Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0067a1e8-88f8-3b4f-86cb-31d6388342ea.roa
File: 0067a1e8-88f8-3b4f-86cb-31d6388342ea.roa (raw, json)
Hash identifier: 18zKtGtk9lW55pAjwKX9yknm7N/x6untCb2G3q99OTw=
Subject key identifier: D4:9E:CD:2A:B0:7A:D2:53:62:55:40:80:1E:73:85:01:B9:8F:05:D7
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F43285844246945ADD71E4FEB6806AE18
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0067a1e8-88f8-3b4f-86cb-31d6388342ea.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 36352
IP address blocks: 172.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:45:ad:d7:1e:4f:eb:68:06:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=b80e1cac-a57a-44c3-88cc-180942b21a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:d7:35:ea:39:b3:00:f9:9a:a7:75:1b:be:
dd:82:9d:6f:b0:24:ad:91:85:37:86:ef:97:23:22:
c1:a5:13:d9:48:dc:5a:d2:ae:00:76:01:bb:af:7e:
24:87:6f:10:50:7f:7d:3b:b9:7a:41:b3:b0:2e:95:
60:86:27:b2:42:18:e5:93:fd:2e:1d:62:95:af:0b:
6f:5b:29:f0:70:57:8c:43:79:8f:c9:e1:94:76:7d:
38:5b:2a:40:9f:95:42:05:c2:7c:e2:13:f1:d4:dc:
86:05:95:f0:82:26:5c:ce:86:9c:df:2f:9d:64:17:
18:b2:d0:2b:4a:a2:43:f0:dc:b3:dd:a4:44:86:34:
7b:f6:c2:9f:c3:1c:63:74:3e:8f:cd:84:26:92:4b:
2e:14:30:c9:0d:c4:30:96:13:94:b1:5b:0d:ad:31:
4c:c5:15:a3:19:a0:ac:81:af:69:e1:e0:92:b6:f4:
1c:f0:90:d9:20:04:0d:20:32:e1:67:ac:39:52:13:
b7:dc:c5:57:d1:9b:cb:5a:57:8f:fb:9b:f9:26:aa:
cb:ec:d4:b5:20:03:0d:3e:08:41:b2:7c:1e:2e:be:
cc:90:33:3e:1c:d2:49:2f:93:51:b2:6f:01:e8:2b:
35:e8:3f:3a:a3:c5:ef:d4:35:3d:06:b8:cf:0d:b2:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:CD:2A:B0:7A:D2:53:62:55:40:80:1E:73:85:01:B9:8F:05:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/0067a1e8-88f8-3b4f-86cb-31d6388342ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
172.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:38:f9:6b:a8:72:73:ce:13:03:55:9d:2a:55:e5:3b:67:ab:
97:84:5e:52:bd:d0:6c:be:fd:7a:7b:8b:da:66:36:eb:0b:91:
91:38:ee:7a:7a:d6:90:ee:71:2a:3a:85:56:9a:40:7a:9c:cf:
1a:e6:a8:62:76:dc:79:5c:2a:eb:5c:8f:66:1e:b7:bc:00:15:
1c:79:3e:7f:09:b2:cb:f7:62:eb:34:b9:02:26:92:bd:6c:e7:
b2:e2:14:97:ff:9a:64:c7:51:72:45:4a:8a:ae:41:7f:f9:b9:
3d:74:0e:43:8c:49:31:17:3c:14:38:e7:9d:06:d7:53:ab:35:
67:26:d1:1d:bb:73:38:f5:ea:83:7a:45:7d:f7:60:53:e4:2e:
d2:c5:1c:26:dd:d5:e4:28:b7:28:8d:e0:7d:6c:d3:68:e5:72:
ff:01:f7:2c:08:d9:c0:7e:1f:24:7b:f8:b7:6d:18:94:a4:97:
2a:67:bb:24:df:0a:97:c4:9d:e5:b7:3b:9f:f2:c1:11:5d:0e:
cd:d6:09:eb:9b:8b:ec:77:63:12:86:1b:1e:a5:c9:20:f9:6e:
e2:71:05:62:9c:97:69:f5:34:a0:2b:db:0f:7c:1d:41:ef:f1:
ed:00:a7:a3:82:71:4d:d3:33:9e:13:bb:f3:9d:08:9f:0c:a5:
fc:75:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org