Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/512601f7-66da-3a5e-ac5a-60526084f05a.roa
File: 512601f7-66da-3a5e-ac5a-60526084f05a.roa (raw, json)
Hash identifier: HwwRmPMhtUWIQ8vPIhFiFVL9yOi/Ldhm944ok5J7lPQ=
Subject key identifier: 94:57:C0:DD:7A:31:AB:8A:89:47:11:9F:C8:F6:DC:0B:21:AC:1C:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BE004663363F7241BD80C140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/512601f7-66da-3a5e-ac5a-60526084f05a.roa
Signing time: Sun 29 Jan 2023 12:00:00 +0000
ROA not before: Sun 29 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 192.31.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:be:00:46:63:36:3f:72:41:bd:80:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 29 12:00:00 2023 GMT
Not After : Mar 6 05:00:00 2023 GMT
Subject: CN=17b7aa28-1252-4a1a-94f9-fd02c7c71f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:40:95:86:f6:55:da:7e:88:71:1b:7c:54:
63:de:73:14:6e:5f:4c:b1:6a:b6:c0:e4:da:a3:ee:
13:62:e2:0f:2f:97:27:9c:fd:04:ed:32:d2:03:d5:
1d:80:dc:57:92:1e:41:3b:43:17:af:e2:7d:84:3c:
e4:00:02:a5:6b:ca:c6:86:fa:b8:e3:eb:55:13:ed:
a1:12:d7:b4:c7:8d:b7:a7:b9:e6:b4:48:76:9f:2d:
5f:cf:1e:17:62:ad:a3:cb:7d:fb:9a:95:d7:2a:03:
18:9f:ff:e8:1e:35:fc:80:1d:3e:55:87:9e:c9:a8:
04:7c:42:5d:01:c4:57:58:ed:ad:ec:60:49:9a:99:
95:d9:c3:32:d6:cb:62:22:ba:2c:75:94:45:70:51:
58:07:07:12:c5:50:8e:a1:b6:b2:b4:12:05:1d:b2:
8c:f0:9c:1f:72:79:26:90:ad:23:9e:d0:7c:72:56:
cf:77:f5:8a:0d:b8:05:d2:e2:98:15:3e:b8:f2:69:
52:cf:3f:1c:f8:de:9d:c9:ab:8f:fa:4d:8b:be:0e:
f0:9d:0e:aa:02:f2:2a:9b:9f:e8:14:20:ce:7f:c7:
6e:30:ac:ea:a6:70:67:70:72:42:9d:21:ab:64:38:
98:99:1d:59:8a:94:42:a9:52:65:58:a3:53:6d:e3:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:C0:DD:7A:31:AB:8A:89:47:11:9F:C8:F6:DC:0B:21:AC:1C:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/512601f7-66da-3a5e-ac5a-60526084f05a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:82:65:92:df:51:3a:1d:fc:96:3a:e1:55:1a:8e:c8:f4:b2:
c6:67:19:25:dd:ad:7c:5a:1a:90:62:94:4b:bc:82:34:02:2b:
05:03:92:4a:26:c1:ce:df:22:d5:82:3f:f2:da:05:57:da:d9:
50:c2:be:70:8a:a4:5b:21:b8:64:13:63:00:0a:94:8d:e5:7f:
79:66:84:52:ff:26:18:93:e1:ae:ff:fe:38:25:89:49:79:d1:
e5:63:03:2b:b6:7d:7f:22:09:c8:1a:16:a4:4c:a1:99:db:8e:
f3:bc:9d:f2:88:8c:a5:ac:64:52:a4:d8:bc:f5:e0:64:61:58:
8d:96:68:b3:70:c0:ed:25:80:72:ef:eb:63:45:31:84:78:2b:
34:ad:cf:21:3f:d1:b7:24:e5:93:00:94:48:ab:79:40:66:3f:
5b:7d:3b:53:ef:a3:e6:cc:66:20:6c:96:b4:bf:83:46:aa:3f:
66:22:2c:f7:00:35:46:ce:32:a1:eb:54:f7:aa:fb:65:ab:5a:
61:cd:d4:74:57:82:54:a3:c4:06:49:87:11:10:2f:68:e3:58:
44:79:60:5e:56:a8:bb:ca:24:89:1a:91:4b:a6:7a:bb:42:3f:
0e:57:29:98:a1:a9:88:30:ba:6b:6f:7e:4e:aa:e9:61:e0:0c:
5c:65:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:49 2024 by rpki-client on console-fra.rpki-client.org