Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2623509b-45ae-38af-bb11-8b987b90ba48.roa
File: 2623509b-45ae-38af-bb11-8b987b90ba48.roa (raw, json)
Hash identifier: 7UNkzV7+c7CEQhRzgnz7hkqzzTzWE28IwnjsSRhK4WY=
Subject key identifier: F1:A8:6E:8D:BB:69:2B:90:C4:D1:FB:7D:79:C5:D6:30:B2:EE:BD:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584086BF16CAE3E592466CC6FF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2623509b-45ae-38af-bb11-8b987b90ba48.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 20.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:bf:16:ca:e3:e5:92:46:6c:c6:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=c350b2cf-ee92-461b-87d5-c71a22a877ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:83:5a:8e:71:50:a6:fc:a7:3d:85:59:14:
ba:fb:af:8f:03:ed:88:a6:5f:9c:d6:51:86:63:da:
26:2f:7c:a0:f8:04:21:d7:1b:8c:ae:dd:c8:9d:91:
95:82:73:2a:e0:19:58:fb:a2:ce:be:0a:34:00:c2:
c3:9c:35:b1:28:a5:7a:21:f8:b2:55:4f:5f:b0:28:
81:90:06:d0:6e:0e:c2:1b:7d:f7:b4:59:d4:be:67:
bb:6e:2f:90:d1:30:69:24:86:78:b7:6a:01:13:84:
51:a5:5e:e2:3e:88:83:8c:ac:4b:27:a0:74:40:1f:
f0:b1:51:10:eb:02:95:0c:81:3a:98:63:24:8d:60:
5a:1b:09:ea:ec:7e:8e:7e:64:35:d7:e6:23:a4:5c:
de:7e:2f:77:1c:14:20:4c:b5:3f:fb:76:05:35:63:
e7:51:b6:3d:ad:80:b2:79:cb:4a:ed:ea:f1:4a:a0:
d4:69:28:f4:a8:5e:26:e0:36:92:7b:87:ab:39:42:
33:a7:b4:83:c8:1e:5b:86:7b:bf:86:fe:a2:24:b3:
b5:95:cb:52:fa:e1:e6:de:6b:1a:6b:70:49:c7:fa:
d1:9c:67:2f:0e:c7:b0:ba:09:ab:92:2a:e9:ac:2e:
4b:36:41:72:15:d9:31:bc:a2:24:a3:5d:ad:40:21:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:6E:8D:BB:69:2B:90:C4:D1:FB:7D:79:C5:D6:30:B2:EE:BD:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2623509b-45ae-38af-bb11-8b987b90ba48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
20.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:1c:8a:73:fb:27:0e:13:89:83:7b:ce:64:3b:d6:42:e5:d2:
89:6e:6e:17:23:30:c1:f2:2b:50:5e:7c:49:b1:9a:4b:da:4c:
f8:7e:cc:94:f9:36:d7:58:12:b1:e1:38:55:ab:5d:eb:12:0e:
64:da:0b:aa:43:c7:6f:02:46:49:f2:de:54:33:e5:5c:8c:22:
a7:6d:fc:56:f3:d7:c2:92:b0:6d:12:a5:7c:b8:b7:d8:fd:ca:
c6:a2:d1:0e:d9:b5:d3:f3:ae:32:84:c9:df:75:a0:e3:47:f0:
d3:18:48:c5:dc:ec:93:27:41:7d:df:d9:f4:62:4d:46:4a:1f:
f2:9b:aa:c7:7a:96:ba:3a:d3:65:1a:c4:92:b9:76:ed:19:a8:
1e:5c:96:c5:f5:c9:a5:f3:21:cf:ad:39:35:c0:a1:d5:c3:97:
e3:e3:15:55:45:ce:8c:89:e9:f5:ec:e8:58:a0:c7:fd:c9:b6:
40:7e:51:19:f0:9f:99:e5:d9:08:74:3e:13:ce:b7:a5:18:29:
29:96:a3:84:88:33:22:b4:3d:d0:b7:1d:32:8f:ca:9a:b7:29:
95:fd:a9:e6:a9:a3:3e:36:b6:df:b1:30:9d:de:0d:ae:05:4b:
b0:ec:c2:2e:f2:3b:ab:ef:dd:d8:1b:69:4b:db:35:71:fc:99:
ca:53:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:09:41 2024 by rpki-client on console-ams.rpki-client.org