Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa
File: eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa (raw, json)
Hash identifier: zuAyQskcBrm0q5lMuKxv0/H3KKcnUOO7a6RNuKpK6ag=
Subject key identifier: 4B:48:2E:54:73:26:01:97:7E:0C:49:A1:32:9B:45:61:84:24:4F:6E
Certificate issuer: /CN=bdffd03b-63de-4897-bce0-96cc8838b28e
Certificate serial: 010D0C9F4328583D8D9C2C04CCA63A8AFE5AD100
Authority key identifier: AF:E5:86:40:67:69:C8:11:B0:A2:FC:EB:D7:43:D8:72:B2:CC:5F:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Mon 15 Jul 2024 04:00:00 +0000
asID: 22281
IP address blocks: 23.153.192.0/24 maxlen: 24
2602:feaa::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8d:9c:2c:04:cc:a6:3a:8a:fe:5a:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdffd03b-63de-4897-bce0-96cc8838b28e
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : Jul 15 04:00:00 2024 GMT
Subject: CN=165d25a6-0d41-4196-bbd1-f622484722ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:22:c0:20:b9:92:b5:f0:25:dc:8f:91:8b:
7c:9f:27:61:a7:43:a3:32:6c:2f:66:3b:b9:8d:eb:
61:fb:20:da:3e:3b:07:61:f3:6e:06:8f:7e:a0:4f:
4b:4f:16:44:cb:c8:7f:d1:85:43:8c:0b:ba:83:b3:
42:fb:18:19:dd:20:1b:11:d5:cb:4f:16:de:0c:49:
23:e7:03:a0:31:7f:b2:08:fd:a6:ab:3b:26:fa:c5:
ab:83:18:4b:6c:2e:f1:21:18:1d:57:e9:a7:8e:0a:
8f:be:e2:c1:48:d2:1a:54:ba:40:b5:04:48:77:65:
b6:f2:f2:19:34:bc:38:ae:7d:ec:2e:c5:0c:e0:46:
ec:c2:5d:0b:a7:f3:9f:55:be:8c:a7:1f:3c:a2:ec:
45:97:5a:1c:59:fd:b2:87:21:33:5d:2e:37:de:4e:
77:ae:76:ad:3b:a4:7a:98:30:c5:a7:4b:b4:48:27:
6d:20:d8:ce:52:6a:2e:d2:7c:cc:8c:a7:aa:67:ae:
0e:d3:95:6c:ad:98:cf:ea:80:36:8f:37:a4:44:c5:
c3:c5:37:27:78:8f:a1:fa:b1:44:6f:b3:72:0c:b2:
e1:65:d8:e9:67:d8:7a:ba:61:db:75:9a:64:e7:62:
76:f6:cc:c2:61:8c:69:b1:39:d7:8b:95:f2:4f:44:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:2E:54:73:26:01:97:7E:0C:49:A1:32:9B:45:61:84:24:4F:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/eddcab8a-94c6-32a8-9c72-2b7b011f6685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e/bdffd03b-63de-4897-bce0-96cc8838b28e.crl
X509v3 Authority Key Identifier:
keyid:AF:E5:86:40:67:69:C8:11:B0:A2:FC:EB:D7:43:D8:72:B2:CC:5F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bdffd03b-63de-4897-bce0-96cc8838b28e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.192.0/24
IPv6:
2602:feaa::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:b4:94:f5:05:6a:4f:89:77:4c:31:39:69:cf:96:80:3a:36:
81:e0:45:f5:6a:4d:df:9b:6e:c9:9c:1d:6b:c1:20:da:11:24:
66:a7:69:af:35:55:b0:73:cb:b8:c1:1a:d3:f7:9b:7c:b5:9b:
31:1d:6b:3a:a8:e1:7a:64:23:63:78:05:e1:de:42:73:81:0b:
e8:cb:4f:bf:9b:a1:0c:51:60:c4:97:ea:82:b6:77:58:2d:a1:
d5:93:8c:30:08:7d:e7:4b:2c:f8:13:dc:e8:8d:0d:d1:f4:a9:
75:f7:01:3c:40:d2:1b:ff:cb:77:1c:2f:8b:dc:b6:62:54:a3:
4a:0b:60:8c:6e:2d:c9:4e:49:6e:db:f9:b7:1f:a0:0a:43:ad:
08:5e:e7:85:77:aa:07:a1:d2:e1:a3:04:a9:ea:d6:46:f4:7a:
99:df:7e:95:47:4e:14:6b:3b:5e:a3:39:6a:04:63:67:9e:d0:
99:40:d2:61:73:9e:09:df:d1:09:c5:be:79:de:14:14:0b:eb:
02:17:7a:2b:24:4b:62:36:3e:f5:b5:14:c1:4d:77:db:ee:d7:
ce:d7:48:8f:15:e0:66:6d:b7:ca:ae:28:a3:ea:89:93:21:ac:
2d:78:08:b3:ed:46:15:fe:31:47:51:1a:37:fb:6e:ec:37:2d:
dc:3d:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org