Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/f252121e-7d56-3ce9-8745-3bcb3c1a4c5a.roa
File: f252121e-7d56-3ce9-8745-3bcb3c1a4c5a.roa (raw, json)
Hash identifier: gpfNtuJRP94zvJ/E2TzwG5Cr7gFe8sa0UgYaa8qIfq8=
Subject key identifier: B2:BF:B1:7D:94:92:71:2C:32:19:91:23:BA:2C:09:C4:80:49:2E:20
Certificate issuer: /CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Certificate serial: 010D0C9F4328584424693C45D4AE4ACF96E45300
Authority key identifier: 82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/f252121e-7d56-3ce9-8745-3bcb3c1a4c5a.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 8018
IP address blocks: 162.251.168.0/24 maxlen: 24
162.251.169.0/24 maxlen: 24
162.251.170.0/24 maxlen: 24
162.251.171.0/24 maxlen: 24
172.82.36.0/22 maxlen: 22
2602:fec5:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:3c:45:d4:ae:4a:cf:96:e4:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=82550184-c654-4287-8652-a4f28a1a2b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:dc:36:b3:60:62:e4:63:7c:e7:b3:85:ec:
15:dc:f2:e1:48:33:23:b0:73:e1:fa:dc:05:9e:c3:
7d:29:4d:b7:07:32:15:f8:24:0c:a0:8f:ce:b1:06:
2e:55:4b:78:e7:85:52:f6:c8:07:73:8d:6a:09:0d:
97:fd:d9:d2:26:0a:c5:04:da:a9:b4:02:25:f7:4f:
ce:2d:eb:0f:d8:7f:24:8a:49:b3:b2:3b:5e:c8:4f:
53:e7:3b:22:92:b3:8a:eb:14:a8:cb:74:4b:24:14:
14:02:78:5e:39:e8:8d:13:2d:0b:9b:cc:39:5e:cb:
de:00:56:29:35:50:ac:8d:1e:93:85:2d:6e:0d:9f:
73:56:99:18:e0:c5:82:07:10:b5:83:b9:dc:02:d0:
43:4d:93:c9:de:81:af:2d:e8:7a:b0:0a:a5:01:e7:
85:b7:93:54:04:98:87:f6:a3:58:b8:25:60:0a:8c:
4a:44:29:87:3f:8d:08:c6:af:4f:96:a1:86:51:6f:
e6:d5:f3:b0:19:78:3b:cf:7c:d7:f7:cc:24:c4:f3:
21:ce:af:02:e0:af:4b:68:20:21:16:74:c8:15:f3:
f8:d5:a4:29:97:44:48:9f:e9:f6:51:49:fe:28:62:
d1:45:b3:e5:83:1c:24:60:24:62:c5:fb:ec:05:ad:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:B1:7D:94:92:71:2C:32:19:91:23:BA:2C:09:C4:80:49:2E:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/f252121e-7d56-3ce9-8745-3bcb3c1a4c5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/b93a83dc-e910-416f-88d0-d8d64914eb02.crl
X509v3 Authority Key Identifier:
keyid:82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.168.0/22
172.82.36.0/22
IPv6:
2602:fec5:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:22:9d:9b:54:e5:29:36:23:41:3c:fd:8a:c6:d8:eb:b0:c6:
e7:14:72:c4:91:68:85:ae:79:9d:74:23:b7:cd:38:82:d2:52:
ef:96:76:2a:8e:39:58:b1:16:6b:71:90:7c:3c:38:f0:1c:08:
25:34:ac:d6:de:11:65:7c:c7:fb:f5:26:f5:34:f8:7e:4d:58:
0e:d2:d0:9e:b4:5c:9c:0c:cb:07:90:c8:0b:88:e2:d6:06:8e:
bc:99:e7:86:3d:32:ef:d7:4e:e4:6c:b2:01:c8:d2:b2:7c:4b:
97:b4:87:d7:20:9f:13:c2:3a:8d:8f:68:de:39:05:33:08:26:
bc:dc:2c:ce:06:ca:db:fa:67:bd:38:50:be:29:f7:a3:02:95:
f7:c3:19:16:9b:cd:4b:7a:7c:b0:6c:9d:b2:94:52:2a:dd:47:
62:2c:1f:18:72:6d:2d:aa:22:5e:8d:8e:14:52:55:8c:61:81:
a7:9c:38:a7:67:98:4e:a3:2c:79:fb:39:31:57:3d:54:d0:a8:
c0:fb:b3:f9:f5:94:11:d6:0a:81:33:c4:b5:45:76:48:d5:d5:
75:19:da:78:77:75:6f:de:3a:e3:c9:d2:f5:b6:80:94:67:de:
38:aa:e7:75:8d:37:5b:05:c3:bd:6a:d5:14:99:66:5e:21:fb:
79:0b:c4:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 21 21:59:54 2024 by rpki-client on console-ams.rpki-client.org