Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/447e9c46-8439-373e-8243-fe67fcf39b6e.roa
File: 447e9c46-8439-373e-8243-fe67fcf39b6e.roa (raw, json)
Hash identifier: gTyUf03NnC54sIMOmBt8i452Q3XotAOICbe3lwt3Xko=
Subject key identifier: 2F:49:C0:2E:7C:EA:C3:69:9C:17:43:25:DD:D2:56:C3:AC:FC:AE:4F
Certificate issuer: /CN=aacd3976-025b-42e3-9558-71c5a795726e
Certificate serial: 010D0C9F4328583EC3C188703B9BD07674247E00
Authority key identifier: 99:B6:CC:0E:1F:42:D2:73:88:0F:E8:A5:47:C8:E5:EB:B6:1E:91:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/447e9c46-8439-373e-8243-fe67fcf39b6e.roa
Signing time: Mon 28 Mar 2022 20:45:35 +0000
ROA not before: Mon 28 Mar 2022 20:45:35 +0000
ROA not after: Mon 03 Nov 2031 05:00:00 +0000
asID: 6653
IP address blocks: 162.219.204.0/22 maxlen: 24
208.64.76.0/22 maxlen: 24
208.85.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c3:c1:88:70:3b:9b:d0:76:74:24:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aacd3976-025b-42e3-9558-71c5a795726e
Validity
Not Before: Mar 28 20:45:35 2022 GMT
Not After : Nov 3 05:00:00 2031 GMT
Subject: CN=87453c9e-960f-4e1f-9d77-e807f1b4e695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:68:3e:a6:b3:c5:8c:f6:6c:17:87:68:8b:
fc:92:95:5f:d0:06:38:ef:06:71:8b:39:d5:86:45:
45:86:f9:12:42:cb:bb:c8:17:db:0c:57:26:d5:9b:
0a:c4:2f:71:28:04:36:b2:ff:50:a6:67:d7:1e:d6:
52:5c:82:42:18:af:df:91:0a:e1:c2:8b:ea:f9:c0:
9c:b5:51:4a:c8:5b:26:ee:5c:5e:f9:8b:4d:6f:b1:
dc:7c:cc:7f:6b:de:48:cb:db:dc:45:e6:3c:e9:7c:
62:9d:f4:9c:ee:b8:8a:65:0c:5d:0d:06:6d:4b:24:
e2:f3:68:3b:e2:89:5e:e7:68:38:99:6d:56:4d:8c:
d1:1c:f4:9d:24:0a:ad:d6:70:72:51:e8:e9:85:32:
34:f7:8b:d5:d4:c2:6b:5a:89:3f:81:a9:b7:63:cb:
22:30:80:97:d9:f7:5c:95:70:8a:ef:fd:97:5c:fb:
d8:bc:85:18:7e:c8:d3:e7:51:50:34:a4:11:5b:83:
d5:df:83:01:1f:f7:95:d0:11:53:1a:42:a6:4a:68:
14:f4:6d:20:24:4a:3f:33:96:8a:2c:a8:bd:4e:1a:
6b:3d:ac:81:f8:ce:6b:9a:f5:af:7c:b4:50:c9:fc:
90:e7:57:b3:c7:59:1a:af:e3:cb:1c:b1:eb:ca:7e:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:C0:2E:7C:EA:C3:69:9C:17:43:25:DD:D2:56:C3:AC:FC:AE:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/447e9c46-8439-373e-8243-fe67fcf39b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/aacd3976-025b-42e3-9558-71c5a795726e.crl
X509v3 Authority Key Identifier:
keyid:99:B6:CC:0E:1F:42:D2:73:88:0F:E8:A5:47:C8:E5:EB:B6:1E:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.219.204.0/22
208.64.76.0/22
208.85.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:f8:ee:de:94:f6:cc:7a:05:d7:77:8c:f9:8f:08:d1:f8:25:
86:c0:2f:1a:83:52:91:20:14:11:bf:e9:19:54:58:39:fc:1d:
6e:23:b1:8e:ad:c9:8c:43:8a:6c:5b:01:ce:b5:2c:b1:c8:94:
18:99:e3:e8:50:dc:d0:f7:30:40:b6:1e:89:90:0b:cd:54:2a:
c0:5a:f8:14:f4:7c:60:3b:f0:4b:6f:db:16:0b:98:7d:ea:15:
06:a8:3d:6d:a5:ed:45:e7:24:d3:ab:6a:86:f6:dc:1a:cd:c4:
5f:22:6a:22:9a:db:c6:8b:a3:1b:97:5c:5c:0c:95:f4:66:64:
18:6f:dc:23:0b:9b:8f:07:a8:6c:c1:8f:30:17:d4:92:5c:17:
37:59:12:48:99:28:16:25:f1:7d:f3:f8:67:0b:3e:e6:6f:33:
c5:13:82:9e:9f:c5:4e:75:a1:b2:42:9d:6d:6b:63:4f:b8:e8:
25:a3:5e:25:97:39:a4:18:33:1d:e7:d9:c0:db:06:6f:9b:38:
ea:29:f3:70:69:09:a6:e6:db:2b:45:de:4b:f4:1d:cd:4f:e7:
3e:63:e6:9c:b5:b2:1f:6b:43:ac:95:13:17:9a:12:e5:23:7a:
26:9f:64:4c:e1:1e:a5:fd:5e:2e:cc:52:ce:b8:76:ee:42:d2:
47:76:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org