Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2eac2d0a-b3c2-3cb2-84d2-063cfa221460.roa
File: 2eac2d0a-b3c2-3cb2-84d2-063cfa221460.roa (raw, json)
Hash identifier: rxu8M5FOksm699K+8udm4GFnMnaM8rl2GmpiNJ50P3s=
Subject key identifier: C2:1B:7F:35:FA:4C:68:3C:DA:41:59:8D:CE:06:61:40:61:82:98:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AFECD9098B37B4BCEC1AA098
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2eac2d0a-b3c2-3cb2-84d2-063cfa221460.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 151.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:af:ec:d9:09:8b:37:b4:bc:ec:1a:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=9475b6ab-15a9-423d-9f5a-b5a8e057002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:92:21:cb:9a:54:be:59:c5:a5:d8:99:f9:
f8:17:01:88:6d:c5:f9:f0:e3:5e:57:9c:13:36:4f:
4f:01:58:42:b4:06:9f:f4:6b:d6:20:7c:0c:37:e3:
86:f9:1b:0b:0a:30:eb:fd:61:56:cb:f1:c9:f7:07:
bb:58:91:26:cf:d9:5d:e3:b7:af:0b:05:93:da:0d:
3d:ff:7c:06:5f:f4:59:8c:71:f6:06:c5:2b:66:3c:
63:57:3d:04:fa:3d:f9:3a:7c:d2:cc:f9:f5:ec:92:
aa:f6:80:3f:d0:f6:94:f8:2a:11:72:43:be:be:50:
05:a0:13:59:e7:90:6e:0a:1e:d6:9c:c7:2b:d8:6f:
4f:4e:98:d5:47:2e:16:cc:bb:c7:d9:ef:4b:99:49:
39:36:2c:d3:3b:14:0f:5e:c6:0d:f8:50:1b:fc:7d:
e9:46:75:30:b7:36:d2:b5:76:f0:ed:2c:e5:da:37:
1b:78:cb:32:47:24:ca:e6:c0:9a:40:7c:2a:63:76:
aa:68:b2:42:aa:3d:52:86:9e:04:6c:92:06:ac:fa:
d5:07:60:fe:35:81:1b:c9:9e:88:76:d6:55:9e:7b:
23:d6:3a:60:fd:86:ef:ae:c5:5d:9f:63:8e:6c:a6:
d3:b9:7b:72:44:40:13:2b:20:5b:fc:0f:41:1c:b4:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:7F:35:FA:4C:68:3C:DA:41:59:8D:CE:06:61:40:61:82:98:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2eac2d0a-b3c2-3cb2-84d2-063cfa221460.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f5:a3:1a:a1:a6:ae:93:ce:8f:c3:8b:bf:e5:e4:0f:eb:7f:
1a:c2:5e:68:0f:92:33:b4:51:82:43:d5:27:d2:94:12:6a:15:
e8:3f:20:be:d5:9f:c7:ca:26:e3:82:b0:ce:f0:c2:3c:52:1a:
07:c7:df:f8:2f:e7:90:99:7f:00:c7:2e:f7:f1:6b:01:6e:86:
e3:69:86:38:04:40:d4:5f:9a:18:00:3a:0f:99:06:9d:99:de:
81:03:5d:22:7e:01:aa:cb:2a:64:0a:ef:d6:2c:e8:75:1a:8b:
a9:2d:3b:9b:ea:4a:58:9a:3a:f5:5e:73:8e:8d:83:62:20:a0:
79:5c:b4:11:47:81:0f:19:82:b3:6a:43:f2:d8:62:df:64:71:
8c:93:54:a0:c5:e0:4e:37:91:e9:78:3d:c6:93:e5:bc:9a:02:
c8:ea:d5:90:b5:dc:b9:e2:3d:af:27:84:ff:e7:9c:4a:6e:4a:
00:b5:ed:2d:8c:db:15:25:64:b7:88:30:f9:da:34:f7:09:dc:
a7:55:bc:1b:19:dd:fe:ad:99:bf:0e:11:58:af:7e:7f:f9:e9:
c2:8b:3b:da:b9:90:e5:75:7f:1c:b9:08:53:76:40:e4:ea:10:
96:73:2a:19:95:8c:8e:4d:d8:0a:6e:a9:f7:1a:90:15:ae:e7:
1e:cf:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:51 2023 by rpki-client on console-fra.rpki-client.org