Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/41f23123-9e02-3cd5-9219-6db5ef8a2104.roa
File: 41f23123-9e02-3cd5-9219-6db5ef8a2104.roa (raw, json)
Hash identifier: qfCF46fgTtdVqJfluTC5D+v27vjfbiMLla5dprmfcjo=
Subject key identifier: 48:83:37:AD:56:98:7B:B2:89:8B:90:97:4B:F8:97:57:BF:28:62:FD
Certificate issuer: /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial: 010D0C9F4328583E5E632F0ADF925982CF805C00
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/41f23123-9e02-3cd5-9219-6db5ef8a2104.roa
Signing time: Wed 29 Sep 2021 20:03:54 +0000
ROA not before: Wed 29 Sep 2021 20:03:54 +0000
ROA not after: Sat 28 Sep 2024 04:00:00 +0000
asID: 207459
IP address blocks: 157.254.171.0/24 maxlen: 24
157.254.172.0/24 maxlen: 24
157.254.173.0/24 maxlen: 24
157.254.219.0/24 maxlen: 24
157.254.222.0/24 maxlen: 24
157.254.223.0/24 maxlen: 24
157.254.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:5e:63:2f:0a:df:92:59:82:cf:80:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Validity
Not Before: Sep 29 20:03:54 2021 GMT
Not After : Sep 28 04:00:00 2024 GMT
Subject: CN=8322d090-6c31-4965-8222-e3c0a7b589f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:cc:59:43:9b:9f:58:b3:d7:89:fe:60:58:
82:9f:95:52:25:c3:3f:90:4b:ec:01:58:f8:bc:ab:
b3:91:eb:e7:78:b4:d8:1f:00:8d:3f:b6:51:ab:5a:
56:8c:be:ed:b8:ba:e4:b3:c8:60:7e:e2:54:27:72:
5f:54:60:60:5d:ff:a0:d0:00:9d:2b:c3:ee:3c:4e:
44:c5:2d:ca:b6:c8:f4:7c:0b:38:ef:cf:ae:c6:c5:
b8:d4:90:54:bd:9c:91:24:21:15:ce:36:de:e2:93:
9a:61:34:45:03:55:7b:dc:d0:b8:90:24:a0:54:f3:
36:4d:16:b7:ee:35:6a:81:33:62:99:bf:12:e5:5d:
7a:fa:e0:df:e1:c8:ea:ea:04:69:1f:1d:83:e7:06:
9a:ea:16:fe:12:2a:97:c8:e6:e0:f9:78:da:79:f4:
9d:20:84:46:ec:b1:a3:1d:bc:e8:e9:b4:7f:98:b7:
f5:7f:66:8f:d3:3c:8d:2a:ed:8f:ab:8e:86:d3:c4:
99:d1:ca:f0:c9:8d:12:22:f3:b8:1a:b2:f0:ae:35:
8c:7a:d1:7b:06:62:b7:84:dc:34:50:fa:b6:d3:93:
10:90:28:61:e4:d4:0f:84:f7:e1:99:14:4d:bf:a7:
a8:97:ce:e4:3d:92:1a:2f:2e:5e:c9:9a:ce:70:73:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:37:AD:56:98:7B:B2:89:8B:90:97:4B:F8:97:57:BF:28:62:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/41f23123-9e02-3cd5-9219-6db5ef8a2104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl
X509v3 Authority Key Identifier:
keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0-157.254.173.255
157.254.219.0/24
157.254.222.0/23
157.254.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:8f:0d:f5:17:0b:9e:20:c9:b5:16:e6:6b:b9:92:fc:a7:86:
b8:52:df:33:c4:8b:a5:20:06:66:90:cf:b4:75:b2:04:9e:58:
28:b6:68:3c:bd:be:59:a7:67:5e:bf:eb:7c:7e:84:99:fb:b7:
95:bb:c8:3a:d3:cc:68:9a:33:66:88:8b:32:81:65:94:ba:d9:
59:af:27:06:8e:69:be:ac:42:ef:5b:3b:b4:4b:76:80:a0:e7:
dd:30:7f:82:f7:a2:38:4c:c4:8e:b0:43:c4:6b:1d:b5:89:16:
20:80:b4:c4:10:3a:77:f2:d1:08:96:93:68:15:89:d5:2f:22:
e3:05:74:d4:44:dd:0d:e0:7a:cb:33:51:89:83:a5:07:b7:62:
29:99:47:24:13:9f:66:4d:b0:9f:4f:c5:f7:ac:24:7f:b0:8a:
cf:63:10:1b:cc:81:d2:4a:eb:fb:44:88:3f:2f:80:11:25:97:
f0:08:af:90:c0:62:1d:9a:b9:60:50:c3:10:25:85:ff:ae:87:
ec:d9:56:c8:06:2d:d7:1f:4d:6c:ec:86:d0:e3:d9:b2:86:4b:
06:d9:f2:1e:16:a4:ea:e2:16:bf:86:71:eb:8f:fc:48:ba:2b:
ec:63:b3:05:fd:c9:b2:f7:81:99:8d:b3:97:2e:a7:05:26:4b:
8a:e2:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:47 2023 by rpki-client on console-fra.rpki-client.org