Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/221ea73f-9f4f-3b3a-9e4a-cfb8ed3d0e6c.roa
File: 221ea73f-9f4f-3b3a-9e4a-cfb8ed3d0e6c.roa (raw, json)
Hash identifier: v3rBUqqCcoMQXX38H7rwqZcFxFZC6PgMdWqmAn+xNFA=
Subject key identifier: 3F:DC:FE:82:AA:C0:8F:39:32:53:E1:96:1D:54:D2:28:B6:B0:7E:C5
Certificate issuer: /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial: 010D0C9F43285845DBFE72CC7F7BC345DC6A4400
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/221ea73f-9f4f-3b3a-9e4a-cfb8ed3d0e6c.roa
Signing time: Mon 13 May 2024 13:00:34 +0000
ROA not before: Mon 13 May 2024 13:00:34 +0000
ROA not after: Sun 11 Aug 2024 13:00:34 +0000
asID: 3477
IP address blocks: 140.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:db:fe:72:cc:7f:7b:c3:45:dc:6a:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Validity
Not Before: May 13 13:00:34 2024 GMT
Not After : Aug 11 13:00:34 2024 GMT
Subject: CN=a648f9b7-84d5-407d-9a83-102ecf3d39be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:92:35:d4:f1:69:cd:87:6c:65:e5:eb:c5:
ae:da:fa:12:98:4e:dd:c4:55:6b:28:7b:24:ac:f3:
c7:f3:a1:34:d6:d1:e3:0e:ce:93:78:62:47:f2:43:
2b:dc:07:f8:bb:3f:f2:fc:59:0a:0e:71:88:65:c7:
c8:2e:80:d4:39:c9:49:40:eb:77:d4:74:c6:d7:27:
db:ff:cd:28:da:9b:9e:93:c2:3f:f5:45:4a:60:a9:
bf:16:60:5d:74:dc:44:ec:36:b4:19:3c:24:aa:95:
a1:f5:ec:a5:d9:48:7f:9b:3f:d2:b5:3f:5c:fc:b3:
62:70:cd:f7:f1:67:24:11:72:27:65:e4:b4:d6:77:
4e:8d:45:ec:b9:2d:3d:f3:40:78:2d:84:c5:34:89:
d0:bf:06:2e:7a:39:ca:0e:56:24:05:55:51:3e:ef:
9a:5e:3e:6e:16:d9:99:16:64:5e:25:c9:cf:db:98:
cd:dd:bf:fe:ba:1d:53:33:83:9d:5e:da:d7:06:3f:
03:07:0e:a9:ee:5c:38:cc:92:1c:10:a9:a2:ed:3b:
47:00:a3:78:47:2e:03:40:0e:af:9f:3c:c8:36:b7:
2d:3e:03:59:8d:2b:1b:a2:22:73:c7:0a:bd:56:7a:
ec:0f:5a:7f:98:d9:21:5e:42:32:7b:2e:e3:56:b0:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:FE:82:AA:C0:8F:39:32:53:E1:96:1D:54:D2:28:B6:B0:7E:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/221ea73f-9f4f-3b3a-9e4a-cfb8ed3d0e6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
X509v3 Authority Key Identifier:
keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
sbgp-ipAddrBlock: critical
IPv4:
140.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c8:5d:c7:0d:34:e4:d3:ec:41:79:91:17:7f:e0:19:e0:79:
af:e8:c0:2e:04:87:ba:5c:ec:59:6e:c5:ef:96:32:41:bd:a6:
a1:67:e3:1a:44:cd:56:dc:f3:95:6b:7a:aa:c1:25:46:6f:2a:
3f:41:c6:5d:60:9b:54:13:08:d4:8f:a6:ed:13:e8:ae:ac:22:
77:e1:bb:f3:d5:0a:65:99:82:d3:b1:87:bd:a1:ec:e3:aa:90:
a6:68:83:b4:b7:95:09:3e:c7:57:71:20:a1:35:d1:00:cb:53:
61:8b:9e:7b:05:8c:fd:e8:b6:43:d2:34:75:ef:0f:9c:4a:e1:
60:34:e3:a0:72:f2:d9:20:a9:79:e1:62:26:2b:b3:0a:ed:05:
c2:21:85:51:c8:00:0f:e3:f1:7f:c0:c0:97:ba:f9:fa:1c:91:
db:28:cb:36:91:e7:80:1a:3b:3a:fb:11:6a:d9:2c:ea:d1:85:
12:2a:be:04:bf:3e:5c:a0:2b:25:38:0f:d9:97:66:91:62:be:
0a:bf:1a:23:66:48:e7:8d:89:ee:e8:65:6e:07:21:43:d7:41:
84:18:61:e9:e5:63:72:5e:25:c1:60:87:02:af:8d:1c:d6:58:
14:65:f9:fc:9f:5c:df:b0:e5:86:ca:ce:1c:a9:cf:cd:06:05:
c3:4f:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:51 2024 by rpki-client on console-ams.rpki-client.org