Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/f4560b97-b273-336e-9c35-13fbb0e8a799.roa
File: f4560b97-b273-336e-9c35-13fbb0e8a799.roa (raw, json)
Hash identifier: V/rfoibgSs8E+wkrygbu7zHb4Vj21DUaJtZySYHZjtE=
Subject key identifier: 10:60:74:F8:21:C3:88:F3:F6:F0:EC:0C:CA:71:78:E6:CA:8B:5A:08
Certificate issuer: /CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
Certificate serial: 010D0C9F4328584726D07EAB50612BBA17A05940
Authority key identifier: 9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/f4560b97-b273-336e-9c35-13fbb0e8a799.roa
Signing time: Mon 09 Sep 2024 01:00:31 +0000
ROA not before: Mon 09 Sep 2024 01:00:31 +0000
ROA not after: Sun 08 Dec 2024 02:00:31 +0000
asID: 14618
IP address blocks: 173.195.209.0/24 maxlen: 24
173.195.210.0/24 maxlen: 24
173.195.211.0/24 maxlen: 24
173.195.215.0/24 maxlen: 24
173.195.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:26:d0:7e:ab:50:61:2b:ba:17:a0:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
Validity
Not Before: Sep 9 01:00:31 2024 GMT
Not After : Dec 8 02:00:31 2024 GMT
Subject: CN=9a8184dd-edda-47ae-9298-bc194d6ca1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:69:58:36:f4:55:7b:db:34:bf:84:35:7e:
b4:28:32:db:87:65:27:49:95:7c:e6:e6:8a:c7:e9:
97:8e:05:d9:6b:3c:e4:be:28:b2:37:d4:84:7d:92:
62:5c:f0:52:55:eb:f0:c0:12:1d:7b:6c:43:5f:bb:
65:ff:0d:fc:ed:94:32:38:88:39:74:a3:ad:85:91:
29:23:d1:ce:38:4c:51:8a:ed:82:17:47:2b:90:a7:
84:83:28:9a:4d:8c:b5:50:a0:59:99:56:90:49:eb:
54:6b:78:c0:e0:56:ba:53:58:76:46:65:e0:6f:67:
b2:aa:64:a1:27:7a:b4:34:c3:85:d0:c2:7f:88:de:
6a:b3:d1:da:cd:97:9d:17:e5:6b:8e:be:d7:a1:ea:
0e:c5:c2:10:48:1a:4b:0e:0a:4d:96:b7:57:90:98:
97:38:59:ec:eb:85:cc:3b:1c:4a:62:01:51:0f:6f:
62:d7:d8:23:0a:b4:ae:86:15:9c:94:c6:ed:e9:25:
18:08:32:f2:56:f5:3d:98:8d:35:b5:13:1b:e0:50:
eb:0b:55:9d:f9:db:41:18:e9:b0:ff:89:81:a2:6a:
6f:8e:69:95:c5:7e:40:b0:a0:50:2e:d4:45:c7:45:
df:73:39:58:cf:0f:d1:f9:5a:29:7d:5e:65:ec:cf:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:74:F8:21:C3:88:F3:F6:F0:EC:0C:CA:71:78:E6:CA:8B:5A:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/f4560b97-b273-336e-9c35-13fbb0e8a799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl
X509v3 Authority Key Identifier:
keyid:9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.209.0-173.195.211.255
173.195.215.0-173.195.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:11:7d:3c:be:63:67:fe:e1:68:9e:86:a0:55:9d:c3:43:ea:
63:07:1a:43:5b:b0:e7:e4:72:be:86:eb:0b:d1:ab:9b:3a:af:
b1:0d:3b:d7:3c:e7:88:59:2a:d0:6e:95:87:bf:45:2c:47:fe:
35:8f:cc:c2:e0:bd:2e:01:95:2a:ed:ea:fb:c8:b6:e0:dd:1e:
4d:b7:bf:0f:20:c2:8a:f1:e8:ba:30:f6:c7:9f:c6:a9:2e:8c:
fb:f5:4a:b6:c0:11:91:c1:32:5b:24:f4:29:dc:ab:d5:25:20:
d7:3c:ec:6c:ef:5d:ae:7f:18:ac:52:8b:2b:26:41:60:93:db:
3f:94:c1:ec:aa:5d:55:0c:4f:cf:00:53:66:cc:6c:a8:ab:c7:
08:b2:61:5e:0f:fb:aa:0c:ef:f7:69:a2:1e:fd:59:7e:14:87:
08:b6:31:77:8d:62:df:e5:29:fb:6c:03:84:b9:fa:e5:78:65:
8a:96:06:00:36:18:45:e4:94:51:53:8b:82:30:06:3c:b4:f3:
6c:e0:f0:09:bb:be:90:53:9c:9d:c3:95:48:57:0a:db:e4:cb:
00:fd:43:78:7a:66:79:bb:40:6d:46:68:39:1e:f9:89:1a:e4:
ce:aa:7c:15:a8:e1:15:62:8d:1c:54:c5:09:2c:7e:36:f7:90:
82:1c:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:33:10 2024 by rpki-client on console-fra.rpki-client.org