Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/6854e10c-22b4-381e-a117-d4ad5c15330f.roa
File: 6854e10c-22b4-381e-a117-d4ad5c15330f.roa (raw, json)
Hash identifier: Gf4IugQpvJnxSYr0W+wZV+kpIazvGuetsmTIX+TVh4I=
Subject key identifier: 60:9B:BC:D0:9F:F9:07:98:8B:7A:AF:34:7E:77:AB:BC:8C:7E:70:8C
Certificate issuer: /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Certificate serial: 010D0C9F432858442410C116E12CAA4EBF00AC00
Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/6854e10c-22b4-381e-a117-d4ad5c15330f.roa
Signing time: Thu 07 Dec 2023 23:02:00 +0000
ROA not before: Thu 07 Dec 2023 23:02:00 +0000
ROA not after: Wed 06 Mar 2024 23:02:00 +0000
asID: 931
IP address blocks: 66.118.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:10:c1:16:e1:2c:aa:4e:bf:00:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Validity
Not Before: Dec 7 23:02:00 2023 GMT
Not After : Mar 6 23:02:00 2024 GMT
Subject: CN=84a2d688-0bda-4f3c-8164-c3dddb9dca15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:d8:58:35:e2:6f:96:f2:97:e6:dc:01:9e:
f1:86:ab:1c:3c:6f:d5:e7:9d:73:79:a8:fb:f4:8d:
20:71:5d:26:81:45:09:b8:75:7d:fd:94:00:60:2a:
59:69:db:fc:26:8c:98:12:50:af:7d:13:aa:0b:45:
48:27:a3:59:93:27:b7:fd:45:ee:3e:3d:aa:10:15:
25:4e:b8:02:a7:e0:a0:85:57:d5:44:25:f8:02:83:
a7:5a:96:18:0c:22:51:ed:46:bc:d4:08:80:be:58:
68:a5:e4:1f:92:01:3a:c8:24:f6:e2:25:92:9d:55:
2b:99:f1:06:0f:74:f7:6e:f9:f0:fb:d1:8b:14:31:
43:62:fa:57:5e:f5:6b:02:69:5a:66:e6:48:75:64:
db:27:6a:d1:f7:20:e3:52:67:44:1e:a5:d7:c2:c0:
08:74:e1:76:eb:08:73:89:e7:46:4d:5a:99:02:f0:
cc:58:b8:9c:8c:b1:0c:da:2c:d0:c5:04:b4:e2:42:
ea:c0:5e:be:42:3f:4e:e3:d2:8c:f2:24:3e:68:78:
b5:50:77:80:0d:26:58:c3:a2:22:75:ed:d3:16:c1:
17:b2:10:18:11:e2:97:d5:74:c1:8a:f0:62:6b:57:
20:51:04:0d:d0:1a:32:bb:b5:03:26:95:2f:fb:8a:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:BC:D0:9F:F9:07:98:8B:7A:AF:34:7E:77:AB:BC:8C:7E:70:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/6854e10c-22b4-381e-a117-d4ad5c15330f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl
X509v3 Authority Key Identifier:
keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2e:59:48:4a:2d:1f:9a:59:42:25:7c:22:2f:64:80:2a:8e:
43:fa:88:0b:7c:08:25:5b:a1:3d:b7:ea:a3:47:c6:9d:46:99:
06:3d:79:9c:bd:9a:56:3c:1e:e2:9f:89:6c:17:cf:ad:5d:cc:
9c:84:da:93:bb:ca:b8:c7:04:7e:95:4f:24:e2:93:bf:82:51:
a9:e8:32:88:6d:7c:f2:5e:c4:95:b0:15:a2:c0:71:7b:b5:82:
6b:a2:73:de:25:d5:7a:86:89:2d:22:e0:ee:24:d1:4b:d3:05:
46:02:77:7d:b7:90:c9:e6:2c:d4:cd:dd:fe:9e:fa:12:1e:c0:
33:39:de:82:eb:b4:4f:28:dd:8f:57:8e:44:eb:1a:8c:e1:75:
69:64:9b:27:c1:07:66:a0:78:84:be:8f:f4:81:32:1a:19:bd:
b7:46:da:34:44:ab:bf:41:78:a8:af:64:73:c1:6c:7b:88:e8:
26:78:48:9b:48:9d:a0:34:b8:08:72:49:91:09:36:c8:94:a8:
a2:95:6b:6f:30:c3:c1:1e:ec:f2:9c:9d:5f:89:ad:fc:4d:d0:
3f:bd:4b:60:31:02:4a:40:0f:7a:a2:b9:4d:95:65:cb:9b:ea:
41:79:23:6d:a8:70:ed:fa:3c:54:a0:95:4e:5e:11:de:25:a7:
e9:16:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:26 2024 by rpki-client on console-ams.rpki-client.org