Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/db432af8-f150-37a2-8933-e1cd7119ca34.roa
File: db432af8-f150-37a2-8933-e1cd7119ca34.roa (raw, json)
Hash identifier: mlSp7hJpfmHsKXebM3I6YTXdbmsJeWraF78WTR0Vr4w=
Subject key identifier: D9:1A:25:1F:83:C0:EE:9F:AA:37:E3:5F:9D:2C:B0:84:AF:45:CF:FE
Certificate issuer: /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial: 010D0C9F4328583BAC016BA8E3525CDC0F453C80
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/db432af8-f150-37a2-8933-e1cd7119ca34.roa
Signing time: Wed 29 Sep 2021 04:00:00 +0000
ROA not before: Wed 29 Sep 2021 04:00:00 +0000
ROA not after: Thu 25 Jan 2024 05:00:00 +0000
asID: 7018
IP address blocks: 157.254.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:ac:01:6b:a8:e3:52:5c:dc:0f:45:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Validity
Not Before: Sep 29 04:00:00 2021 GMT
Not After : Jan 25 05:00:00 2024 GMT
Subject: CN=6309e54f-f0a9-4b25-b929-d4c46127438b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:ca:e9:d9:4b:cd:38:82:84:c3:57:78:d1:
7a:09:87:4d:6c:1e:f3:25:06:8d:3b:98:7a:37:90:
23:e3:86:eb:b1:9b:c1:c2:2e:48:fa:93:d1:81:37:
23:30:0b:2d:31:9a:3f:3a:9f:b7:5d:c7:39:3c:43:
a0:a4:54:c5:68:7d:ec:6b:ab:47:55:0a:5e:05:e6:
92:a1:e3:8e:81:50:6d:38:dd:1e:97:84:6d:1a:81:
66:97:63:0e:d2:f3:86:f6:2e:6f:07:ac:88:7b:ea:
4e:7d:4c:3d:2e:86:fb:88:82:78:3e:97:38:68:37:
5a:d3:09:0a:11:a1:a0:8e:c7:f5:55:aa:c6:12:9d:
21:25:fb:1d:b4:29:6f:1c:4d:b1:13:0f:2c:a7:16:
cd:0f:28:26:aa:48:55:20:97:b1:a0:0a:9c:e0:6f:
0d:f1:42:b7:82:20:0b:8a:cb:bd:ec:4b:fa:d6:3f:
51:98:80:d0:4b:68:07:f5:cd:74:2f:d4:38:90:a9:
99:b7:d4:a4:0d:3a:60:d1:62:5b:5b:c5:dd:3a:68:
58:48:2a:6c:b2:9b:5f:47:3a:6b:13:63:ce:ab:d5:
b6:c3:ed:cd:c5:59:de:ec:90:b1:d0:00:dd:e3:f3:
0a:33:4b:01:c6:f6:f5:77:52:e3:14:21:17:9c:05:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:25:1F:83:C0:EE:9F:AA:37:E3:5F:9D:2C:B0:84:AF:45:CF:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/db432af8-f150-37a2-8933-e1cd7119ca34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl
X509v3 Authority Key Identifier:
keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
sbgp-ipAddrBlock: critical
IPv4:
157.254.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:8b:b7:75:20:1b:e2:5a:eb:9c:b5:c8:f1:2d:21:4f:f8:38:
0c:7f:7a:7a:4a:4d:c0:1b:17:f8:35:40:9b:26:d0:19:80:90:
2f:82:00:e4:e5:44:e2:3d:b6:f0:a2:1b:52:de:b8:2d:e4:79:
20:f1:70:c2:51:3a:99:da:83:04:fc:b9:94:24:b3:ba:0b:fe:
af:d7:24:22:a8:0b:6a:4e:5a:77:b0:6e:5b:99:71:99:e6:72:
eb:8b:99:73:ae:01:eb:02:36:23:cf:43:86:25:68:73:96:b9:
fc:f0:11:58:a0:37:28:dc:c9:91:f4:7d:7f:3d:f5:f9:76:3f:
12:57:73:ed:2f:30:12:ca:12:42:23:cb:e8:85:07:a1:1b:93:
94:c8:30:07:0a:61:1d:82:89:17:be:f9:3e:34:e9:45:84:e7:
5d:32:e5:4c:0a:b4:aa:92:2b:a8:57:43:cc:8a:09:38:1c:5d:
0c:79:9e:b8:c2:1a:9c:23:8f:e0:d2:13:89:9b:b7:d5:15:db:
15:02:8d:8f:86:b8:0d:0f:80:ae:b0:4b:18:02:9f:92:77:d7:
3e:30:7a:d3:20:52:e2:93:8c:6c:c6:42:ce:68:67:4c:85:7a:
72:ff:03:5e:f2:b8:76:64:b0:89:db:72:c4:c0:e5:56:2f:24:
17:f6:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org