:88:39:7f:
b2:85:c8:7c:b2:1b:a4:bf:58:96:34:7a:c9:3f:81:
ef:31:47:c8:92:3e:a2:fc:b3:4e:88:cb:b2:37:c5:
c6:00:b1:f5:32:d3:86:a0:26:0a:bb:d9:f9:78:7f:
67:09:4d:3c:38:21:6b:58:4c:86:3f:20:90:61:b2:
38:2f:b5:d3:8d:12:b4:ce:b8:3c:82:80:b1:80:03:
b6:d6:ba:2e:4e:c4:12:a0:f7:91:fd:2f:03:db:36:
62:6c:00:8a:f5:cb:30:a7:56:c5:f6:b5:34:a5:a9:
2e:98:26:62:9f:e3:cb:7e:2e:c9:00:0a:67:e7:80:
61:d4:95:cc:9d:0f:0f:a5:4e:f5:74:c7:f8:35:18:
75:80:63:f3:5b:44:d8:57:82:2b:0d:90:32:74:65:
94:45:d6:71:a5:40:80:49:19:05:4e:1d:49:f5:49:
79:63:f1:67:a9:3b:28:b5:70:a2:cb:56:73:41:25:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:61:7F:20:2D:44:3F:27:89:17:2E:9C:21:AE:28:24:0F:7E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/05cbc5c0-cba6-3c13-a01e-11cb63a37997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.crl
X509v3 Authority Key Identifier:
keyid:26:BD:7C:37:C9:22:3B:7A:6E:21:EE:5B:31:30:43:2C:9E:0D:10:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.cer
sbgp-ipAddrBlock: critical
IPv4:
143.131.160.0/19
158.247.96.0/19
170.52.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:64:55:c9:f0:74:5d:f9:a1:dd:b8:c2:a5:15:a6:3b:4b:b9:
f5:b7:92:b7:65:75:62:55:41:06:d5:f0:2d:e3:e0:38:ae:c8:
55:0f:09:c5:ef:be:96:58:81:45:c4:f0:64:20:c6:70:ef:9f:
92:e4:51:64:d4:5f:bb:12:55:5f:7b:3f:b5:34:1f:9f:2c:a8:
ab:7e:84:90:2a:08:b7:30:21:3e:7e:4b:0b:33:09:d6:b0:29:
aa:9d:82:73:0f:45:49:96:1a:7f:94:48:e6:13:ec:99:26:92:
14:a5:be:b8:38:43:05:70:b2:5c:3f:91:43:59:e5:73:80:89:
53:48:cd:75:1f:0a:bf:3c:f3:16:f7:05:24:2d:8c:53:30:44:
bd:d2:2a:bd:65:a1:57:e3:f7:bd:c7:19:15:bd:f2:7a:6b:af:
61:d8:11:13:db:da:34:f1:53:8c:fc:b5:82:1b:a0:bc:c0:69:
b2:48:8d:68:7e:0d:4b:86:34:cf:78:7a:e8:29:63:08:86:da:
c0:6b:49:e3:e9:1d:29:5c:e6:f5:80:cf:55:c7:f3:95:3e:5b:
23:fe:27:f8:82:ad:00:0b:59:2c:e4:46:68:54:be:ad:7c:47:
e5:c8:94:25:45:04:a7:22:52:79:d7:73:86:80:21:74:c5:15:
99:ce:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:48 2023 by rpki-client on console-ams.rpki-client.org