Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70ce2820-e23d-3ef6-b6b2-79f45e60e66e.roa
File: 70ce2820-e23d-3ef6-b6b2-79f45e60e66e.roa (raw, json)
Hash identifier: y3Af13psuIPraDY1zJshHB8PkHB5IHnZ1W/dH9AldzA=
Subject key identifier: 4D:A2:7C:ED:64:B6:63:DA:75:B9:EF:22:20:9A:85:47:1E:00:B0:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D4AEF2BA318D9265EB0B3440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70ce2820-e23d-3ef6-b6b2-79f45e60e66e.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 65.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:ae:f2:ba:31:8d:92:65:eb:0b:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=2d21acbb-1848-4b3d-8908-0bef1fee0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:51:fc:65:4d:23:0d:00:24:da:78:58:c7:
b4:0b:ac:46:c3:a3:67:6c:03:1b:d2:80:9e:29:a2:
0a:1f:81:5c:ae:52:d4:4c:6f:12:21:a2:08:41:e7:
c0:b2:15:3c:cf:f6:6c:f8:af:a6:39:62:31:c4:48:
e2:08:a9:81:c0:77:26:7b:61:7a:d4:86:84:57:30:
4a:b5:6d:16:10:ae:6f:25:4c:4c:43:fd:e7:2c:43:
c8:60:6a:5c:83:a8:d8:46:c6:42:43:a8:1b:10:ed:
c8:dd:bc:98:fd:ec:03:59:03:ba:fa:ad:6a:33:6b:
68:49:57:10:06:64:e4:d6:1d:63:84:2a:50:81:64:
09:43:d3:09:83:91:71:f1:ea:1c:7f:b5:f9:56:70:
18:62:73:c7:92:3d:70:b9:40:25:52:23:7f:c6:03:
e9:ca:67:da:63:b9:6c:08:4c:91:c2:f8:f2:15:6a:
57:ad:fc:6f:ea:59:d8:60:fc:d4:10:4f:a5:cd:56:
4b:8e:4d:ee:76:4f:2f:50:25:7e:2f:12:7c:f0:f9:
20:4e:10:76:9a:ae:e2:05:9d:fc:ca:bc:69:e6:bc:
66:da:f7:b0:30:79:e5:a8:9b:14:92:6d:dd:f3:ad:
dc:82:01:cc:b6:d6:b4:fc:17:83:15:4f:0e:29:d9:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:7C:ED:64:B6:63:DA:75:B9:EF:22:20:9A:85:47:1E:00:B0:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70ce2820-e23d-3ef6-b6b2-79f45e60e66e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:e2:4a:8f:84:6d:67:32:e4:fe:73:ca:d8:18:bb:4c:4d:32:
3d:0f:b9:3d:e7:a5:da:1c:f1:a9:1b:77:0b:4a:be:e3:b5:26:
77:64:9d:14:86:62:83:12:a5:75:9e:6b:aa:c6:b1:00:db:e1:
fd:48:bb:f5:06:ff:51:3c:e1:71:57:e2:91:54:6c:8c:56:9e:
3c:56:2e:8b:1c:86:69:b2:67:aa:9a:9d:eb:65:e4:aa:b9:f2:
cf:4e:34:36:3b:c2:46:a5:47:d6:22:ed:cf:1b:ae:6a:be:f1:
79:9a:76:63:77:e9:76:86:66:6a:9c:74:7d:61:73:28:03:27:
3b:17:66:ff:f0:e8:39:c0:47:c1:7e:9c:0a:25:48:ad:fc:4d:
bf:44:0f:44:0d:65:57:16:65:15:36:cb:28:9d:ea:c2:fe:e2:
85:7e:92:0f:7f:29:be:f6:06:b5:0b:59:c2:ef:12:aa:46:53:
f1:bc:4d:8c:05:a5:4d:56:c2:a5:eb:4b:be:98:a6:44:87:6b:
06:01:f4:d3:3d:0a:29:a2:69:d9:8f:75:26:19:85:ca:92:8f:
0f:40:52:ec:e7:a9:02:b3:48:0b:70:23:8f:54:61:f1:b9:87:
8a:78:12:81:60:6e:ba:e9:17:d7:be:16:7e:ce:0a:f4:14:28:
c5:a6:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:40 2023 by rpki-client on console-ams.rpki-client.org