Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/0122a1af-7f62-357d-9f38-58ead55c0635.roa
File: 0122a1af-7f62-357d-9f38-58ead55c0635.roa (raw, json)
Hash identifier: 8OTWJ5Vd71d00ZfZEmPSyb7N6ISOub/fCIexFiHcj2Q=
Subject key identifier: 9C:A9:67:1B:DE:01:C5:8D:23:59:94:5B:CF:14:BB:ED:6B:75:39:CA
Certificate issuer: /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial: 010D0C9F43285845B7B38BA83A617D6371320200
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/0122a1af-7f62-357d-9f38-58ead55c0635.roa
Signing time: Tue 30 Apr 2024 13:00:34 +0000
ROA not before: Tue 30 Apr 2024 13:00:34 +0000
ROA not after: Mon 29 Jul 2024 13:00:34 +0000
asID: 3477
IP address blocks: 192.64.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b7:b3:8b:a8:3a:61:7d:63:71:32:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Validity
Not Before: Apr 30 13:00:34 2024 GMT
Not After : Jul 29 13:00:34 2024 GMT
Subject: CN=bb8eaff5-9161-4799-b3c8-4155841a9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:e7:98:75:45:e1:55:d8:76:19:fb:18:70:
86:43:a6:ed:e6:f2:51:c3:45:90:18:d3:b4:16:30:
4e:62:86:5b:01:b4:8a:d2:b2:00:ef:8e:73:ea:ca:
23:e7:25:75:60:e9:e9:d3:e5:57:a6:77:28:fa:27:
92:3a:4b:23:6d:b5:6f:ea:8d:46:56:29:bb:9a:b3:
24:fa:37:dd:3c:99:ce:91:ac:ae:5a:78:0e:f9:5a:
1b:30:72:df:73:4b:00:17:01:3f:83:79:a4:59:6f:
4a:bf:1d:37:72:97:65:0f:cc:ec:88:9e:09:5c:56:
6a:87:ad:d2:35:a4:0e:2c:0d:f4:f3:67:e0:22:57:
15:fc:e5:31:55:e1:e1:4f:b2:0e:ce:b5:cd:5f:68:
98:95:e2:a8:05:1e:27:a5:e5:9c:9f:20:a9:3d:15:
c1:bb:61:ad:a1:3f:a2:bc:01:c4:90:12:b5:58:16:
00:a4:be:0d:ce:97:a8:b6:37:7b:c6:13:5f:40:ae:
fe:a9:0e:de:1f:ce:c5:9e:f6:80:c4:90:47:4e:d1:
80:16:5c:28:07:a6:11:d7:bd:6e:34:f6:97:ea:e5:
40:dc:3d:98:14:b1:e5:60:19:05:55:1b:b6:86:07:
d7:0c:35:79:08:52:2c:bd:28:44:8b:ae:37:5f:b9:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:67:1B:DE:01:C5:8D:23:59:94:5B:CF:14:BB:ED:6B:75:39:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/0122a1af-7f62-357d-9f38-58ead55c0635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
X509v3 Authority Key Identifier:
keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:20:1c:47:4a:8e:52:d0:ee:35:64:44:da:1e:d5:e2:6f:b2:
b4:95:05:2e:a5:7c:c6:77:74:61:29:d4:fa:4c:20:50:40:5f:
e7:a2:22:f8:90:f3:63:b3:f1:aa:a9:a8:46:dc:34:cd:f0:b7:
46:6d:ff:f9:61:f3:a7:c7:b1:74:a7:6f:c7:e4:60:e1:dc:77:
4a:86:90:5a:10:57:f5:2f:00:f0:17:04:67:7c:52:4e:96:d3:
5d:42:4a:47:a5:97:75:25:ee:5c:50:41:1a:c8:c9:3f:0a:4a:
45:69:06:a3:63:09:09:4b:69:15:c0:4a:4a:e5:dc:bc:0e:64:
7c:eb:c8:e1:79:64:3a:12:c7:eb:1d:da:89:36:1b:bd:96:02:
03:ad:2d:2a:e9:71:53:bc:c1:0b:65:d0:c5:2f:1c:ab:d9:64:
01:64:d0:b7:d8:ed:a2:aa:a1:fe:2f:2e:86:92:f8:a0:00:75:
10:bc:af:44:b8:75:de:26:d5:6c:75:ea:f1:10:5b:e9:9d:88:
a6:ef:bb:ea:2f:79:80:d0:46:22:6e:d7:8a:d6:7d:df:a7:25:
a6:4e:49:46:2c:0f:d1:e0:5a:2a:81:df:f8:fc:77:f6:90:97:
e0:7c:6b:43:e5:e9:fa:7b:bf:2d:68:b5:2e:eb:29:74:d5:95:
b4:46:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:51 2024 by rpki-client on console-ams.rpki-client.org