Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5317d6b7-2dcf-3721-8507-ba7083ff91b3.roa
File: 5317d6b7-2dcf-3721-8507-ba7083ff91b3.roa (raw, json)
Hash identifier: RMrq7kfUzy2r1p+U++Nl+wnby7tRLIlesVCJ8zcGnfk=
Subject key identifier: 9A:C9:E2:CA:EC:59:53:9A:CA:3C:94:74:05:99:02:37:3A:A2:D3:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067EBE327E698941282824100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5317d6b7-2dcf-3721-8507-ba7083ff91b3.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 161.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:eb:e3:27:e6:98:94:12:82:82:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=bfcfa461-57cf-4346-b4aa-29392e088bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:a1:90:0e:85:6a:57:46:a4:0e:15:48:c2:
3b:eb:98:06:c8:fd:6b:da:c9:87:5c:1b:b1:fb:64:
7b:d8:c7:4f:02:4e:0f:db:e5:f2:72:0a:04:51:44:
c9:9e:0e:a5:9d:fd:0b:25:f2:c8:07:a3:94:7d:7f:
37:56:ef:a0:2d:71:35:83:c6:3f:c3:05:7b:b1:f1:
8a:b5:45:f7:80:f1:35:35:53:b0:18:60:fc:56:51:
4d:42:40:aa:0a:e1:aa:b9:38:0f:55:24:c6:b2:dc:
1c:b8:77:07:2a:32:0e:6a:4e:65:f0:a3:93:f0:5e:
8b:5c:13:10:4a:13:54:60:b5:9f:46:81:37:7c:f2:
e7:87:df:79:16:4c:b8:6a:88:a9:ce:a2:d7:f2:77:
39:ff:4f:c6:03:04:df:2b:e9:be:01:d6:66:9d:50:
67:cf:4d:08:5f:6e:be:6a:a2:71:dc:26:0a:18:f4:
6f:0d:d4:28:08:05:24:61:98:c9:47:1c:ff:b8:c8:
e9:0c:57:2f:21:48:ed:97:e9:9c:45:71:1f:e6:c9:
d0:05:56:ac:aa:51:63:fc:1d:69:53:03:b1:de:19:
44:d2:6e:c8:07:fe:70:7a:53:d8:0c:96:e9:e3:2b:
0b:b9:5e:9b:71:70:49:a0:f1:c8:fa:ee:14:ba:81:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:E2:CA:EC:59:53:9A:CA:3C:94:74:05:99:02:37:3A:A2:D3:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5317d6b7-2dcf-3721-8507-ba7083ff91b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:01:ec:5e:e9:92:e6:4e:6c:30:00:12:97:ef:2e:79:52:80:
a0:04:c2:bb:c6:76:e0:63:80:3a:7f:77:6a:f6:3f:34:28:76:
22:8a:9f:61:df:89:4b:99:03:b2:a7:64:d3:78:59:bf:6b:75:
ec:b7:9f:6c:9f:b8:be:ac:7f:96:2e:19:76:ab:fa:e1:1c:1d:
92:3f:e8:5b:b8:42:67:97:a3:bd:30:de:a3:2f:e7:3a:9c:d6:
72:51:56:ab:22:30:ba:91:3b:af:7d:61:38:97:cc:c4:9d:ec:
1d:c1:2c:5c:98:a3:4b:88:d6:b1:04:48:a1:24:31:82:bc:bc:
f2:8c:80:98:7f:5e:28:56:22:cc:20:37:04:e7:b3:5d:9c:97:
1a:2a:23:2e:b3:b2:66:c3:f9:15:c2:db:79:53:37:fc:48:bd:
ef:7d:8e:34:49:f1:62:21:54:e5:e8:8e:8c:2f:88:21:e2:87:
d9:1d:f9:b6:c1:f8:7f:41:fb:7a:79:a9:4a:e6:19:bc:ef:d9:
df:15:84:52:c7:e2:cb:ea:b5:7d:19:18:f2:e0:4f:a2:db:45:
a0:d3:51:de:92:a3:fb:c8:f3:15:96:fe:55:1d:f1:14:1e:04:
fd:76:cf:2d:49:0f:e3:6a:a4:3a:4e:85:60:a6:90:b0:74:5b:
f5:26:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:25 2023 by rpki-client on console-ams.rpki-client.org