Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/15d53434-e064-331c-8b99-725c6d4b5b1c.roa
File: 15d53434-e064-331c-8b99-725c6d4b5b1c.roa (raw, json)
Hash identifier: C4p7F6yCOOTu2/dnZllmeKvrx8VgSdBWJqtTuelLelI=
Subject key identifier: 0E:E3:A0:D0:1E:8D:65:95:69:40:10:BD:7A:9C:08:ED:29:46:2A:AD
Certificate issuer: /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial: 010D0C9F4328583F030A834215D22C7262F4CD00
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/15d53434-e064-331c-8b99-725c6d4b5b1c.roa
Signing time: Wed 29 Sep 2021 20:03:54 +0000
ROA not before: Wed 29 Sep 2021 20:03:54 +0000
ROA not after: Tue 26 Nov 2024 05:00:00 +0000
asID: 207459
IP address blocks: 157.254.171.0/24 maxlen: 24
157.254.172.0/24 maxlen: 24
157.254.173.0/24 maxlen: 24
157.254.219.0/24 maxlen: 24
157.254.223.0/24 maxlen: 24
157.254.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:03:0a:83:42:15:d2:2c:72:62:f4:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Validity
Not Before: Sep 29 20:03:54 2021 GMT
Not After : Nov 26 05:00:00 2024 GMT
Subject: CN=3e674d5d-6cbb-41a3-b61b-ae5dcdde8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:41:88:d4:8e:4e:92:ff:a6:8f:06:2b:09:
be:0b:fe:b4:cf:7e:53:ae:97:48:88:dd:5c:ec:f2:
1a:a0:73:7a:16:72:94:c1:25:b5:c1:c7:f1:c5:78:
49:72:d8:8e:df:2b:22:45:a4:68:77:1f:00:75:44:
73:35:21:39:a2:08:93:bb:45:68:3c:db:80:04:c2:
3b:1e:a9:a2:20:f8:1e:48:52:5a:55:d4:75:0c:71:
a2:b9:78:3f:93:c0:f3:29:2c:9f:e3:91:0c:2b:20:
35:ba:d9:1b:d0:ef:2c:19:76:0f:a5:96:82:01:73:
bd:14:1b:1c:a3:8a:5f:08:e5:c8:8c:63:1e:ed:18:
0a:80:60:c3:46:4d:2c:80:cd:c9:0a:4d:8d:72:14:
8e:31:54:9f:d8:73:06:84:93:f4:a3:a5:1b:ea:00:
70:45:9b:10:cc:b5:25:3f:ff:39:8e:3b:33:ff:77:
a3:5c:84:a5:89:d3:78:4c:f7:99:98:e3:2a:00:fa:
00:50:dd:f3:ec:96:d0:6f:df:9c:d2:53:2f:23:b7:
1f:a2:7f:0e:c9:f8:5c:bb:3f:d6:68:e5:2e:23:40:
4b:30:0e:2c:76:25:b4:76:c9:7d:55:6d:b6:a4:78:
33:d7:de:8b:56:be:cf:af:cd:c0:b2:8b:82:2d:01:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:A0:D0:1E:8D:65:95:69:40:10:BD:7A:9C:08:ED:29:46:2A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/15d53434-e064-331c-8b99-725c6d4b5b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl
X509v3 Authority Key Identifier:
keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0-157.254.173.255
157.254.219.0/24
157.254.223.0/24
157.254.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:7f:f8:ca:00:ac:af:6f:52:f0:f9:a8:40:97:56:e2:98:8f:
39:60:67:40:31:88:94:68:68:09:9b:39:bb:8f:03:75:37:04:
58:d6:2d:bc:52:f8:19:83:ba:a5:bd:01:8c:23:d3:98:1e:0f:
49:99:c6:4a:94:e7:fc:fe:d3:4b:04:3e:57:2d:f1:bb:58:a1:
62:4f:c3:90:a0:1b:af:0d:1b:c5:ff:f6:6e:8f:6d:38:ce:42:
e1:a2:94:fa:85:7b:52:90:d1:a8:ec:04:08:b3:f4:fa:b3:94:
c7:00:fd:23:0c:31:5b:23:fb:fc:65:27:0e:1f:d8:88:8c:dc:
7a:42:5d:26:e8:99:83:c6:12:2c:94:a9:20:ae:cc:f2:12:c8:
12:17:92:d8:23:14:74:ab:f5:4b:f6:93:8a:02:a6:ef:c0:c7:
56:0a:de:2f:33:4c:30:46:c0:88:a9:ff:ab:5d:fc:a7:36:ce:
f7:7c:45:8e:f2:61:19:36:de:7f:26:ea:21:32:5d:4d:b2:9e:
92:01:10:d3:3b:08:18:24:bb:6b:a0:b8:81:6f:02:3f:f0:7f:
0e:ed:b0:7e:a7:21:4c:cc:0a:92:37:90:7c:b6:ae:3a:f0:56:
f0:ea:0e:45:f6:b7:b9:67:bf:de:21:59:56:39:55:a1:08:d1:
b1:24:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:46 2023 by rpki-client on console-fra.rpki-client.org