Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/88f4a5f2-3a1c-3fcb-a604-46f97b95e78f.roa
File: 88f4a5f2-3a1c-3fcb-a604-46f97b95e78f.roa (raw, json)
Hash identifier: fcGyQdbhOvo+GHrthLPSM6oFONzzmRVqppvhfgCvMAk=
Subject key identifier: 7A:12:AC:4A:86:35:87:DF:7F:BD:85:FD:A0:8B:58:E2:9F:FF:5E:B4
Certificate issuer: /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial: 010D0C9F43285845ADEE166D33EAD56DE8869940
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/88f4a5f2-3a1c-3fcb-a604-46f97b95e78f.roa
Signing time: Sat 27 Apr 2024 01:00:26 +0000
ROA not before: Sat 27 Apr 2024 01:00:26 +0000
ROA not after: Fri 26 Jul 2024 01:00:26 +0000
asID: 3477
IP address blocks: 192.67.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:ad:ee:16:6d:33:ea:d5:6d:e8:86:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Validity
Not Before: Apr 27 01:00:26 2024 GMT
Not After : Jul 26 01:00:26 2024 GMT
Subject: CN=1354d3fb-e3c8-4b0d-b0d1-70d233f4c136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:14:7f:ad:7e:51:f1:46:2c:2c:7c:2c:e6:
39:e8:c6:fa:b9:21:fe:8b:3b:2d:05:b9:df:de:3d:
34:97:d7:a6:43:69:86:7d:c5:3d:db:43:cb:fc:70:
ed:53:fa:a9:ed:30:a1:48:c7:0f:cd:2c:3e:9f:e2:
8c:13:8e:d8:55:89:0b:2a:b8:a6:d3:60:dc:7c:ad:
e8:7f:e5:05:1e:47:b4:a2:a7:4c:ca:fa:59:d0:a8:
aa:cb:4f:b3:aa:a7:94:56:aa:35:0a:86:09:01:b3:
34:23:e5:de:62:a7:ef:a6:f8:65:77:8c:95:6b:e6:
71:ce:cb:75:1b:ab:c3:89:69:60:1c:26:d6:02:ae:
34:6c:5b:15:71:17:b2:01:62:25:d4:1e:35:01:42:
cd:60:43:bf:71:2b:23:2c:c4:53:e6:9a:2d:34:ef:
dd:e6:df:98:62:ce:7e:46:48:59:21:7d:1f:cb:54:
b8:68:44:72:fd:29:6d:85:8c:24:40:ad:f7:ad:c1:
1f:14:f2:29:bc:76:c7:ee:ba:99:0b:62:40:19:75:
bb:64:e0:55:03:95:88:73:8f:49:2b:c4:97:4b:62:
fa:68:26:95:5a:57:1f:0d:31:87:a4:41:4a:8d:c1:
7f:f1:13:48:63:83:b4:65:0a:3c:24:90:c8:8f:f1:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:AC:4A:86:35:87:DF:7F:BD:85:FD:A0:8B:58:E2:9F:FF:5E:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/88f4a5f2-3a1c-3fcb-a604-46f97b95e78f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
X509v3 Authority Key Identifier:
keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:78:4e:2d:5a:a9:6b:a9:db:f2:88:3b:96:6c:ab:ce:1a:a6:
e1:2b:2c:23:53:39:64:fa:7b:8d:ed:5c:cf:1e:0e:fc:a9:03:
cc:9f:16:cd:33:2a:11:5f:f5:d7:a2:9d:95:8d:d3:a9:73:de:
32:e5:e6:42:c8:eb:db:9c:c4:e0:f0:22:22:54:ff:a3:f5:0a:
46:c9:c3:1d:57:03:33:b6:79:aa:58:30:d5:35:e5:a7:2a:15:
5d:b4:cd:e5:f6:ec:7f:7e:15:83:8a:51:96:e3:69:69:6f:e9:
91:e9:52:ca:97:81:f5:c2:96:bb:5f:c6:3b:d6:6f:59:50:e4:
d2:f5:d0:a5:fa:5a:33:e9:0f:04:56:e8:03:50:15:d5:29:0c:
04:99:0c:4f:d7:17:20:22:c2:b9:19:bd:2a:be:9c:ae:d1:af:
0a:49:a4:c8:a8:96:75:9e:80:f4:ec:d2:44:97:aa:07:ff:e8:
4c:d8:d9:7f:c3:2a:64:08:b1:d1:e6:8d:68:ec:98:bc:2e:bc:
e3:71:31:75:b4:98:77:d1:6f:8a:5e:95:62:49:b3:ab:5f:aa:
47:6c:12:93:cb:fc:02:0b:d6:ee:8e:9b:a2:5c:91:bc:e4:c3:
e2:fd:76:02:c1:a3:e5:a7:c2:87:1c:e6:e7:9f:ac:56:20:16:
b3:a8:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:51 2024 by rpki-client on console-ams.rpki-client.org