Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/28a7a787-6a7c-386c-a319-b9101a97cd60.roa
File: 28a7a787-6a7c-386c-a319-b9101a97cd60.roa (raw, json)
Hash identifier: j3TqeIZMhup7cNfjdgFUcQI1KvOl45/aEUpG9wUwBY4=
Subject key identifier: 22:B6:66:9E:94:2E:19:9E:87:40:1B:01:BA:A2:B3:37:84:BA:9B:B9
Certificate issuer: /CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
Certificate serial: 010D0C9F43285843E598EBFAFA7528431753E500
Authority key identifier: B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/28a7a787-6a7c-386c-a319-b9101a97cd60.roa
Signing time: Wed 15 Nov 2023 14:00:21 +0000
ROA not before: Wed 15 Nov 2023 14:00:21 +0000
ROA not after: Tue 13 Feb 2024 14:00:21 +0000
asID: 46562
IP address blocks: 209.182.219.0/24 maxlen: 24
146.71.78.0/24 maxlen: 24
45.61.55.0/24 maxlen: 24
45.61.54.0/24 maxlen: 24
2604:bc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e5:98:eb:fa:fa:75:28:43:17:53:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
Validity
Not Before: Nov 15 14:00:21 2023 GMT
Not After : Feb 13 14:00:21 2024 GMT
Subject: CN=e55f46fe-17fb-4cc0-8305-d3a63d600808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:fe:73:40:64:31:1f:cb:dc:f6:52:95:5d:
e0:71:ea:fe:24:d1:bc:67:1b:0f:0f:f5:6a:ee:8a:
9c:aa:c2:10:4b:b6:f4:a9:cd:5b:34:92:6a:29:c7:
03:28:e0:60:0c:94:1a:53:bf:e7:0e:68:8d:9e:c0:
c7:94:22:11:e0:0d:1c:8c:e4:5f:25:5a:e1:d1:35:
72:c9:50:9c:e9:65:41:45:2e:1d:dd:43:03:d2:31:
0b:33:b3:c6:46:fe:62:82:7d:c8:27:6c:7b:1c:63:
9f:72:bc:31:64:a5:6d:13:79:7a:a1:64:12:e3:de:
0c:5c:62:32:a7:a7:aa:58:15:8c:81:9d:f5:43:ad:
ca:8d:23:1e:1f:17:7e:6c:1d:02:0b:ac:c8:a2:e6:
60:26:e6:16:1f:d2:e3:53:8c:80:fe:cc:56:a5:40:
07:f5:6e:bb:96:07:58:fa:7d:0d:df:35:71:74:06:
c7:25:bc:0d:64:85:ba:66:e7:df:de:cd:28:4f:35:
f6:46:29:4b:5c:b3:88:be:67:e2:8c:1c:08:7d:6c:
d1:20:c7:f1:55:c7:dd:cd:0b:2a:54:7a:fa:6e:50:
d7:af:5a:fc:e8:17:cd:7b:b4:04:fc:24:74:46:b4:
48:54:f1:41:02:99:76:04:a8:c8:59:63:68:cc:ea:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:66:9E:94:2E:19:9E:87:40:1B:01:BA:A2:B3:37:84:BA:9B:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/28a7a787-6a7c-386c-a319-b9101a97cd60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.crl
X509v3 Authority Key Identifier:
keyid:B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.54.0/23
146.71.78.0/24
209.182.219.0/24
IPv6:
2604:bc0:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ae:cf:65:c0:b5:73:62:62:53:e5:06:01:e9:c5:a6:b8:f3:
1c:0a:db:c3:58:98:a8:6f:94:9e:1c:ce:70:3f:d6:5d:7d:ba:
14:18:2a:14:9f:0b:42:3f:f1:34:3b:c7:68:4c:ec:73:74:e4:
16:7e:23:9f:2d:65:1d:99:08:e7:01:9c:75:79:a2:2e:ea:53:
77:8d:20:71:60:49:91:6f:93:d8:c6:ae:44:b9:4c:d2:52:63:
af:1a:15:f5:44:80:66:67:ea:5a:93:9a:a9:6c:b4:ff:81:a1:
93:fa:18:54:79:e8:bb:a3:bb:09:e1:35:b3:8e:6b:eb:8a:83:
b2:05:ff:bf:1f:81:d5:83:b5:71:e4:1c:18:c6:07:28:21:99:
e8:79:7f:bd:b3:94:8b:40:0c:ae:b4:2f:15:db:6a:ac:5a:1b:
98:9f:ee:6c:ed:87:36:54:ac:65:67:44:6f:e8:cb:bd:08:c1:
01:08:f0:48:8c:56:4b:3b:9b:6e:25:79:90:9f:24:cb:45:b7:
80:41:8f:e9:43:9b:d2:df:36:5a:9b:03:31:f8:e0:29:e5:0c:
de:1e:3b:1c:51:dc:8e:0b:e7:ca:7a:53:89:49:4e:c1:d2:ce:
92:a5:fd:84:c6:b3:31:83:c3:1c:f8:64:7d:e0:40:f1:95:f6:
78:4c:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:19 2024 by rpki-client on console-fra.rpki-client.org