Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/3de955ac-40e5-3763-89ba-54b93605c71f.roa
File: 3de955ac-40e5-3763-89ba-54b93605c71f.roa (raw, json)
Hash identifier: ciV+myOEeMA+Whb+gozEy4VGDKHcR0T3pjPcJqDAhNo=
Subject key identifier: 93:DF:C7:18:74:24:B3:99:AC:C0:D9:E1:9C:23:CF:A6:25:BF:DD:83
Certificate issuer: /CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
Certificate serial: 010D0C9F43285845C04DBE40E3B97ADF4C1117D0
Authority key identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/3de955ac-40e5-3763-89ba-54b93605c71f.roa
Signing time: Fri 03 May 2024 14:57:55 +0000
ROA not before: Fri 03 May 2024 14:57:55 +0000
ROA not after: Thu 01 Aug 2024 14:57:55 +0000
asID: 33635
IP address blocks: 199.7.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c0:4d:be:40:e3:b9:7a:df:4c:11:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
Validity
Not Before: May 3 14:57:55 2024 GMT
Not After : Aug 1 14:57:55 2024 GMT
Subject: CN=f6d3bd2d-1313-4ec5-8ac9-b4ebea6ff6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:19:f6:11:51:8f:f8:d1:9c:be:65:92:81:
a5:a5:49:1d:49:cc:fe:59:e4:b4:db:42:c3:14:bb:
03:67:41:b6:4a:b0:4f:80:fa:94:e0:59:49:57:2e:
c9:fa:a8:d5:d3:19:a1:c6:26:24:b7:dd:c2:48:fc:
35:5a:62:82:47:dc:19:13:ea:4a:ff:6e:47:29:1d:
7d:66:15:13:41:63:55:f9:cd:67:84:98:60:01:c5:
44:e1:8c:93:62:35:9a:bc:e7:42:4c:d7:56:7f:27:
a0:83:be:a6:f8:64:4b:37:49:12:e8:be:b3:a1:c9:
31:b8:94:f8:f9:b1:cd:c2:02:3a:6d:22:ca:f4:88:
09:b7:ad:95:a0:ca:f1:f7:50:a5:84:32:fa:93:04:
3f:b0:25:38:4b:fa:cb:a3:2a:ff:47:6f:06:ea:e3:
79:ac:9c:39:6b:2b:e2:ff:79:ca:7f:1f:1d:d6:f8:
f7:7b:a2:9f:33:68:81:ac:6c:7e:23:64:e0:f4:e2:
1d:c1:e1:a2:30:60:a6:6e:c1:03:59:48:db:3e:63:
07:95:66:e4:83:26:bc:c6:f6:c6:64:4f:61:cd:d3:
b4:58:31:9b:9e:07:93:79:43:31:71:1b:f1:ec:0f:
a3:41:dd:3c:ba:b0:e7:44:a3:2b:db:d8:5a:a1:ab:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:C7:18:74:24:B3:99:AC:C0:D9:E1:9C:23:CF:A6:25:BF:DD:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/3de955ac-40e5-3763-89ba-54b93605c71f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl
X509v3 Authority Key Identifier:
keyid:4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:6d:13:f9:62:af:33:0a:dc:ff:31:e4:9d:7f:b8:9a:2e:d0:
0e:0e:f0:b4:bb:ca:18:b7:28:ff:16:b7:d2:e7:e5:ee:d7:1d:
dd:16:9a:d9:59:76:ac:80:ca:1e:ef:28:06:6c:bb:86:60:ec:
f8:b1:e5:c3:f0:02:f8:9e:ff:d5:91:ab:19:81:c0:3c:2a:3d:
52:42:b9:dc:1a:e4:55:3e:10:8c:1d:93:4d:11:70:57:f6:8c:
c9:b1:d8:a5:df:a2:5b:02:d1:4b:ab:30:d4:80:fd:cb:bd:51:
95:e4:60:ac:98:18:b0:54:98:b8:8e:28:f2:82:9c:36:c6:50:
25:a1:e0:17:3f:09:e7:f7:52:34:9b:3c:ba:cb:e5:18:19:0b:
70:56:ca:83:8c:0a:3b:aa:ab:1d:2f:63:c3:4b:6b:c8:5f:a6:
70:c8:d1:80:aa:32:c0:65:2f:89:f9:1e:39:aa:94:b0:8e:ac:
c6:d7:6b:f8:ae:9a:ad:59:0f:97:12:06:df:f7:8b:0b:a4:90:
8b:20:a3:10:df:90:3e:3e:cd:6b:fd:3b:b9:0b:09:f6:75:6b:
26:ea:4f:05:e3:d0:a6:6e:ac:d2:82:87:3d:ec:96:3d:46:63:
28:3e:1a:30:88:b5:48:ba:89:67:8a:0f:87:8f:91:f7:13:27:
27:53:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:19 2024 by rpki-client on console-ams.rpki-client.org