Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/80b323d2-fd78-3c82-918a-8da2ac2a6bcd.roa
File: 80b323d2-fd78-3c82-918a-8da2ac2a6bcd.roa (raw, json)
Hash identifier: gantSMFW+nhAezug5b/nFxqUjrNTwL9Hk48Tz7lGPc4=
Subject key identifier: E2:FF:B4:89:00:61:AA:A7:43:E0:7B:77:75:F6:F4:F0:08:6F:20:B7
Certificate issuer: /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial: 010D0C9F4328583FECF87EA52DF230E2A5CC5AC0
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/80b323d2-fd78-3c82-918a-8da2ac2a6bcd.roa
Signing time: Wed 29 Sep 2021 20:03:54 +0000
ROA not before: Wed 29 Sep 2021 20:03:54 +0000
ROA not after: Tue 18 Feb 2025 05:00:00 +0000
asID: 207459
IP address blocks: 157.254.171.0/24 maxlen: 24
157.254.172.0/24 maxlen: 24
157.254.223.0/24 maxlen: 24
157.254.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:f8:7e:a5:2d:f2:30:e2:a5:cc:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Validity
Not Before: Sep 29 20:03:54 2021 GMT
Not After : Feb 18 05:00:00 2025 GMT
Subject: CN=47189d6c-47bf-4780-b86a-26c7f31c6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:21:62:50:dd:f6:94:5b:d6:3e:7a:a6:0e:
6a:eb:91:55:e6:55:80:51:4d:f9:18:08:b1:44:57:
7a:b7:01:99:80:90:18:22:78:be:6f:37:b4:82:7e:
34:22:31:74:d2:16:66:0d:14:de:6a:85:6c:ab:1f:
1e:99:dd:2f:22:15:6e:2c:cb:2a:de:ed:19:05:8a:
8e:35:3d:31:9a:55:3a:50:17:0c:a6:27:54:eb:c8:
1a:fc:4c:8e:95:eb:4d:5f:38:f6:37:de:c6:dc:c9:
4c:d2:4d:93:2d:d8:5b:ec:e4:6c:e7:be:7a:02:05:
ae:7a:37:3b:b3:69:a1:49:ff:ae:80:43:04:08:cc:
13:8f:96:4a:d9:0d:66:d1:c5:0f:a3:a1:86:af:4b:
61:5a:e8:8f:ab:eb:2a:2a:dc:2e:97:45:90:20:3f:
8e:f9:4b:f8:47:81:3c:35:21:54:58:4c:5d:fe:8d:
03:89:47:51:9a:04:5a:97:25:7e:51:eb:5f:d2:db:
10:3f:34:f4:91:15:ed:86:d8:f4:56:3d:11:4d:f0:
cd:6f:46:f0:98:f0:d6:3d:9c:cf:06:b5:8a:d3:84:
a3:69:c5:d9:4f:ef:ed:0e:70:c1:f6:f0:bb:27:ae:
a3:75:89:35:ca:a3:c9:6b:5f:63:80:0b:43:6f:6e:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:B4:89:00:61:AA:A7:43:E0:7B:77:75:F6:F4:F0:08:6F:20:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/80b323d2-fd78-3c82-918a-8da2ac2a6bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl
X509v3 Authority Key Identifier:
keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0-157.254.172.255
157.254.223.0/24
157.254.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:68:94:7d:c2:91:ba:49:d8:a5:a9:57:3d:74:24:23:7b:79:
d7:1f:7d:e7:ab:47:27:eb:af:4e:1f:29:00:e7:89:36:1b:8a:
74:f0:89:20:0a:60:12:be:37:7b:a4:72:db:39:b4:6f:00:ed:
aa:a8:06:6c:61:69:17:bc:f8:ca:48:9c:77:2a:2e:3d:ae:f7:
3a:4d:c0:32:fb:37:d8:43:30:c1:70:41:10:6a:62:49:17:f4:
68:d4:f5:af:f1:a9:00:07:17:e8:0b:a8:45:86:a9:d9:6f:3f:
c9:fa:bd:76:eb:49:65:f9:b9:4f:89:6e:1e:28:71:2a:7a:d8:
12:df:2f:3b:13:cf:bb:e3:79:35:e5:80:77:f2:cd:d8:d2:dd:
7d:4b:c5:2e:91:1a:53:8a:9a:92:fa:fb:26:88:22:e1:a1:f7:
e8:e7:5b:19:41:0b:d2:2c:89:87:13:7e:93:1e:58:36:f1:0b:
f4:a9:64:e0:55:4b:71:82:35:7d:cc:f1:3d:ff:fe:ad:7a:5c:
24:91:0e:8f:d5:93:e8:95:00:d1:f3:91:cc:99:be:75:71:f1:
ff:63:81:95:fb:e7:03:70:4a:a8:8f:9b:3a:21:04:85:5f:ec:
84:ee:dc:9f:5c:70:1b:2d:6e:a0:25:c2:79:db:0e:dc:0b:5d:
0e:c6:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:47 2023 by rpki-client on console-fra.rpki-client.org