Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/a98976c6-b2c1-3640-af55-172e3093faaf.roa
File: a98976c6-b2c1-3640-af55-172e3093faaf.roa (raw, json)
Hash identifier: TCB6G+WEN8iqkpDQ+clBkiZc+/aGkWnQxKmra9pvsmA=
Subject key identifier: D2:44:3F:8F:D0:06:60:11:19:D0:60:A4:CF:03:60:A4:E7:D0:4E:7D
Certificate issuer: /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial: 010D0C9F4328583FB8EB3D4D5BF199E2AB9157E0
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/a98976c6-b2c1-3640-af55-172e3093faaf.roa
Signing time: Fri 28 Oct 2022 18:06:42 +0000
ROA not before: Fri 28 Oct 2022 18:06:42 +0000
ROA not after: Thu 30 Jan 2025 05:00:00 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b8:eb:3d:4d:5b:f1:99:e2:ab:91:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
Validity
Not Before: Oct 28 18:06:42 2022 GMT
Not After : Jan 30 05:00:00 2025 GMT
Subject: CN=be0b9abd-62f3-4fb8-9f92-8b56ddef6e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:bd:f6:26:8b:c0:ff:38:ee:21:57:2f:de:
2d:15:3e:78:f0:06:05:6f:55:b2:c4:f8:44:a6:3d:
5e:a5:af:52:13:a5:93:89:e1:56:3e:3c:53:22:54:
54:7f:87:e0:2b:ba:0e:5a:68:82:97:a3:3f:20:1b:
83:3e:1f:08:47:d3:15:84:c2:5f:ba:02:9e:28:16:
cc:50:45:44:0f:95:52:81:37:fa:11:a5:25:0e:2e:
d2:2b:0e:de:b9:cc:cf:81:95:5f:89:c1:2c:a0:30:
e3:92:dd:e8:3b:89:60:fa:17:53:ea:e6:0f:1b:6b:
5c:87:5b:e1:13:3b:33:8c:38:7f:e0:fd:b3:8f:49:
6d:b5:87:bf:fa:bd:db:d8:22:ef:55:b6:bc:3c:3f:
3d:53:75:f2:1c:aa:c1:a0:1b:30:ea:2a:c3:e7:2a:
f1:81:bb:a7:ad:53:75:d8:70:b2:1c:18:11:96:fe:
ea:9b:59:59:9a:0d:ea:e4:be:b3:33:c2:6b:9c:be:
c4:f4:b7:64:8d:f7:0e:32:1e:56:b2:fe:b9:d8:cf:
38:d1:6e:22:44:b5:2c:c1:10:7d:8c:7b:68:1d:ca:
63:04:7f:52:4b:02:54:ab:f6:36:f3:ad:4f:00:e2:
cd:2d:0b:51:d7:26:04:f7:b5:c4:5f:71:5a:ef:77:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:3F:8F:D0:06:60:11:19:D0:60:A4:CF:03:60:A4:E7:D0:4E:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/a98976c6-b2c1-3640-af55-172e3093faaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl
X509v3 Authority Key Identifier:
keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:2d:6a:9f:f9:4c:ce:42:1a:18:f4:95:b5:39:17:8b:39:61:
75:f4:02:44:1d:32:32:45:8d:bd:a7:fa:cc:01:58:78:09:f2:
55:2f:90:45:27:39:4f:3d:f0:40:6d:a3:5a:ff:87:88:af:ff:
7a:23:30:86:08:ae:48:b3:7e:31:25:5b:0a:3b:4f:46:83:7c:
56:88:5e:2c:91:2b:76:1c:10:81:29:30:d3:0b:96:84:4b:96:
e7:57:d7:62:9c:bf:f0:8a:25:e2:4e:7b:86:55:ae:9a:fd:e7:
76:4c:62:e0:4d:83:70:9f:00:9b:8e:95:be:09:f0:9b:da:70:
dd:76:a2:6d:07:e0:3d:81:c4:bd:c1:f2:f6:8f:18:cc:65:59:
cf:bd:82:63:74:69:de:2d:4b:82:ce:66:06:62:e0:dc:f6:2f:
d7:72:6d:85:68:b2:c8:57:d2:53:fa:3a:d6:71:a5:af:0b:9f:
f3:e4:19:24:8c:c3:d0:46:ff:df:7c:9d:c9:64:32:f9:b3:fd:
af:4e:cd:72:d2:0d:6a:68:c6:4b:c8:a4:f2:87:56:32:74:92:
82:fb:22:9a:90:7c:b5:1c:a0:d4:ef:70:3e:a7:52:05:14:a3:
e6:e4:6a:c7:53:84:5c:d5:cc:56:39:b4:03:ec:83:47:22:63:
84:67:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:47 2024 by rpki-client on console-ams.rpki-client.org