Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a0c5a95c-5f69-366f-8475-9f6a5570447a.roa
File: a0c5a95c-5f69-366f-8475-9f6a5570447a.roa (raw, json)
Hash identifier: sTOjpDPeu15hyGxo8BXehZVtdiAXgCnBi2Ec1ICrv8c=
Subject key identifier: CC:8D:FB:AB:5D:68:08:15:BB:EF:86:CA:72:65:62:FD:C3:86:EA:AC
Certificate issuer: /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial: 010D0C9F4328583CBD94D5B68D180A0E549DFB80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a0c5a95c-5f69-366f-8475-9f6a5570447a.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 72.21.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:94:d5:b6:8d:18:0a:0e:54:9d:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=8f01df6e-1eb2-4952-9438-f392ce9fc78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:b4:b5:0c:e5:bd:3d:f6:bd:92:fc:43:91:
9f:c1:d2:73:bc:d3:a0:9f:7e:d9:fc:44:ee:09:0e:
91:6d:0a:a2:10:47:14:23:96:72:fe:da:38:87:43:
23:06:a8:0d:dc:a7:73:05:45:5d:e0:64:a7:79:2b:
5d:c6:d0:c7:fa:d5:79:8e:d1:5b:e6:c2:11:20:14:
55:f7:4b:8d:0c:28:72:09:b5:50:67:a6:2a:27:4f:
82:37:ec:e1:80:70:4e:ef:07:6d:0d:84:05:7b:d5:
39:b6:d1:76:f0:14:00:2f:6b:3a:22:fe:a1:9a:89:
9a:70:2e:43:62:b8:45:33:3e:d3:86:43:b5:1d:9f:
b1:39:6e:a5:da:e7:9f:4c:87:e2:4e:45:f3:ad:ce:
ae:f6:56:94:b4:91:65:61:80:7d:e0:b2:3e:9d:61:
7a:24:fa:21:b7:f4:2f:a6:26:99:91:23:28:8c:e1:
2d:a8:08:01:56:71:2a:95:46:ed:be:c3:11:05:f4:
38:c7:ec:6b:c0:d9:e3:c5:b5:ef:df:fa:b4:95:2b:
fd:a5:74:08:02:6a:3e:ee:3c:05:4b:60:09:d4:14:
8b:ac:89:eb:75:b7:e4:cd:95:bd:15:96:17:70:99:
4d:3c:d6:c3:db:ad:70:63:30:b2:63:3c:bb:b4:b8:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:FB:AB:5D:68:08:15:BB:EF:86:CA:72:65:62:FD:C3:86:EA:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a0c5a95c-5f69-366f-8475-9f6a5570447a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl
X509v3 Authority Key Identifier:
keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:b2:a1:d3:79:54:c8:1d:e8:6e:97:a1:14:83:9b:a4:a9:d2:
16:e2:bb:70:b8:25:b7:fb:00:f4:15:00:29:1d:b9:c8:52:3a:
a0:9f:08:8a:1b:67:26:b6:10:2e:ce:d0:d6:c5:9a:9e:fe:26:
1a:20:1e:bd:db:61:62:45:89:74:e1:15:47:b7:53:e9:ee:3e:
a0:28:ac:bd:50:65:72:99:ed:30:39:7e:93:4b:4b:1d:76:b0:
61:4b:fa:5b:58:6c:15:9a:e1:2b:c8:7a:3c:dc:c2:12:7d:ca:
14:be:11:1a:70:58:df:ee:52:b1:de:12:bd:b5:ec:36:f5:4d:
59:af:67:bb:16:48:57:0e:32:06:73:fc:3c:12:e0:5a:d3:51:
c0:c3:89:20:16:d6:57:83:e2:ff:db:66:e5:67:a6:81:03:d8:
4e:2a:fe:4b:3a:4c:1a:64:ff:a9:ce:85:9e:39:2f:6a:40:7a:
0b:69:83:06:f6:83:22:4a:c4:4e:1a:61:28:f4:72:cd:c1:fc:
39:0c:80:75:b2:6e:80:9e:d7:b0:fb:e7:a4:62:8e:93:c3:8c:
30:38:5d:e5:bf:36:71:a0:3d:82:cf:26:29:de:26:98:13:f1:
db:0d:56:c7:5b:5b:a7:1a:99:4c:10:6d:62:c8:99:71:1c:01:
e7:05:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:19 2023 by rpki-client on console-ams.rpki-client.org