Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa
File: baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa (raw, json)
Hash identifier: YaK9e6MMrew340NfCvGBdUrHX+WxfWy9IQxQjKnzAkA=
Subject key identifier: E7:CC:7E:DD:5C:C1:B5:A5:F0:3E:83:BD:5D:BC:72:4F:54:72:41:56
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409057FB8E72C221DFE5010100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:57:fb:8e:72:c2:21:df:e5:01:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=4be4d688-9d7a-46b6-8e22-f75addf70104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:b2:2d:34:a6:ef:67:cb:1e:6f:97:92:ff:
d0:6a:e5:a9:85:d9:c6:3b:cb:a9:2c:98:a2:f4:20:
e0:4f:0d:b8:2c:c7:19:b4:bb:57:41:ca:a7:34:63:
42:7b:21:8b:6b:14:eb:ad:b2:13:72:d4:a3:2e:77:
66:26:6b:14:c3:5f:2d:fa:61:cd:77:57:05:31:6d:
21:ce:48:07:f9:bb:02:46:73:f9:dd:df:48:14:54:
6f:20:3d:f3:ed:c9:9f:06:ff:20:df:ea:97:7a:08:
41:b3:0e:42:87:13:65:28:39:c3:21:15:78:a6:72:
8b:4c:8b:61:50:61:5b:8a:be:42:60:ba:fe:c8:52:
be:d5:70:45:b7:52:1e:ff:58:84:db:8a:a7:4c:26:
06:3e:d5:75:da:0e:0b:79:e9:2a:6b:1e:d3:3a:5d:
66:20:01:be:96:dd:64:b5:68:be:24:52:c5:38:0e:
20:83:97:06:de:3b:27:75:2f:68:23:97:96:6f:ba:
ab:9e:fe:1f:2c:f9:c3:0c:20:27:dc:86:14:48:3c:
18:79:c8:c6:e5:3f:31:40:7b:95:91:db:3f:b0:1a:
a2:41:d1:65:cb:b0:4d:ae:c6:f6:fb:4c:8c:8e:17:
35:a2:4d:57:86:16:88:dc:2e:56:ca:f7:ff:43:ef:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:7E:DD:5C:C1:B5:A5:F0:3E:83:BD:5D:BC:72:4F:54:72:41:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baea3c8d-c11a-3bb5-9aaf-0924be54ec80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ad:13:c7:eb:b1:04:e6:68:65:f6:44:45:bb:ee:c1:22:96:
17:4e:5a:9e:55:ba:d0:d7:f9:e9:87:86:93:79:a5:21:ef:e9:
b8:fd:7f:96:32:38:19:ee:53:34:02:22:c3:49:34:7e:0a:82:
b0:54:33:0e:aa:c4:ff:d7:3a:0d:93:03:1f:ac:b7:3a:e7:4b:
c3:b4:42:49:bb:a3:e5:d0:56:56:4b:4c:43:a1:48:8a:17:fa:
26:44:a7:9b:af:f5:97:ff:f0:81:21:a9:fe:5f:62:e0:75:a5:
d9:73:bc:e0:f4:84:98:ee:b2:ec:ff:15:e3:34:03:77:c8:a5:
e4:90:41:36:a2:64:20:cf:d8:7e:21:24:08:32:eb:bf:fb:ca:
a7:51:52:a6:46:f5:20:58:ae:07:d5:44:50:55:91:87:d5:f4:
b7:73:f4:6f:fb:4a:a0:d3:77:42:c2:10:25:13:ff:81:fe:81:
3e:49:22:95:76:cb:fa:be:3d:48:fd:61:e3:b8:b4:59:b7:9b:
e0:7a:51:eb:63:ba:e9:95:8c:35:3a:db:a3:7a:88:9f:c2:a9:
5a:ee:26:c0:c3:2c:1f:7b:88:60:66:62:ff:c5:13:93:22:80:
dc:58:d4:db:c9:74:9b:6f:b3:b9:80:f3:da:33:5b:c1:f5:09:
a5:c2:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:55:25 2024 by rpki-client on console-fra.rpki-client.org