Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e461f23e-3476-3e07-a653-dcdd0f3aa8a5.roa
File: e461f23e-3476-3e07-a653-dcdd0f3aa8a5.roa (raw, json)
Hash identifier: LK3P/yGDKh+meIjv3CxKaRbMYvKtfPapqBhtYFgISUg=
Subject key identifier: 27:87:96:5D:4C:AE:D1:57:FE:8F:4F:2B:55:24:EE:3A:69:F2:BC:CE
Certificate issuer: /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Certificate serial: 010D0C9F4328584445E97326FC78868231458C00
Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e461f23e-3476-3e07-a653-dcdd0f3aa8a5.roa
Signing time: Wed 20 Dec 2023 02:00:15 +0000
ROA not before: Wed 20 Dec 2023 02:00:15 +0000
ROA not after: Tue 19 Mar 2024 01:00:15 +0000
asID: 931
IP address blocks: 128.254.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:45:e9:73:26:fc:78:86:82:31:45:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Validity
Not Before: Dec 20 02:00:15 2023 GMT
Not After : Mar 19 01:00:15 2024 GMT
Subject: CN=0481990a-b3c2-4cc8-a995-dd2131d2a843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:03:78:e8:c7:c6:de:c1:8c:6d:1f:73:4d:
21:51:84:e0:29:ca:70:f5:3a:60:d0:16:57:e4:c9:
55:5b:f3:1a:20:a2:9a:51:7d:8c:70:7d:b8:eb:52:
9c:7c:5f:30:13:e0:f4:aa:80:7e:39:bd:a3:13:96:
a5:7b:0a:7e:ae:4b:cf:80:a8:78:e0:d8:23:c2:ec:
f0:91:0b:61:fa:70:36:35:9d:21:b4:b0:a4:e2:b0:
f2:4d:98:a7:45:64:a9:55:51:0d:72:45:95:de:16:
eb:42:9c:5f:0c:98:51:6e:49:1c:33:d1:ef:d1:13:
17:4e:80:a2:7b:35:eb:62:1c:63:3c:14:11:0f:f9:
da:04:55:81:f7:a5:b0:0c:0c:ae:99:95:8f:a8:c5:
f0:37:b1:b6:f6:d6:4e:d0:08:d0:9c:b5:90:49:0b:
04:3a:cb:ec:c7:85:5a:f2:b9:48:09:17:93:89:53:
7d:08:23:5c:bd:6e:b6:10:66:d8:fa:a3:96:b5:70:
af:5e:87:38:3d:1f:78:7d:38:bd:f9:c0:83:7a:c2:
cd:fe:24:39:e8:5d:e9:bc:e8:a9:12:d2:e9:b8:c4:
29:d3:ea:a0:87:87:a7:54:b9:47:cf:1d:23:d6:8a:
71:54:70:5c:fe:6c:47:fa:ad:6b:1d:0a:09:8d:c0:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:96:5D:4C:AE:D1:57:FE:8F:4F:2B:55:24:EE:3A:69:F2:BC:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/e461f23e-3476-3e07-a653-dcdd0f3aa8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl
X509v3 Authority Key Identifier:
keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:48:e2:01:a0:18:27:1c:cd:77:50:2c:28:b0:98:58:c4:64:
cd:56:7e:c0:41:25:b8:78:dd:0f:41:1a:57:06:07:7f:d9:81:
11:0c:6a:b2:57:3e:c4:e3:0c:b2:ad:98:2e:80:fb:d7:d8:20:
cc:3d:19:37:94:05:1d:84:7b:29:10:ae:78:4a:66:db:15:3a:
fd:4c:ee:14:bb:1f:c4:ea:49:d9:0b:50:1d:00:ab:aa:ae:12:
ad:6a:04:23:14:4d:42:53:29:f9:82:87:69:87:4a:ec:fb:d3:
07:0d:50:94:8a:4a:4b:75:88:f1:de:da:4f:5b:00:51:b5:c2:
b9:b5:67:bc:81:a1:12:be:ad:6d:98:55:a5:dd:08:af:c2:cf:
b5:69:3c:70:80:76:aa:a1:c6:9c:a5:0a:1f:8a:4d:10:23:2c:
2c:50:b9:be:41:7d:84:fd:41:bb:ac:e2:03:e4:a7:8c:93:ce:
94:46:24:be:4f:fc:dc:f7:b4:5f:3b:f1:21:a2:40:70:3d:9f:
9f:70:9f:63:36:21:e8:1c:f5:cc:80:15:aa:a0:91:4d:2a:37:
6b:85:fd:32:15:20:5b:cf:9e:19:cf:ff:4b:8d:87:4a:af:bb:
b5:e2:51:2c:72:d4:ae:5d:08:8c:be:a3:51:3b:64:b9:12:b7:
0a:76:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:26 2024 by rpki-client on console-ams.rpki-client.org