Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb04676b-d476-32e6-8462-33d010834080.roa
File: cb04676b-d476-32e6-8462-33d010834080.roa (raw, json)
Hash identifier: /zn5BYAdXvWfPRsOuitnTD8DlMhN91RT9zMNVlyMlDA=
Subject key identifier: 7E:6A:2A:32:00:6F:4D:EB:97:C3:33:08:AA:C3:0A:93:73:64:27:A1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840926885F689DB32957CCD6B10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb04676b-d476-32e6-8462-33d010834080.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.150.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:92:68:85:f6:89:db:32:95:7c:cd:6b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=51d23284-95dd-4fb5-b083-92efb6376042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:68:3c:d1:ac:86:cc:7a:24:14:b4:ba:9d:
1e:92:ea:d8:25:4d:fa:82:7d:e3:38:af:22:ab:03:
ba:25:2b:21:29:eb:96:0b:25:c5:d2:54:33:be:e8:
b6:ae:1b:15:5c:84:37:3d:12:60:38:af:d7:92:f9:
49:5c:0a:5e:07:83:61:fd:b0:15:95:0b:83:a4:96:
65:aa:cd:c7:09:e3:1f:65:4f:64:ea:f0:0c:92:39:
78:65:c3:dc:00:02:64:af:ee:05:c3:31:50:81:2a:
72:06:2f:03:42:f4:0e:c1:bf:5f:1e:a1:6d:51:b5:
09:e4:ab:30:3e:8f:8d:20:7f:8f:01:d3:fe:c2:9d:
a1:6b:4e:bf:83:1e:1a:33:cd:7d:de:70:1e:b5:50:
33:e5:bd:93:9f:34:94:1a:67:76:cc:7b:8f:61:a6:
de:1a:db:9c:2d:53:90:23:48:79:85:6c:16:8d:19:
45:8f:40:71:76:f4:d0:d6:fa:30:a1:7a:1c:e9:96:
21:98:6d:05:2c:66:dc:dd:c6:2c:79:20:33:b8:1d:
24:ce:26:8b:38:be:5b:d6:2a:db:37:37:f8:43:f1:
24:43:f7:53:b0:3b:a0:d0:1c:e4:15:e2:26:3b:5d:
fa:43:b2:6d:22:b1:7c:fd:f8:56:93:b9:09:93:73:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6A:2A:32:00:6F:4D:EB:97:C3:33:08:AA:C3:0A:93:73:64:27:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb04676b-d476-32e6-8462-33d010834080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.150.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:96:7d:95:7d:77:01:9e:0f:4b:d0:3a:ee:96:51:91:97:78:
f4:6b:a4:49:91:9f:a8:4c:e6:ad:3d:18:66:ed:3a:dc:75:a4:
2f:a7:84:ff:55:5c:ba:5a:76:97:a1:24:22:0f:ca:9a:57:1d:
7d:12:e3:2e:48:44:e4:d1:16:a5:d0:75:77:d7:8e:1d:29:f1:
a2:f9:d1:34:a6:5a:1a:88:e7:af:1f:8f:e6:41:a2:b3:db:2d:
ec:57:1d:7b:22:ce:ba:5d:06:c5:f6:65:d0:ee:c9:d4:f9:ae:
17:ce:4a:d4:87:e0:f9:2e:f6:3b:e0:55:35:63:eb:ea:d3:27:
9b:89:9c:b1:30:68:d9:87:a6:78:44:19:93:da:26:f5:8e:a6:
28:97:c8:c4:0c:82:ae:6f:89:c8:b5:f2:78:eb:7a:f1:3f:4d:
93:1e:5a:49:fb:66:c4:36:36:b4:77:87:8a:5d:67:5e:61:b9:
a8:9e:28:9f:0a:df:25:e4:dc:3e:8d:f2:a5:23:10:39:e5:2a:
3f:e4:50:81:6c:ab:5e:51:7a:d7:2a:c4:78:7b:8c:26:c2:cf:
f2:6a:91:27:75:a4:23:0b:b0:9a:76:18:10:39:ca:c8:24:94:
a5:f0:bc:1d:b5:0a:65:ca:e5:74:ff:3d:26:b1:b8:6f:15:23:
9b:96:77:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:11 2023 by rpki-client on console-fra.rpki-client.org