Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f429191e-b9ea-320c-8ab0-61d8fb3cd263.roa
File: f429191e-b9ea-320c-8ab0-61d8fb3cd263.roa (raw, json)
Hash identifier: Lcu63raUHSxmqqKRMy659GrCdHWVnSDVHeRSGpZKoLI=
Subject key identifier: 65:EF:5C:C9:D2:FC:0E:1C:74:84:39:A0:34:7F:73:AB:D2:14:2D:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C8FDEF6811ECDF266DDE1360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f429191e-b9ea-320c-8ab0-61d8fb3cd263.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c8:fd:ef:68:11:ec:df:26:6d:de:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=551effd1-75fd-41c4-9f63-cdaf5980e49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:e0:b8:b0:79:c2:da:9c:17:62:df:48:81:
8f:18:15:84:37:2e:9b:1e:64:b8:e5:3e:d1:b0:c1:
d7:03:08:41:26:aa:8e:88:8b:cc:b9:d3:c5:76:65:
2f:16:b8:13:91:39:ea:07:cf:a9:3e:b7:22:8d:64:
15:d7:a4:b8:8a:08:a1:4e:77:65:03:7b:c8:aa:58:
7b:66:fd:e1:ed:9c:78:02:ab:d3:4a:d2:eb:57:22:
c9:45:e8:cc:2a:2d:97:7f:7a:49:62:5b:1f:53:32:
1b:cd:4e:0f:f4:06:ac:30:3f:f8:66:53:6f:e8:ad:
70:fd:7a:1e:c9:fa:59:7b:6b:f5:95:99:dc:4c:4d:
d0:9c:39:35:60:28:51:5b:2c:60:a3:9c:4a:dc:54:
77:b0:4d:d0:a3:e3:82:d9:a2:08:58:f6:db:40:f5:
28:84:d5:d3:e0:78:1c:31:e5:81:2f:f9:f2:4b:43:
7f:4f:e8:b4:36:76:37:0e:67:bb:b1:f9:44:47:80:
66:72:a0:ee:f5:3c:9d:f2:d6:1a:ed:b7:9e:8d:44:
bb:21:36:7d:15:3b:04:70:fa:a2:50:da:36:38:d4:
fb:e9:be:2f:51:9c:02:f0:23:54:b9:32:56:4b:30:
63:e0:9b:75:dc:b0:b3:56:6e:50:06:fa:37:8f:9b:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EF:5C:C9:D2:FC:0E:1C:74:84:39:A0:34:7F:73:AB:D2:14:2D:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f429191e-b9ea-320c-8ab0-61d8fb3cd263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:5c:3e:91:39:76:a4:a8:88:ed:29:15:3d:d5:ee:60:4f:9e:
84:37:e5:e9:6a:5b:79:aa:53:28:71:1c:d7:83:99:02:3b:c4:
1c:61:29:b0:81:b0:29:8d:97:d7:f6:f6:5e:2f:8c:f7:51:d8:
ee:ff:80:13:8a:24:ae:11:fe:63:ea:5a:5e:18:3c:89:d6:6d:
7c:90:50:ed:0f:c4:d4:99:fe:64:5d:ab:1d:15:d2:82:87:fe:
45:f9:f5:14:ec:05:d4:e3:ea:f4:d9:54:86:ff:72:81:52:f9:
f0:cb:6c:e8:c3:6a:0f:22:40:5f:97:80:70:a2:f5:34:5c:66:
77:a6:11:99:b2:a1:f6:c6:5b:62:f3:ea:c7:d8:c3:64:9d:4c:
3a:3b:ef:79:33:65:1b:59:86:da:e0:c6:59:76:83:da:c6:de:
35:0c:c2:84:29:77:d9:f1:9a:f2:5f:e4:34:c0:17:69:c0:6e:
0b:fb:d8:eb:2e:28:5a:7f:2f:56:18:da:f6:63:4c:02:6d:d8:
d9:f8:0b:51:0c:e4:1d:3d:79:6f:ab:fc:24:80:de:4c:7d:f9:
b3:29:12:33:cb:8a:4e:50:89:5a:11:52:4e:94:70:54:bd:3f:
c0:e5:6b:8f:3f:65:1a:da:7e:38:d5:95:c1:1d:9f:ff:34:29:
cf:5d:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:35 2023 by rpki-client on console-ams.rpki-client.org