Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee/bca0a0d4-e6d7-31b8-adc9-2190b394c469.roa
File: bca0a0d4-e6d7-31b8-adc9-2190b394c469.roa (raw, json)
Hash identifier: 64UoVt3H4cnEE1N/n//YWRVV7Uo7ae4RI3hXZP1MVyc=
Subject key identifier: C3:4A:02:74:C3:22:A2:8C:5C:32:F2:B7:FB:5F:9E:90:D2:B8:ED:E9
Certificate issuer: /CN=3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee
Certificate serial: 010D0C9F4328584425CEA0B8050945A950799280
Authority key identifier: 2A:07:C9:A9:16:CE:A3:11:A8:4E:76:A5:BB:55:3A:C2:DC:43:78:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee/bca0a0d4-e6d7-31b8-adc9-2190b394c469.roa
Signing time: Fri 08 Dec 2023 14:00:20 +0000
ROA not before: Fri 08 Dec 2023 14:00:20 +0000
ROA not after: Thu 07 Mar 2024 14:00:20 +0000
asID: 32678
IP address blocks: 162.250.192.0/22 maxlen: 24
199.27.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:25:ce:a0:b8:05:09:45:a9:50:79:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee
Validity
Not Before: Dec 8 14:00:20 2023 GMT
Not After : Mar 7 14:00:20 2024 GMT
Subject: CN=9d7c4c0f-80e1-49ee-811a-4941d43a32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:4a:bc:bb:53:1f:78:84:d3:32:3d:07:1e:
c5:a0:55:6e:c1:d2:af:0b:2b:e4:c7:11:47:b5:d5:
6f:48:95:4d:1d:38:e1:b6:8d:eb:7d:ec:52:d7:22:
13:76:65:8b:c9:49:c1:08:5b:12:03:e6:6a:a8:79:
3e:59:ce:a4:e3:9a:4f:eb:52:1b:93:17:f8:18:a0:
d6:65:f2:f4:46:39:e8:ad:3d:40:d2:fb:30:73:89:
7e:a2:d4:34:65:a6:2f:2b:f1:e8:de:be:55:ae:fe:
36:9e:b2:7f:4d:41:92:0d:fa:f8:09:6b:0c:5f:56:
91:5d:84:d4:9f:f7:16:12:cc:fa:59:6d:72:cd:00:
bf:3c:c8:76:7b:df:50:55:f5:52:4d:0b:12:ce:b7:
e1:cf:90:b2:36:ea:2f:3c:05:cf:0d:7e:22:7d:4e:
d5:a6:a6:ad:b5:23:aa:fd:29:df:a1:16:59:fc:af:
21:e1:76:a4:ab:9a:31:22:20:41:3a:c7:98:d9:16:
cd:18:58:0a:5b:c5:81:b2:2e:ae:db:89:f8:96:e8:
e7:04:fa:e3:ad:85:73:f8:98:78:34:6d:f0:8f:80:
4a:17:7c:ff:0c:84:9f:24:36:6b:05:70:c8:61:31:
ec:f0:4c:99:30:23:79:87:f2:b7:fe:c0:b1:7d:4f:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4A:02:74:C3:22:A2:8C:5C:32:F2:B7:FB:5F:9E:90:D2:B8:ED:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee/bca0a0d4-e6d7-31b8-adc9-2190b394c469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee.crl
X509v3 Authority Key Identifier:
keyid:2A:07:C9:A9:16:CE:A3:11:A8:4E:76:A5:BB:55:3A:C2:DC:43:78:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3cbb06f6-51c2-4da2-ba08-1d1c7b06a6ee.cer
sbgp-ipAddrBlock: critical
IPv4:
162.250.192.0/22
199.27.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:fe:cb:72:01:65:da:6b:5d:04:ad:ae:ac:e8:d8:6a:09:e8:
57:b0:c7:06:3a:d0:56:32:57:49:ad:be:5f:37:15:14:6e:19:
c9:05:18:66:79:e0:55:8d:a8:05:bd:f7:f8:78:41:13:bc:f6:
9b:47:bc:b8:8d:ee:2f:42:bf:6f:66:8b:98:eb:e3:ca:03:fd:
04:a2:d7:af:17:4e:7e:61:e2:76:8a:8f:16:e8:58:48:28:f0:
84:8e:c3:9a:dd:7f:89:6e:23:c1:5a:ca:8b:93:f7:a4:fa:ff:
78:be:49:4e:2f:2d:8b:16:6a:a0:c3:14:fd:e1:2b:9c:6d:d3:
b3:dc:18:4a:bc:90:8e:46:98:2b:35:f4:75:aa:49:06:23:ac:
54:f7:83:5a:32:ce:ab:4e:df:d2:8d:e0:13:50:23:2c:98:6b:
93:06:99:59:c8:ab:ac:48:35:46:5b:23:62:be:76:9e:5f:95:
f0:1b:64:5d:eb:38:78:13:17:dd:41:78:dc:24:61:02:af:0b:
e3:b9:de:d1:77:af:33:e0:4a:74:17:70:31:2b:49:91:44:2e:
bb:8c:09:0c:d6:36:87:1c:87:27:d5:95:95:69:b2:83:fe:f9:
f0:58:13:65:b8:5b:bf:70:7d:f0:a6:1b:a9:27:d2:6c:97:a4:
fa:59:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org