Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cb5f825-b237-3e86-934b-18cd6ca53947.roa
File: 0cb5f825-b237-3e86-934b-18cd6ca53947.roa (raw, json)
Hash identifier: SiJRGkKRxg2MAmDK8jCExDmCXFA2GUl2RrirqylVM1w=
Subject key identifier: 8A:BB:66:42:19:24:0B:AE:80:AB:7A:75:01:CA:95:DB:0D:72:1E:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D49FD829EAD1DA32423565A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cb5f825-b237-3e86-934b-18cd6ca53947.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 151.148.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:9f:d8:29:ea:d1:da:32:42:35:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=244ee63b-2df1-4182-8b71-a0f35ceb6ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:b1:6d:c8:cb:94:1f:58:3a:e3:4d:88:14:
f7:b7:05:1f:05:83:0f:3c:d1:d2:8a:5b:37:21:93:
76:3b:fe:3a:1c:04:a6:26:63:15:70:c0:28:fd:0a:
e7:f8:3d:6e:7b:b8:63:85:41:27:6d:e0:4a:22:da:
22:77:4a:80:f0:2b:7a:8a:f8:f3:5a:c8:2e:cc:e4:
71:83:ae:70:43:b4:5b:31:06:0e:24:0a:54:83:cc:
e0:01:44:4d:b8:bc:9c:25:cd:04:71:7a:ca:61:2c:
e2:04:a0:e9:69:f0:de:8b:ec:13:84:5c:13:65:15:
a1:cb:4b:d7:3b:e3:8a:ca:b1:d3:42:36:cd:26:44:
f5:28:00:f9:3f:9a:57:c4:13:0f:3d:18:8d:ba:68:
47:98:6f:b9:6d:de:ae:d4:eb:91:06:57:ec:81:b8:
e7:20:07:63:e6:82:d1:dc:be:a9:f6:4c:af:ae:27:
aa:35:c4:df:40:88:26:a2:11:4c:05:dc:23:cc:15:
64:88:dc:d5:12:d8:8f:a5:b1:89:88:ba:c2:4c:ff:
a4:20:9c:46:cd:6a:ea:30:26:86:3b:05:25:d1:47:
ae:ee:d7:02:ca:a5:00:32:6c:c2:98:d2:01:92:cc:
9d:62:30:f9:06:3f:dd:ae:d8:59:6f:6a:5a:01:f2:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BB:66:42:19:24:0B:AE:80:AB:7A:75:01:CA:95:DB:0D:72:1E:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cb5f825-b237-3e86-934b-18cd6ca53947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:d0:c6:81:6b:4d:a9:27:ff:09:53:0e:10:ad:91:28:b3:b1:
12:bd:41:17:8c:ae:88:c1:91:8d:78:13:a8:2f:39:27:70:ed:
8c:3a:09:de:86:59:6a:a4:78:39:d3:98:9f:64:6b:10:7e:9a:
a0:6b:a3:9c:8a:5a:bb:f1:fb:d3:04:04:04:5b:73:63:75:37:
d3:cb:ec:88:89:fe:ac:84:0e:9b:48:64:a4:d9:62:d7:50:fd:
fa:c1:83:2f:f5:5c:c4:f1:52:45:b6:2f:5a:15:60:4c:5a:e1:
e2:07:e2:9b:ed:74:f8:f2:23:7a:e5:10:8a:d5:97:e6:37:dc:
10:0d:f7:17:8c:71:b7:d3:ad:4f:c5:5d:78:01:c5:e7:25:72:
83:07:fa:ef:cf:45:9b:94:b6:8f:8a:c5:74:c5:58:5d:5b:f0:
76:02:a6:d8:05:0f:d0:6f:80:e3:54:6d:20:f8:72:72:0b:7e:
8d:91:9e:ca:57:0a:2b:fb:f6:6e:68:ef:b8:57:ec:86:90:5d:
b6:c5:3f:b2:df:0e:85:2f:fa:48:bd:45:8b:c1:a1:4b:b6:45:
4d:3f:9a:e8:41:7c:6e:25:04:03:d5:42:89:c0:ae:bf:a8:da:
12:e4:04:18:4f:c3:58:80:55:91:0f:76:b7:79:1f:72:2d:5b:
a9:29:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:29 2023 by rpki-client on console-fra.rpki-client.org