Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/99a3f14a-29ef-3d38-9543-8064af2d13e3.roa
File: 99a3f14a-29ef-3d38-9543-8064af2d13e3.roa (raw, json)
Hash identifier: ukPISScO6HHRhWt4ob96LIy7cYyirE5MD9i7sMLm674=
Subject key identifier: 26:0C:03:0A:1D:F9:AB:63:B2:EB:C0:20:96:B0:DE:81:69:78:B8:ED
Certificate issuer: /CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
Certificate serial: 010D0C9F4328584413A92628EDB86496F483B380
Authority key identifier: D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/99a3f14a-29ef-3d38-9543-8064af2d13e3.roa
Signing time: Sat 02 Dec 2023 02:00:16 +0000
ROA not before: Sat 02 Dec 2023 02:00:16 +0000
ROA not after: Fri 01 Mar 2024 02:00:16 +0000
asID: 971
IP address blocks: 192.34.101.0/24 maxlen: 24
2604:fbc0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:13:a9:26:28:ed:b8:64:96:f4:83:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
Validity
Not Before: Dec 2 02:00:16 2023 GMT
Not After : Mar 1 02:00:16 2024 GMT
Subject: CN=55cb85e1-119d-4087-8333-cafcd11065c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:3f:42:30:37:91:3b:37:55:89:ef:a7:d4:
c6:3f:19:4b:ce:21:72:de:73:87:20:47:c1:88:ef:
05:74:19:4b:9c:f4:c0:81:93:c2:ce:9e:fb:f2:16:
2a:41:57:34:b8:57:d4:b5:35:fa:a6:f4:4c:97:3c:
0e:b2:4f:37:71:da:8d:da:bc:2b:d4:9f:21:e5:6c:
54:59:b5:8f:93:82:24:1d:94:61:8f:0c:81:8d:4e:
9b:e6:91:fc:40:f1:5c:89:a4:7b:66:7e:ea:02:f5:
61:b0:84:59:fc:da:2b:7e:79:10:82:61:84:5b:69:
25:84:ea:79:dc:47:06:84:2a:62:87:8c:c7:e8:d8:
1f:b8:fb:3a:78:f3:d0:b0:bb:fe:39:b0:f4:0f:0b:
02:e3:19:9b:01:65:f0:ac:90:36:85:58:d1:99:cc:
c4:c3:26:20:99:04:ee:5b:0b:3a:71:84:82:39:53:
4b:46:56:9e:45:e9:b0:ab:fa:e1:b7:ff:c8:54:ea:
82:56:58:f3:da:3f:c5:65:7c:1b:39:fc:8b:f2:51:
57:4f:b9:6a:92:e2:70:e2:16:17:29:94:ee:63:da:
c4:8f:b9:2a:e2:a7:33:27:15:07:96:57:eb:e2:8f:
ad:2b:75:53:62:a7:84:df:c7:42:f6:3d:56:15:24:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:03:0A:1D:F9:AB:63:B2:EB:C0:20:96:B0:DE:81:69:78:B8:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/99a3f14a-29ef-3d38-9543-8064af2d13e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/90e0e2fb-b856-4bab-b967-a8918ce1cb29.crl
X509v3 Authority Key Identifier:
keyid:D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.101.0/24
IPv6:
2604:fbc0:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:49:43:70:fb:55:bf:61:66:77:b6:e2:b2:c6:40:1e:da:e4:
1d:dc:57:45:a5:2e:da:0e:a1:79:0d:01:8b:d0:73:09:a6:06:
99:0b:b6:44:1f:72:96:b6:93:02:45:e5:79:b4:b5:bb:8f:ba:
38:47:da:4b:b7:80:45:f5:14:58:bb:74:59:a0:40:05:c7:18:
8a:5c:79:63:72:05:75:aa:94:c6:1b:2d:29:ba:2e:ed:08:94:
3f:69:6a:25:35:e6:dd:05:56:f8:fa:51:26:1c:a5:5f:11:c2:
45:5e:2e:cf:39:14:6c:80:da:d5:25:68:8c:3f:d4:64:f7:83:
4a:51:7a:f6:cb:b1:ac:04:f7:f6:d4:67:94:77:fb:08:11:d0:
4d:75:7f:b6:6d:07:7b:3e:35:d4:80:2c:bb:fd:56:f4:f8:b4:
f8:70:dd:fc:26:7f:67:f5:3b:a6:fe:3b:a0:6b:74:34:c5:ad:
76:42:cf:b1:0a:e9:db:7f:39:1b:58:21:c2:54:01:a7:db:d0:
7f:56:1a:92:4c:fd:e8:d0:eb:eb:b4:f0:bf:ba:06:38:20:ae:
db:fa:cd:ce:da:8a:5a:88:f0:e3:6f:ae:37:75:e8:95:8e:3e:
4e:04:8d:86:80:14:e9:08:70:bd:39:1f:f8:bb:4a:0a:7c:44:
f4:2e:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 21:25:07 2024 by rpki-client on console-fra.rpki-client.org