Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/a049ea4f-aab8-36ff-adc9-70aa8c2a5741.roa
File: a049ea4f-aab8-36ff-adc9-70aa8c2a5741.roa (raw, json)
Hash identifier: fTzVg1jGqPT4HVxO/P3hONlBC9UEu7vYIJfq+tA4QVc=
Subject key identifier: ED:F7:6E:99:6F:E1:DD:A7:78:F6:5D:49:FC:5B:90:D2:87:7B:B7:24
Certificate issuer: /CN=d66be2ca-9529-4430-bcfe-12e5b919f33d
Certificate serial: 010D0C9F4328583E1B4A59E8410A7D1C0D5F4280
Authority key identifier: 50:0B:54:BB:79:B8:1A:54:3F:DE:E9:66:3B:9B:1C:E9:B1:9D:B6:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/a049ea4f-aab8-36ff-adc9-70aa8c2a5741.roa
Signing time: Thu 02 Jun 2022 13:07:19 +0000
ROA not before: Thu 02 Jun 2022 13:07:19 +0000
ROA not after: Wed 04 Sep 2024 04:00:00 +0000
asID: 14589
IP address blocks: 72.29.160.0/19 maxlen: 24
74.82.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:4a:59:e8:41:0a:7d:1c:0d:5f:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66be2ca-9529-4430-bcfe-12e5b919f33d
Validity
Not Before: Jun 2 13:07:19 2022 GMT
Not After : Sep 4 04:00:00 2024 GMT
Subject: CN=f1ca6d11-7646-472d-8b2f-c2edfa4e7520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9f:ae:e3:7c:47:cd:78:92:30:2a:d9:5c:41:
7a:ff:6e:21:55:65:20:09:81:42:fb:b0:03:41:98:
4a:b0:b3:54:5e:00:d4:6e:27:00:11:c1:69:26:c5:
c8:dc:31:fd:81:f1:f2:fc:60:0e:7c:b6:f8:34:bc:
f3:ce:5d:20:cb:c1:a1:c5:7c:6e:a6:86:8d:81:3c:
42:f7:96:53:e4:65:51:6c:12:f3:8e:43:98:0c:a1:
5f:f1:52:e0:f9:da:70:db:01:82:fc:cb:a6:fa:08:
d7:81:72:cc:62:f7:5c:42:2b:65:82:40:59:e4:de:
11:06:2d:14:a5:b7:ab:ff:db:06:79:f9:12:67:5f:
de:3a:d0:21:bf:e8:50:2f:46:d8:ec:e2:85:ac:2a:
5e:0a:a9:67:a5:fc:54:df:96:7a:14:05:69:2a:03:
7b:f3:05:57:31:68:f3:e4:81:4e:82:04:5b:6f:f4:
7e:04:f9:1c:ab:6c:d9:38:80:7c:c3:3e:18:12:a4:
21:3a:39:1e:4d:71:b7:ea:bd:bd:c0:56:96:f0:ee:
78:3a:6b:e6:9d:9c:c5:d0:92:27:3f:46:9d:21:04:
e2:48:b4:20:be:be:76:76:56:37:70:47:52:34:fb:
3d:64:72:83:9c:83:e5:cc:13:88:56:81:7c:81:21:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:6E:99:6F:E1:DD:A7:78:F6:5D:49:FC:5B:90:D2:87:7B:B7:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/a049ea4f-aab8-36ff-adc9-70aa8c2a5741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d/d66be2ca-9529-4430-bcfe-12e5b919f33d.crl
X509v3 Authority Key Identifier:
keyid:50:0B:54:BB:79:B8:1A:54:3F:DE:E9:66:3B:9B:1C:E9:B1:9D:B6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d66be2ca-9529-4430-bcfe-12e5b919f33d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.29.160.0/19
74.82.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ae:92:d7:0e:b2:a0:d8:8f:f3:11:72:0c:69:69:e3:98:d5:
05:20:80:3c:57:39:3d:20:6d:1b:38:29:8f:92:63:9b:ff:fc:
5a:d1:85:41:84:52:6d:54:f8:c8:fd:31:19:59:af:28:24:ad:
20:15:cc:72:83:37:8d:f5:e1:43:11:8d:30:73:c3:e1:ab:3e:
96:05:a1:c0:8f:cb:bb:17:fd:20:b9:90:0c:c0:8d:bd:49:22:
9f:93:85:73:f0:da:69:cf:b6:ad:c8:2a:a4:82:28:db:8a:10:
25:12:1f:85:41:83:b5:5d:6b:3c:23:68:16:2d:1b:90:de:2a:
5d:e3:35:04:cd:67:0a:22:2e:c1:65:cc:35:17:3c:5d:a9:d4:
bd:1f:14:c5:d8:50:44:7c:e7:8e:51:03:27:19:4f:f3:bb:0a:
ec:4e:9e:ff:1b:dc:d6:b7:e6:e3:cf:fc:1d:d4:ad:18:73:f3:
0f:dc:2c:31:b7:d6:1a:71:47:12:9c:bc:f4:72:85:ca:b3:9a:
5e:32:90:a3:8b:bd:08:72:dc:03:f4:d5:2e:bc:77:14:02:01:
7e:f1:7b:01:22:32:d0:94:c1:11:54:d9:06:3d:aa:b6:0b:69:
dd:c9:64:95:d2:24:94:33:c5:ed:a6:a0:45:da:8c:2a:e8:9e:
a5:d9:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org