Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d59cd86-28b3-3be5-89f9-ecd48ede04fe.roa
File: 9d59cd86-28b3-3be5-89f9-ecd48ede04fe.roa (raw, json)
Hash identifier: YUJTLn9pU8Opqs2Ig5UW3MePL0tcUdgbZgGJbO7imnA=
Subject key identifier: 6E:85:08:7C:65:45:74:B9:48:03:9C:30:6D:13:0F:88:EF:88:FF:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AD652FED233C90FFF7188980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d59cd86-28b3-3be5-89f9-ecd48ede04fe.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 68.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:65:2f:ed:23:3c:90:ff:f7:18:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=efaeddb8-9485-41ad-910e-02a09d5f97b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:71:98:2a:60:17:1b:bb:20:0f:1d:56:95:
c4:0b:ea:8d:05:f0:2a:28:ce:34:5e:11:82:5c:60:
d2:f7:1a:b7:86:74:88:62:38:0b:23:b4:43:a8:dd:
1e:49:6b:8d:f4:39:ac:90:cb:5f:6d:ae:93:b9:45:
cc:87:b1:17:03:b8:e5:7a:34:d8:60:8a:58:4a:a3:
d4:27:d1:8e:93:d3:d7:ac:f4:c9:8b:12:37:63:38:
48:b8:93:27:d2:1e:f6:89:c0:ef:f4:a9:97:73:db:
83:94:8e:66:be:cd:67:92:55:18:ce:9a:73:81:b5:
85:2f:55:8d:7d:d1:87:95:4d:8b:f0:b8:0d:3f:9b:
0c:e8:2f:b5:30:83:46:69:6f:c5:48:17:f4:20:ad:
92:6d:04:8e:d8:ef:47:91:d1:e0:d2:77:d5:ea:27:
d6:c9:24:f4:02:8e:78:ac:65:a8:b4:6e:d8:60:1b:
9f:02:dc:20:42:96:3a:e1:81:a5:89:43:6e:43:be:
65:97:64:a9:5e:fd:ba:ca:34:00:72:ee:dd:4d:5d:
cf:2c:9c:1a:9d:4d:7c:c3:a3:d1:7b:a1:5c:be:4a:
00:77:c4:87:ba:b1:38:a8:93:57:d4:56:ee:eb:b8:
77:4d:81:5f:60:f3:26:a8:6a:16:b2:44:1e:19:5b:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:08:7C:65:45:74:B9:48:03:9C:30:6D:13:0F:88:EF:88:FF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d59cd86-28b3-3be5-89f9-ecd48ede04fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:c3:9f:d0:07:69:7f:51:ef:b8:c2:d6:8a:9c:6f:62:20:64:
68:61:eb:bd:5e:41:75:8f:66:60:94:34:1a:9a:21:0e:68:5f:
7d:a8:ac:96:06:e9:d8:da:43:e6:ec:16:cd:91:48:d1:80:08:
a5:07:7d:6e:16:db:64:60:8f:b9:14:0b:d2:00:a4:ce:61:d7:
60:58:dc:05:96:7e:89:ae:84:33:d5:72:f0:93:22:d2:c1:bc:
4c:2b:66:a6:84:8a:5c:84:69:65:99:dc:5f:e8:41:ca:bd:8f:
8a:8d:8c:db:59:6b:e6:de:55:b1:5e:1b:c4:95:03:7f:e7:dd:
81:09:71:a5:39:fd:c9:1a:6f:cc:1c:51:b1:ee:07:4e:57:e7:
69:75:f0:f0:75:25:b2:01:b3:88:00:49:f0:ae:9d:b7:7a:8d:
67:97:fe:f0:7c:89:d0:e1:4b:34:62:f9:e0:cd:7e:01:ba:c3:
7a:ed:e0:95:e5:c3:b8:f9:d1:4f:28:35:aa:c0:dc:c6:6a:be:
0f:23:72:74:97:9f:2a:62:9d:83:6f:d7:21:06:e3:91:fa:e7:
bd:c6:9a:b3:f0:80:6a:03:75:37:f3:b8:b6:99:37:eb:b3:aa:
8b:ab:9f:d0:d8:d3:07:a5:40:62:84:29:e6:29:f3:9f:45:f7:
8c:6f:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:35 2023 by rpki-client on console-fra.rpki-client.org