Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d6479a8-1a6a-33c4-9989-2140deb86ecf.roa
File: 7d6479a8-1a6a-33c4-9989-2140deb86ecf.roa (raw, json)
Hash identifier: LMZEBd51+BUBDzw8sEipmuenvsqnfvlzRrdJjyXjruA=
Subject key identifier: F6:0F:67:B2:32:A7:F9:07:68:EB:CD:FB:2E:A1:DF:49:98:BB:2B:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C37F1EEFF5905E514CF78A88
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d6479a8-1a6a-33c4-9989-2140deb86ecf.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 152.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:7f:1e:ef:f5:90:5e:51:4c:f7:8a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=ef4f9644-e524-49c9-bbd0-c12b04bcd685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:bd:aa:4c:09:32:3d:35:1f:39:3f:c3:4c:
d0:61:74:cc:c3:6f:2e:bd:55:6e:fa:5e:ba:25:79:
09:8d:f9:70:ef:d9:a8:9f:3b:6b:5d:f4:82:85:ca:
69:c0:07:1e:a0:5a:c7:f8:d5:41:de:27:11:28:49:
5a:d0:3e:40:8a:8b:10:61:26:0b:a8:de:b2:49:13:
ef:57:d5:7e:97:02:8d:6b:7e:67:72:38:21:da:c4:
d6:95:f4:9a:4a:74:fe:80:f1:3c:79:93:c1:64:85:
38:ec:83:62:4a:13:13:ca:b7:57:63:d8:1a:0f:19:
b3:c7:a6:f9:29:e9:cd:10:e2:6b:44:30:9b:e9:0e:
c7:e5:dc:35:40:7d:5f:9c:52:9c:4c:e2:8a:e6:96:
e2:fd:9e:d8:89:3a:42:09:83:47:96:df:3b:13:e9:
52:2e:f5:1c:e4:43:fc:22:09:c8:26:44:f0:dc:a8:
65:88:a5:4f:05:66:4b:eb:33:6f:74:c0:02:c9:b7:
34:0c:c4:4c:8f:02:46:06:83:c1:80:03:61:dc:e9:
b4:3b:e8:7b:63:a4:75:6c:19:dd:cb:bd:3b:88:42:
e1:40:f2:f0:06:bc:0a:38:5b:da:81:3e:28:9c:56:
86:4e:16:72:e2:c2:10:28:56:89:0b:5d:a4:4b:e1:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0F:67:B2:32:A7:F9:07:68:EB:CD:FB:2E:A1:DF:49:98:BB:2B:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d6479a8-1a6a-33c4-9989-2140deb86ecf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4b:84:35:65:2f:2f:18:7a:49:80:55:de:50:fc:61:bb:a2:
58:54:59:9e:1f:3a:6d:bd:f6:dc:0a:26:35:7c:fd:b8:e2:68:
7e:5b:73:fd:2e:be:24:46:7f:46:34:49:c2:d0:3c:c4:e9:0c:
3e:3c:77:4a:7f:e3:1d:c5:98:57:31:d4:a4:ec:6f:03:10:26:
70:a1:8e:e5:20:d8:e2:9c:df:3a:50:f7:82:f0:2e:bc:ef:f8:
a0:ec:34:0d:a3:39:e9:11:5a:3d:2a:6b:13:90:6c:3f:8c:ec:
38:13:88:a6:9d:3d:6a:d8:c0:d8:f5:1f:e3:52:50:22:28:01:
8e:f2:23:b4:67:f0:ae:16:ac:d0:81:4e:ae:88:ae:92:bb:b2:
fa:08:33:5f:dc:61:fa:92:d9:1b:eb:5d:56:6f:1d:7a:0c:b1:
85:6f:6c:d9:a4:44:ac:72:71:7e:6a:1c:fc:21:f2:07:b1:9e:
59:35:bb:a9:03:81:11:b3:aa:d8:18:24:fd:2f:70:82:05:d5:
69:84:fe:75:a3:ee:53:1a:b2:1a:73:e6:9d:94:83:ef:0e:57:
73:d6:18:8b:8b:5b:45:fa:9c:7f:d8:06:07:6a:bb:01:9f:6a:
cf:31:4f:6d:96:a8:9c:53:b2:3e:7b:4d:87:5c:46:99:39:2a:
d9:18:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:33 2023 by rpki-client on console-fra.rpki-client.org