Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/661d1bb9-a7e6-31f9-a348-580cf2ab7089.roa
File: 661d1bb9-a7e6-31f9-a348-580cf2ab7089.roa (raw, json)
Hash identifier: Vg7WRKRgy62DTr0HwMDvPfMkpGBf2KiOGsc403fO5zQ=
Subject key identifier: 3A:CB:1C:A5:E3:DB:64:63:1E:EE:54:18:CF:4C:4C:8E:25:5B:BA:3C
Certificate issuer: /CN=38ea7f62-6c1b-4aed-a47b-563784293050
Certificate serial: 010D0C9F4328584481EF62A152741FDD03704180
Authority key identifier: 78:74:37:24:2D:79:49:A3:A4:9A:CF:04:08:73:31:CF:5A:7F:68:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/661d1bb9-a7e6-31f9-a348-580cf2ab7089.roa
Signing time: Wed 10 Jan 2024 14:00:31 +0000
ROA not before: Wed 10 Jan 2024 14:00:31 +0000
ROA not after: Tue 09 Apr 2024 13:00:31 +0000
asID: 53503
IP address blocks: 96.8.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:81:ef:62:a1:52:74:1f:dd:03:70:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ea7f62-6c1b-4aed-a47b-563784293050
Validity
Not Before: Jan 10 14:00:31 2024 GMT
Not After : Apr 9 13:00:31 2024 GMT
Subject: CN=124d1960-342c-4666-a26c-d15ddfccd763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:b8:4a:a1:e1:49:68:06:9f:c6:d2:6c:90:
ec:ad:91:20:f6:26:e7:50:e2:61:02:91:3d:90:76:
75:b6:b4:b8:c2:2f:ed:0e:a2:af:2a:f8:1b:2a:c6:
bc:b4:c8:cc:8c:e4:d2:30:c9:bc:e2:87:3e:b9:13:
ea:43:4f:32:73:81:7a:19:4e:a7:ea:13:43:e9:79:
3f:f8:20:e0:78:81:33:25:fd:64:95:ca:50:08:93:
bf:b6:b3:12:01:50:8a:77:3a:b6:0f:b9:95:bf:44:
7a:92:15:68:76:5b:e1:5f:94:4c:fd:3d:6c:f2:60:
4a:47:a6:53:9a:30:d0:5e:ce:f6:33:d2:dd:81:15:
c7:5d:b8:3c:43:85:65:51:e4:2d:53:d8:b6:f2:19:
e2:31:5f:33:df:bf:21:35:91:28:00:3b:ef:af:eb:
4f:0e:6b:c3:c2:d9:dd:a0:7d:21:1b:eb:ba:b9:23:
90:d1:b2:f5:cf:7b:cf:6e:7b:80:9f:9b:43:2e:1e:
04:53:69:24:7c:41:39:38:fc:44:3b:d5:52:7a:b1:
c3:6c:8b:67:9c:98:07:97:45:0e:b1:f1:d9:79:e9:
cb:2c:c4:1a:2c:f0:b0:c7:f2:25:76:44:fe:03:a6:
c6:1f:dd:eb:2d:36:3a:6d:a6:a2:26:a4:f3:a1:28:
a8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CB:1C:A5:E3:DB:64:63:1E:EE:54:18:CF:4C:4C:8E:25:5B:BA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/661d1bb9-a7e6-31f9-a348-580cf2ab7089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050/38ea7f62-6c1b-4aed-a47b-563784293050.crl
X509v3 Authority Key Identifier:
keyid:78:74:37:24:2D:79:49:A3:A4:9A:CF:04:08:73:31:CF:5A:7F:68:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/38ea7f62-6c1b-4aed-a47b-563784293050.cer
sbgp-ipAddrBlock: critical
IPv4:
96.8.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c7:9e:9b:7a:b1:b1:88:17:dc:1f:fa:29:82:62:77:96:bc:
70:22:60:47:ad:2a:2e:0c:04:f8:f5:ff:91:52:ab:67:07:78:
c0:23:5e:c5:bc:57:6a:9a:51:c1:71:cd:3d:e9:6c:88:f9:dd:
1b:01:1a:cb:4b:1a:6c:53:76:56:3a:aa:10:93:15:83:a5:e3:
e1:02:28:ac:31:db:60:eb:cf:b2:26:b8:26:43:66:c6:22:b0:
45:8b:0a:65:91:5c:bd:c1:fc:02:1f:b5:32:c2:5e:a8:26:08:
0b:db:1d:ac:85:c6:d5:b7:8c:c4:13:db:8a:98:e7:bd:09:8f:
63:32:75:0f:11:9d:d5:8e:61:e3:73:f0:cb:b1:9b:87:b9:51:
95:09:2e:96:37:7c:05:44:6a:d9:cd:73:66:88:e3:1e:df:c4:
33:55:ed:76:dc:ae:f7:15:de:95:6c:c5:27:08:e2:cc:0a:1c:
d0:25:c9:0b:57:49:64:c0:51:b5:27:93:c6:95:58:65:f6:e9:
27:38:96:e6:fa:0c:4f:ca:e0:79:ba:91:d6:5e:70:6e:88:0f:
73:ab:23:50:7d:7a:85:48:23:46:de:12:36:be:d1:00:c8:6a:
dd:c5:f3:8c:fa:f1:04:46:3d:35:ab:11:75:c9:3a:24:ab:9d:
b5:fc:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 23:23:08 2024 by rpki-client on console-fra.rpki-client.org