Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/cfe281c1-6f14-3e72-b11d-40f7021fe6ed.roa
File: cfe281c1-6f14-3e72-b11d-40f7021fe6ed.roa (raw, json)
Hash identifier: NS9yS3hWuxGH9G+Gtvx+/tybdURhoGueL0QMnnZOA3Q=
Subject key identifier: 64:74:93:9E:8F:9B:F5:0F:CA:4F:BB:AF:A0:11:5E:59:07:2E:31:26
Certificate issuer: /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial: 010D0C9F43285843C2FCC59EE670F5645798C200
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/cfe281c1-6f14-3e72-b11d-40f7021fe6ed.roa
Signing time: Fri 03 Nov 2023 04:28:19 +0000
ROA not before: Fri 03 Nov 2023 04:28:19 +0000
ROA not after: Thu 01 Feb 2024 05:28:19 +0000
asID: 61317
IP address blocks: 199.68.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c2:fc:c5:9e:e6:70:f5:64:57:98:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
Validity
Not Before: Nov 3 04:28:19 2023 GMT
Not After : Feb 1 05:28:19 2024 GMT
Subject: CN=bd58b67a-f572-42c3-b7ed-6fbee86af481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:c2:a2:08:89:f3:ec:23:05:f2:e0:03:20:
66:e3:69:9a:27:09:1f:cd:55:2d:21:c6:94:37:62:
88:b6:3e:f9:8b:db:54:b1:c7:40:2c:1a:6e:a0:39:
67:c9:76:48:b4:e4:01:94:0a:3c:2e:0a:06:90:4b:
3f:44:81:fc:af:6d:78:15:9e:12:d6:ad:b8:5e:5d:
23:02:1b:23:c5:f9:f2:62:c4:ac:4b:1b:33:7f:d4:
72:74:98:ab:90:32:14:47:5c:78:f2:a9:e7:41:bd:
2a:ca:01:d8:bb:45:48:ce:d2:15:35:f4:ba:b1:7c:
c2:4d:b4:46:5e:05:03:41:27:bf:87:6b:fe:cf:b9:
11:f4:7b:a1:c6:80:da:85:94:61:23:80:34:97:d0:
41:2f:40:bd:3e:6b:fb:0c:9f:f2:db:34:38:3c:91:
87:62:30:b2:9f:d3:0a:ad:b8:1a:26:15:e7:14:0b:
03:4b:0e:60:0d:6c:22:55:d0:5e:20:1a:c0:de:09:
cf:af:72:3a:2b:66:5f:be:21:b5:28:49:89:a1:9f:
a6:4b:97:d7:79:a8:58:87:77:0e:d7:9d:f6:16:06:
ce:08:cf:e2:00:ae:e6:f5:21:e9:ae:3a:49:d1:27:
96:30:39:bb:d8:92:2e:b9:f3:71:e2:19:ab:57:de:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:74:93:9E:8F:9B:F5:0F:CA:4F:BB:AF:A0:11:5E:59:07:2E:31:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/cfe281c1-6f14-3e72-b11d-40f7021fe6ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl
X509v3 Authority Key Identifier:
keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
sbgp-ipAddrBlock: critical
IPv4:
199.68.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:33:5e:fd:e7:87:f8:a6:5b:94:da:a0:a5:4b:2a:f1:1a:6a:
21:36:26:6d:5d:31:9d:11:60:94:20:de:c6:a5:77:01:2e:d5:
45:ee:61:78:21:c0:ac:f8:89:5a:c7:af:7d:05:a2:8d:e9:3f:
67:41:c8:b2:a3:9b:6f:c0:20:98:e5:b0:77:0f:f5:1f:c4:ff:
ae:eb:ef:4a:7a:8d:ee:25:42:93:e8:ca:42:5e:cc:a4:7d:98:
8b:ee:df:03:89:20:f5:1f:55:96:fe:3b:38:10:e9:60:d6:c1:
fa:70:16:60:3a:1f:1e:5f:14:cc:f1:47:2b:ad:a6:5d:f1:1c:
82:38:9a:85:60:75:08:1e:64:f1:4f:38:5c:fa:b5:41:7e:8b:
cd:27:05:da:10:32:eb:f3:e7:b6:7d:26:6b:da:c0:98:ba:72:
6a:42:9e:b3:d9:1c:ca:76:52:c8:c2:6b:01:50:6c:b7:f0:60:
db:b7:30:47:55:14:ae:9f:48:e5:a8:8d:a3:8c:a5:a3:9b:a3:
d3:11:85:22:4e:f7:5f:6a:d2:70:4c:4a:25:0c:d8:0a:8a:28:
a2:6f:47:c2:e0:f6:74:f1:c0:05:cc:33:a6:fe:2a:d4:fb:6b:
76:23:5a:ad:ed:8e:fd:c8:7d:34:23:5d:2e:dd:e2:5a:bd:0e:
ad:ae:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 12:51:54 2023 by rpki-client on console-ams.rpki-client.org