Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20a34eac-c6c0-37ca-989f-bcaaaef5fddf.roa
File: 20a34eac-c6c0-37ca-989f-bcaaaef5fddf.roa (raw, json)
Hash identifier: k2136zLuz/XTmMnARaZRACLXdqeTiEB9/x0zxaskJjo=
Subject key identifier: D2:87:B9:81:1A:CC:60:BA:B3:1E:ED:4F:9E:87:6B:ED:A7:EB:B7:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AAA9595AFEB979B10E68D380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20a34eac-c6c0-37ca-989f-bcaaaef5fddf.roa
Signing time: Sun 22 Jan 2023 12:00:00 +0000
ROA not before: Sun 22 Jan 2023 12:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 168.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:aa:a9:59:5a:fe:b9:79:b1:0e:68:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 12:00:00 2023 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=75e0f8f9-fa5b-40f9-ae1b-be658b9ec68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:ca:28:e0:f8:08:f3:0a:ca:fd:3d:91:c5:
a6:b0:98:75:30:42:67:2d:f4:b8:4b:3f:84:e4:17:
88:0b:f2:41:38:24:e9:ce:e5:04:82:10:20:66:14:
f1:ee:ef:73:ff:a7:9b:83:0a:c2:cd:b4:70:39:14:
b7:e9:4c:25:88:ac:78:bb:c8:75:44:e5:01:df:50:
b8:2a:fd:3e:2f:67:62:b6:ca:01:ef:72:c4:eb:f6:
e5:e3:33:cd:91:c5:e2:16:f2:03:1b:4f:9e:4c:df:
ea:5d:b7:36:a2:91:2a:b3:76:36:98:96:89:8b:f9:
54:5f:d6:3d:45:59:64:eb:8e:3d:26:10:2d:4f:5e:
79:52:ea:c5:c3:1c:c9:66:f2:67:ba:b3:23:09:00:
99:89:73:ab:6a:b7:8e:1b:b8:66:b4:b9:ee:f2:cf:
39:77:af:a4:7c:0c:79:55:73:64:66:73:b9:db:5c:
41:40:88:f3:44:53:ee:7f:87:0d:06:d8:ef:32:7d:
69:73:a3:d1:37:e8:5b:54:41:9e:e0:d0:35:94:b6:
93:c1:c2:bc:be:32:b8:d4:d8:b7:38:03:df:1f:98:
7b:28:da:2e:bf:ce:6d:d5:f2:85:22:e2:74:76:49:
b7:c7:34:37:07:94:1c:13:2c:57:dc:f2:07:bf:60:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:B9:81:1A:CC:60:BA:B3:1E:ED:4F:9E:87:6B:ED:A7:EB:B7:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20a34eac-c6c0-37ca-989f-bcaaaef5fddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:7d:2a:8d:c8:98:8a:d8:07:f6:c1:be:39:01:f1:46:39:df:
d2:7c:4b:01:5d:5e:95:1e:ce:14:f8:87:c2:e5:16:53:e9:e5:
fc:51:8d:ca:d2:e8:ae:b7:3e:90:dd:72:29:d2:69:c6:29:34:
2d:65:b6:db:5b:ce:77:94:4b:34:30:00:b0:8c:44:07:59:ce:
45:f8:da:32:92:bc:58:a4:8d:51:1b:c2:21:0c:02:83:d5:a8:
fa:a7:47:b4:17:be:a4:a9:78:f2:2d:32:f3:1b:01:52:17:f4:
18:e4:97:0c:a4:f8:a4:01:10:91:76:7a:6b:6c:48:e1:f1:a8:
d4:5b:02:42:27:74:ca:d4:9d:35:40:d3:3c:b7:a5:c9:e3:e1:
83:b1:30:e5:a1:6f:67:40:0b:43:0e:ec:e6:76:d2:b4:10:86:
37:4b:31:d1:71:df:c2:cd:51:ac:f6:fd:b6:ab:cc:a7:e7:95:
63:2a:47:d0:36:39:0d:b0:8d:a6:0e:f8:70:d4:0e:de:26:71:
87:63:4c:09:cc:13:bd:aa:83:27:ca:7d:d6:00:50:42:ee:40:
82:92:e3:03:82:c3:2e:52:0f:a2:4d:19:40:47:26:e1:21:09:
47:28:31:a6:57:2d:b0:b0:a4:0e:8e:15:16:c9:08:c2:2a:1f:
74:99:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:41 2023 by rpki-client on console-fra.rpki-client.org