Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/22ac32f4-c5c3-3bf4-8320-6c1fc338f559.roa
File: 22ac32f4-c5c3-3bf4-8320-6c1fc338f559.roa (raw, json)
Hash identifier: GNw2iIllGBfn8Xpjn5rwVhm6v0l4m5QL0kRCuoC7CPc=
Subject key identifier: D9:35:AC:EE:E2:BB:84:0B:8E:39:2C:F0:57:00:C5:20:F6:19:8B:B3
Certificate issuer: /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial: 010D0C9F432858459E9367821E8A4E5E16EE4A00
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/22ac32f4-c5c3-3bf4-8320-6c1fc338f559.roa
Signing time: Sun 21 Apr 2024 13:00:35 +0000
ROA not before: Sun 21 Apr 2024 13:00:35 +0000
ROA not after: Sat 20 Jul 2024 13:00:35 +0000
asID: 3477
IP address blocks: 161.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:9e:93:67:82:1e:8a:4e:5e:16:ee:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Validity
Not Before: Apr 21 13:00:35 2024 GMT
Not After : Jul 20 13:00:35 2024 GMT
Subject: CN=459673f2-f437-4f86-8bb6-119601c9b7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:be:7c:ea:da:43:f9:37:3c:79:7d:4b:b4:9d:
dd:09:31:1b:7f:1c:7c:50:45:6a:05:00:7b:66:f6:
f6:4e:ed:19:b0:ea:52:7a:09:7b:fe:6f:5a:f8:39:
b7:fb:b2:9d:76:0c:c8:05:ab:86:6b:15:a3:11:b5:
e5:90:04:bc:06:2f:96:0e:1c:5a:3f:4d:bf:23:2b:
7b:0b:53:d3:6c:c3:0a:86:a5:0c:0a:16:d0:f9:cd:
7d:fa:ea:56:8f:7e:ec:59:25:83:65:b0:a4:81:07:
d8:15:9d:67:34:c4:b7:f5:2d:ef:d7:01:a1:95:ad:
ec:ad:69:fd:bd:c4:81:df:84:99:93:d7:6b:c3:97:
ef:62:9e:9b:4c:bd:03:cc:e1:b3:3c:c4:4e:ef:28:
d8:e4:d6:eb:07:e3:f4:6f:f0:ea:4b:5c:97:01:51:
59:e1:4c:29:b7:31:cc:23:56:87:73:1c:fc:36:fe:
d2:33:67:96:6a:61:17:66:b7:15:c7:e2:fd:6c:af:
4f:bf:32:fc:80:cc:33:ac:53:24:f6:e2:1d:9f:c4:
9e:e1:55:e9:ba:f9:ab:0b:e9:56:60:b3:ee:e2:15:
02:46:6e:5f:0d:b0:af:e1:7f:db:5f:47:37:1d:c8:
89:8b:e9:c2:50:27:c5:99:bf:c1:70:45:37:99:ea:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:AC:EE:E2:BB:84:0B:8E:39:2C:F0:57:00:C5:20:F6:19:8B:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/22ac32f4-c5c3-3bf4-8320-6c1fc338f559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
X509v3 Authority Key Identifier:
keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
sbgp-ipAddrBlock: critical
IPv4:
161.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:0d:77:79:68:9e:ae:f0:74:d2:84:bd:df:b4:fd:0f:b6:a8:
6c:8b:44:7c:56:23:92:7a:5d:38:c8:e3:ca:07:2b:ca:44:3b:
02:c6:1d:6d:00:7e:fc:e2:a0:0d:5e:27:8e:4c:6a:61:c2:ff:
9e:7a:c6:2d:04:8d:14:f1:ff:ce:74:a2:10:c0:47:6b:2c:40:
62:8e:c7:e0:34:96:c2:df:9a:ea:c6:83:a8:1e:22:56:1a:5b:
0b:f7:0f:0c:fc:33:26:73:82:28:15:5e:4a:05:77:8f:e3:81:
1f:5e:86:f6:af:da:aa:19:26:12:b4:aa:68:c2:d8:fe:9a:ea:
b2:2f:65:c8:01:9f:a8:97:95:26:f1:fd:f4:f8:f9:21:6d:3c:
b5:5e:6a:33:59:f9:63:40:4e:9f:73:5b:29:ba:01:55:1a:3a:
b3:ba:86:1e:b0:18:c1:58:d9:92:ac:90:29:1a:31:98:0a:a5:
fa:33:e9:52:b8:64:b7:2b:f0:bf:ff:2e:11:26:30:e3:e4:74:
94:8b:20:b6:2a:44:08:e7:05:af:60:72:fe:28:94:74:9d:86:
53:94:5d:f6:f4:5c:69:4d:a8:1b:af:51:df:9a:3c:32:ed:18:
ed:7e:26:c0:1e:9a:cf:8f:c8:65:07:77:7b:31:00:9a:8d:ac:
0f:58:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 18:30:26 2024 by rpki-client on console-fra.rpki-client.org