Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/c8493fc2-790f-3b10-830a-6c8fb25e1f62.roa
File: c8493fc2-790f-3b10-830a-6c8fb25e1f62.roa (raw, json)
Hash identifier: WVE0Tv9vpi5Sdns7l9ywemOdO4gfOygvHfxteGYQoak=
Subject key identifier: 95:8B:52:C7:15:B9:71:B5:A3:9B:C6:93:73:EC:EC:69:73:CB:3F:B4
Certificate issuer: /CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
Certificate serial: 010D0C9F4328583E45954C545B70CECEA7110500
Authority key identifier: 72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/c8493fc2-790f-3b10-830a-6c8fb25e1f62.roa
Signing time: Fri 08 Jan 2021 15:30:42 +0000
ROA not before: Fri 08 Jan 2021 15:30:42 +0000
ROA not after: Thu 19 Sep 2024 04:00:00 +0000
asID: 844
IP address blocks: 172.99.232.0/23 maxlen: 24
23.130.136.0/24 maxlen: 24
23.130.137.0/24 maxlen: 24
23.130.138.0/24 maxlen: 24
23.130.139.0/24 maxlen: 24
204.10.192.0/22 maxlen: 24
2602:fcd3::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:95:4c:54:5b:70:ce:ce:a7:11:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
Validity
Not Before: Jan 8 15:30:42 2021 GMT
Not After : Sep 19 04:00:00 2024 GMT
Subject: CN=d5275223-bfcf-4501-9405-e62c325a9855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:e0:55:a5:1d:31:4b:3f:f7:3c:0c:92:85:
4d:a8:d2:55:aa:ad:47:21:67:dc:86:0a:1a:71:bc:
c4:51:b7:b1:1d:d1:17:7d:96:85:40:b6:39:3a:7b:
e6:a7:cf:48:ac:bc:36:3d:29:07:90:a7:eb:d9:08:
c0:6a:47:29:fb:b9:e2:36:d9:08:7d:d6:a6:be:18:
c6:bb:73:b2:9a:20:58:d3:28:27:fa:dd:ba:9f:95:
5a:ad:f5:6a:c9:1e:e6:ae:9e:94:87:e0:aa:37:f0:
b1:61:95:d0:7f:c5:07:d4:61:7b:a3:91:4f:11:48:
73:2f:5b:07:eb:7e:70:1a:2f:a1:56:dd:93:26:fe:
c9:0d:a3:24:24:fe:80:20:97:0e:a8:7a:57:99:57:
3b:93:95:95:dc:5b:47:71:e0:89:58:db:11:1d:b6:
a1:64:3b:b9:24:cd:bb:1b:aa:e7:c7:6e:a3:45:4d:
f2:86:e6:ef:32:c8:7a:f3:d3:54:97:3b:52:82:b8:
37:74:09:c0:1f:91:e9:d3:77:5b:e4:05:97:fd:0e:
2e:91:2c:c8:2e:b1:f2:0e:07:08:a8:2d:75:fc:2e:
5f:5e:22:c2:15:f2:26:82:61:64:a5:e6:b0:54:d3:
6f:0a:c3:44:7e:47:01:d7:4a:50:4e:23:fd:9a:74:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:52:C7:15:B9:71:B5:A3:9B:C6:93:73:EC:EC:69:73:CB:3F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/c8493fc2-790f-3b10-830a-6c8fb25e1f62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/0afacf20-2411-4ca3-ba34-f7e297cdb606.crl
X509v3 Authority Key Identifier:
keyid:72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.136.0/22
172.99.232.0/23
204.10.192.0/22
IPv6:
2602:fcd3::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:e2:5a:17:80:d1:e0:3c:9a:72:97:89:2b:e0:66:2a:c5:13:
3d:d4:d4:ae:17:71:18:df:f3:65:57:22:7d:8b:66:e5:12:21:
07:89:bb:75:a9:51:f0:c5:45:4f:1e:61:72:65:99:a4:0b:d5:
5b:e2:d5:9f:bb:99:6a:a2:18:20:d7:06:68:f8:e3:6a:c5:43:
b1:e2:d4:6b:a6:5d:58:50:31:be:92:13:bb:4f:d7:1a:b0:97:
c3:18:c9:f4:1f:90:a6:6a:16:45:18:cb:f4:a4:f6:75:d1:61:
44:2b:fa:9b:e5:9b:34:25:81:e9:37:d8:37:4f:77:d5:93:0d:
59:15:77:c1:ca:ee:ad:5b:46:b2:13:40:1a:e3:d6:81:16:bf:
0a:3a:96:a6:bd:85:14:6c:fa:e3:37:31:f4:ca:52:3f:e1:26:
f7:72:0d:35:45:ef:05:fe:9d:16:92:9b:41:cb:d3:e9:11:75:
18:e0:25:32:73:2e:66:57:0b:5e:32:4c:dd:90:47:3c:f1:2b:
42:5d:5d:5e:f0:12:25:f8:66:82:f7:91:22:56:02:0f:ca:ff:
9b:23:58:4e:c6:f7:a1:bb:91:a5:36:c1:df:4f:0f:89:9e:bd:
29:24:b4:95:a0:e0:56:c7:f5:7a:d1:f2:01:96:ca:fd:6a:47:
e0:6e:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org