Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/fcb7706b-0236-3d32-9909-bf5676366708.roa
File: fcb7706b-0236-3d32-9909-bf5676366708.roa (raw, json)
Hash identifier: TjJtwMzcCfFjMVW5zozLvg7yl3tDSknPTG87QIp0W8o=
Subject key identifier: 3D:30:44:F2:D1:00:7C:BB:ED:A0:BC:57:F6:2E:3A:7B:42:96:0E:99
Certificate issuer: /CN=ae995705-0f5f-4dee-bca0-7f8caa21fe41
Certificate serial: 010D0C9F4328584695A4CC61ECD0125407128000
Authority key identifier: 20:EF:0B:00:80:60:D0:9B:28:53:AA:22:BC:33:C3:B5:EB:CD:C6:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/fcb7706b-0236-3d32-9909-bf5676366708.roa
Signing time: Fri 19 Jul 2024 01:00:25 +0000
ROA not before: Fri 19 Jul 2024 01:00:25 +0000
ROA not after: Thu 17 Oct 2024 01:00:25 +0000
asID: 0
IP address blocks: 204.194.224.0/21 maxlen: 21
204.227.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:95:a4:cc:61:ec:d0:12:54:07:12:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae995705-0f5f-4dee-bca0-7f8caa21fe41
Validity
Not Before: Jul 19 01:00:25 2024 GMT
Not After : Oct 17 01:00:25 2024 GMT
Subject: CN=fb9bf4c5-7fe6-47c1-9c5a-80c18fd17d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:0b:bc:81:54:9d:83:8b:d1:34:06:01:2a:
83:90:f6:30:55:b8:72:73:e3:7f:00:1c:18:de:e3:
54:d3:31:b0:c4:4f:58:f0:cd:10:53:03:b8:54:68:
41:b6:ea:4b:82:b5:31:76:2f:72:e2:be:f7:89:12:
d3:e6:53:e7:99:e9:b9:cd:f1:49:64:ad:a0:6d:53:
97:7e:df:4f:7f:fd:4c:46:a9:4e:1e:85:9e:54:e3:
a7:63:ee:2e:47:9f:f9:f4:e3:5f:e4:4c:41:6c:01:
d0:85:8e:aa:fc:3c:44:92:bc:f3:83:04:a5:9c:a2:
98:ca:35:4e:1a:ad:0f:56:7c:72:30:92:22:70:b3:
8e:c8:d9:26:41:22:4d:b8:77:c8:da:a1:d0:d4:4f:
bc:ce:95:22:8a:c8:29:16:25:8f:ee:42:24:80:7a:
49:bd:a3:83:ff:83:78:14:0a:62:da:45:55:5c:a9:
38:10:14:9f:78:ff:a6:ef:2e:8e:e4:aa:30:c6:b8:
42:99:85:5c:08:47:67:34:b5:80:69:5d:f1:5d:36:
0a:70:dc:c5:07:98:bf:97:3d:44:1e:b5:4a:21:5c:
96:b3:ec:d9:8a:14:3c:f1:b5:ff:68:df:d2:44:d4:
d9:87:4f:b5:d8:a5:f9:ca:4b:97:c5:d5:44:99:a3:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:44:F2:D1:00:7C:BB:ED:A0:BC:57:F6:2E:3A:7B:42:96:0E:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/fcb7706b-0236-3d32-9909-bf5676366708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41/ae995705-0f5f-4dee-bca0-7f8caa21fe41.crl
X509v3 Authority Key Identifier:
keyid:20:EF:0B:00:80:60:D0:9B:28:53:AA:22:BC:33:C3:B5:EB:CD:C6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ae995705-0f5f-4dee-bca0-7f8caa21fe41.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.224.0/21
204.227.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:15:2c:ee:01:56:03:db:72:31:37:2f:49:cc:4f:bd:9d:cc:
5c:52:20:25:81:63:34:d8:16:90:ed:f7:7b:5e:fb:c9:ae:30:
ae:ec:40:21:b6:dd:13:d9:34:b6:a7:a5:4d:bb:88:f1:49:a9:
6f:fa:3a:a4:aa:59:4c:dd:15:8c:68:5e:1b:48:30:18:72:7c:
26:91:14:48:8e:88:21:ef:f7:7a:72:cf:f7:70:36:22:29:23:
6d:55:c1:2f:cc:ee:30:c5:d1:fa:76:14:dc:fd:f7:b6:d2:e1:
8a:74:c7:6a:62:5e:4f:94:98:ac:42:04:16:3a:ba:cf:37:b4:
5d:f6:9a:6f:c4:31:55:3e:99:0b:34:06:9e:1f:c5:55:67:2e:
a4:43:42:36:6d:73:84:19:10:b3:00:fd:51:07:a1:e2:70:95:
13:41:66:9a:5e:af:59:88:d5:f4:6e:e8:30:88:88:1f:5f:30:
a8:45:b3:19:af:32:0e:02:bc:14:32:c0:0c:20:ec:38:79:e0:
83:0b:4b:4a:77:52:ed:05:b5:82:b1:b0:ac:56:9a:fb:ba:1d:
02:5d:ec:97:28:72:fc:47:cb:8c:6e:b5:9a:9c:d0:c8:3e:41:
1f:82:9d:7e:8d:29:bc:f7:fb:48:7c:a5:ed:aa:f7:cf:90:c8:
b8:75:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:35 2024 by rpki-client on console-ams.rpki-client.org