Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36611907-3391-3df9-b346-3bbd553d4743.roa
File: 36611907-3391-3df9-b346-3bbd553d4743.roa (raw, json)
Hash identifier: Foo5xrut4uwGbcQCNUqHsVa9lQKu0f6rgXmfuacVdNc=
Subject key identifier: 14:46:81:A6:CA:00:D8:3A:46:F1:99:F1:31:6A:75:78:8B:2F:1E:F8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840ADA0967E24BD31FD58FB6580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36611907-3391-3df9-b346-3bbd553d4743.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 32.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:a0:96:7e:24:bd:31:fd:58:fb:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=194e8ef6-30dc-4c05-bd1d-0f879d567cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:9a:b4:72:22:f1:a5:e3:1c:e8:67:78:f0:
83:f6:ed:61:10:87:3a:7b:d6:05:3c:15:36:70:00:
cf:e9:3e:68:f4:2c:2c:9a:bf:52:7d:41:b6:c4:b9:
0d:e6:69:85:2f:ee:a7:2f:12:56:a1:3f:9a:bd:f5:
74:ad:94:bb:30:f8:4a:ad:37:55:d0:d6:69:f4:ae:
3f:f1:1f:e5:8f:b1:0e:c7:24:2b:7c:1f:8f:26:93:
00:66:ca:f1:f0:48:6c:a3:5f:3e:5c:36:c1:16:ec:
95:20:76:d4:c2:22:12:b7:c0:65:c1:bf:04:8d:77:
1d:c4:ff:4f:18:2e:22:88:a9:ff:da:1b:69:96:22:
13:86:af:09:36:18:0d:0e:a8:b8:e7:b5:8d:34:29:
e6:97:98:16:61:10:36:e2:a8:d4:ac:9b:02:bd:00:
60:c2:84:e6:05:4b:a6:f8:52:80:74:43:8e:07:fb:
61:18:75:d2:b5:1f:d3:65:a0:41:9e:b5:b5:ab:30:
4e:57:d9:07:8d:fe:af:eb:b1:7f:b3:36:ca:2c:e2:
02:f1:37:f2:66:4c:da:11:be:b0:9e:3f:e5:6a:b3:
ba:31:49:d7:f0:63:96:91:3a:56:42:b2:ac:71:96:
2d:02:4d:e3:7b:c0:9e:67:da:ab:1e:2f:9a:a3:ba:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:81:A6:CA:00:D8:3A:46:F1:99:F1:31:6A:75:78:8B:2F:1E:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36611907-3391-3df9-b346-3bbd553d4743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:46:32:c5:12:8e:69:f3:4c:0d:c8:03:c3:02:b8:3d:b1:62:
f6:e5:04:0a:0e:51:fa:90:a9:6a:60:56:a1:19:8d:3d:b4:01:
a0:60:d4:e4:f8:a2:6f:c6:63:76:b0:8a:f8:dd:5c:40:e5:f4:
df:45:4f:90:8f:d6:17:d7:a5:f2:71:b9:a7:88:8d:d1:6d:fd:
1a:55:2c:40:28:09:d4:61:38:3c:a8:16:d1:2d:2b:e4:c7:c1:
b8:f3:35:03:2d:81:36:19:08:e8:41:e2:b8:6a:12:dc:88:cc:
8e:85:7e:6c:1c:bf:29:c1:4c:25:ee:1d:2f:06:48:72:f6:44:
d9:af:2f:43:c9:70:b8:f2:9a:24:b0:06:25:9d:da:9c:49:7f:
58:30:67:8f:fb:0a:28:3e:c9:9c:6d:54:32:8b:b6:30:4c:43:
d5:3f:8c:f6:29:7c:e2:2a:34:de:8c:99:b1:90:05:33:fe:e4:
ed:a6:73:e9:a5:ea:95:a6:12:5c:df:81:51:0e:4f:cc:89:b1:
c0:40:fa:8e:22:89:47:60:a2:09:0b:74:d7:02:de:e3:7e:85:
6f:29:95:3b:7d:b9:4c:eb:e2:6f:38:85:d2:1c:d4:d9:45:fb:
e8:2f:c7:50:29:bf:7a:6e:75:ee:68:06:be:6c:70:62:94:8f:
b8:b9:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:10:36 2024 by rpki-client on console-ams.rpki-client.org