Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9921a291-33a0-3f77-9e2d-e253ee20ab5b.roa
File: 9921a291-33a0-3f77-9e2d-e253ee20ab5b.roa (raw, json)
Hash identifier: /7TrqGeCftPbbosvwkmItSP3EhNHEiiXj7745UdsdRw=
Subject key identifier: 54:49:2F:3B:F6:82:73:69:99:F5:A5:10:8D:96:15:8F:86:76:3A:51
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406949A4E987576DF6B9C530C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9921a291-33a0-3f77-9e2d-e253ee20ab5b.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:69:49:a4:e9:87:57:6d:f6:b9:c5:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=826f2b97-f7ae-4039-b3fd-ec87534329c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:42:5f:89:3d:b2:fb:96:9d:23:86:b9:2c:
89:36:1c:ea:ed:ad:93:e6:d5:99:66:65:f3:9c:36:
c8:88:b2:fc:89:1b:e5:91:c8:7e:68:53:31:ed:03:
d2:7d:7e:c9:1b:af:9f:3f:41:7f:83:23:0d:1b:be:
f2:54:54:df:01:d4:53:d0:f4:90:9e:e4:22:15:e2:
aa:b7:22:53:07:f2:80:68:c7:8e:6d:b7:db:15:12:
35:c5:3b:78:0a:d9:34:cb:d2:38:16:86:f5:ec:3b:
af:46:ab:77:7c:bb:5e:98:6f:c8:67:9f:25:65:d8:
88:6f:6f:13:7f:4f:4c:43:19:30:85:7c:d8:f4:41:
da:68:0e:bd:1a:23:71:2c:d3:24:c3:df:5e:a9:ae:
91:6d:b6:bb:f3:1c:76:bc:12:e4:27:d7:a6:44:76:
d7:92:dd:e5:e2:71:76:e2:b2:54:08:82:31:bb:b3:
db:9b:cd:78:bd:d2:57:59:05:19:e9:64:6c:f9:73:
8f:10:f2:8b:ec:d2:1d:62:e1:1b:bc:fc:31:c4:09:
af:e2:fb:a2:9a:aa:ab:4a:15:e5:ae:3b:28:68:ee:
1f:63:7e:ee:98:eb:1f:78:0b:45:e9:2f:81:43:f3:
70:dd:7a:36:ab:b5:67:e7:29:02:48:38:42:69:6c:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:2F:3B:F6:82:73:69:99:F5:A5:10:8D:96:15:8F:86:76:3A:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9921a291-33a0-3f77-9e2d-e253ee20ab5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:ea:58:e5:f7:0e:ba:79:7c:4f:94:a1:bb:4c:6f:6a:84:0e:
8d:6c:71:ed:73:be:20:32:07:13:bc:cf:cb:14:79:ed:61:46:
ed:de:f1:7f:2d:ff:2c:73:36:82:ac:d1:79:08:af:44:64:c5:
99:ec:65:2d:78:56:07:24:50:c8:ab:9d:58:97:ee:6d:4b:9d:
6e:2c:8e:61:de:ff:e6:14:95:09:e7:0b:74:71:05:30:7f:8c:
4d:f6:ff:ef:f8:8c:54:6e:5b:2e:e7:2e:84:96:ba:10:41:9f:
71:4b:fd:4a:d1:f5:44:d2:53:05:b5:b4:3a:4f:91:1d:80:59:
3f:d7:4f:3d:09:fd:80:d4:c6:d2:36:d1:ce:66:40:75:79:14:
51:30:01:4b:39:20:3c:9f:19:ef:50:79:48:9f:db:bb:81:ef:
45:c7:b1:c2:bf:71:21:69:96:4f:6e:7d:c5:f7:4e:06:6a:7b:
9f:5f:78:5d:20:5b:53:ee:a9:8a:77:a8:ad:4f:ed:ce:6d:9a:
4f:87:a8:a7:36:89:50:d0:92:a0:7d:b7:22:cf:a8:87:32:b3:
49:ab:87:84:47:e1:dc:ff:f1:39:9c:b4:d5:41:9f:a4:29:4a:
d3:70:aa:08:f5:06:e9:7e:e0:42:82:90:38:1c:03:f9:4c:25:
c5:cc:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:21 2023 by rpki-client on console-ams.rpki-client.org