Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4dae01e6-bccf-3f81-af84-9a8f2d03e056.roa
File: 4dae01e6-bccf-3f81-af84-9a8f2d03e056.roa (raw, json)
Hash identifier: GWmAAoeP4VIuR7B9r9LxBKDFSUVFDrkCZNpb+ooKY3o=
Subject key identifier: BF:02:F2:6E:2E:CA:AF:30:91:BE:D8:59:A9:C3:AB:F6:C8:64:89:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AA6DCEA5EB533D230BB34C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4dae01e6-bccf-3f81-af84-9a8f2d03e056.roa
Signing time: Sun 22 Jan 2023 12:00:00 +0000
ROA not before: Sun 22 Jan 2023 12:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 168.192.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:aa:6d:ce:a5:eb:53:3d:23:0b:b3:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 12:00:00 2023 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=a14b0576-b309-40b9-aae2-19166f353527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:6c:3f:f2:c9:26:f8:4f:b0:55:aa:11:3f:
37:c9:79:60:6f:a0:e5:93:85:0b:53:1c:35:51:a7:
37:0c:fc:88:fe:04:70:ee:1f:a3:59:a1:33:c5:fb:
52:74:9e:f6:62:01:d9:03:cf:24:2d:36:eb:e5:5d:
07:99:95:29:84:3e:38:f7:c8:0b:e0:95:2a:4e:bc:
8e:73:5c:a3:f0:69:e9:d9:b2:c8:df:22:b7:b5:82:
0a:18:1e:c8:0c:c9:48:27:70:aa:38:b3:a1:d4:61:
91:fc:c1:c2:48:fa:a4:4c:b9:20:c2:ea:f9:8e:26:
75:b9:55:b6:0f:02:aa:12:c5:bf:2b:51:c7:7c:a4:
ae:19:9a:5b:52:03:18:14:5c:cb:14:73:60:ea:04:
9e:9f:89:38:9c:82:96:b5:31:61:b4:43:eb:e1:4d:
85:f4:4e:26:35:bc:a1:05:b0:3b:f7:25:67:22:07:
11:ae:ca:72:f6:78:4f:80:c2:00:3b:4b:a5:24:01:
15:6f:a5:20:ec:bc:6c:14:fd:e4:e3:c6:ab:28:97:
a1:15:79:02:d1:47:a1:b6:09:e8:1d:39:39:39:1e:
fd:af:02:77:2f:85:3b:ef:6d:d1:ea:36:c6:78:e1:
d9:72:0a:89:f8:15:6d:eb:59:48:b5:5a:9d:17:51:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:F2:6E:2E:CA:AF:30:91:BE:D8:59:A9:C3:AB:F6:C8:64:89:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4dae01e6-bccf-3f81-af84-9a8f2d03e056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.192.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:9f:29:c3:ba:f6:ce:82:f7:94:05:fa:8b:5a:ad:90:0a:c9:
dc:85:c0:22:a1:e2:ff:b4:ff:2d:f1:a5:81:7b:54:9c:fe:66:
67:62:9d:ea:bd:87:6a:d9:a8:f0:8f:14:3e:f7:d7:3f:91:01:
b7:a2:7e:e8:a2:04:c6:40:ed:58:8f:a7:80:22:d5:81:5b:37:
35:b7:57:6f:f3:40:5e:64:6f:1c:43:6e:c0:bf:d6:a1:2c:e7:
ca:84:07:6c:6b:07:53:71:e4:2e:be:78:fd:23:ca:dd:6e:53:
79:98:c9:b9:3b:44:0e:e8:7c:c9:5f:f9:38:20:f9:51:a2:78:
2c:47:2f:95:b6:19:82:b4:af:60:a9:f5:5e:34:d9:a4:75:50:
89:85:15:76:58:7b:63:bc:ac:9a:c2:06:b0:cc:1f:b1:51:88:
8b:96:38:80:89:6d:f3:fe:0a:a5:c1:05:33:72:ef:03:b8:83:
53:e7:47:0f:a9:04:80:3b:20:29:54:a3:44:b5:c8:d7:0f:5e:
74:62:b7:c0:e8:e8:22:be:67:9e:5c:80:61:dd:be:79:31:44:
e0:d9:f9:4e:c1:0c:b0:7a:c9:5e:46:fc:a5:75:49:ef:84:fd:
27:e7:5e:16:e6:58:18:98:ee:9b:a7:bd:55:a9:82:53:92:31:
fd:99:b3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:18 2023 by rpki-client on console-ams.rpki-client.org