Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/8ce494c8-cda7-3286-a76d-c4cac0eca299.roa
File: 8ce494c8-cda7-3286-a76d-c4cac0eca299.roa (raw, json)
Hash identifier: MxIXekE2QIXaT8yo/T2C20jyAObsUfrqAufIpvErP7k=
Subject key identifier: 20:9F:55:16:9A:81:65:69:BB:0D:06:D3:51:78:FA:2E:F9:DE:33:D1
Certificate issuer: /CN=18fa4b62-a658-4ac5-98e4-08b2ce78b384
Certificate serial: 010D0C9F43285842F61AFFE34E35F77EF371D600
Authority key identifier: E5:60:35:D8:F4:B7:3E:95:AE:CD:91:FF:39:F4:5A:6B:45:56:A4:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/8ce494c8-cda7-3286-a76d-c4cac0eca299.roa
Signing time: Mon 21 Aug 2023 19:08:31 +0000
ROA not before: Mon 21 Aug 2023 19:08:31 +0000
ROA not after: Sun 19 Nov 2023 20:08:31 +0000
asID: 399970
IP address blocks: 205.196.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:f6:1a:ff:e3:4e:35:f7:7e:f3:71:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18fa4b62-a658-4ac5-98e4-08b2ce78b384
Validity
Not Before: Aug 21 19:08:31 2023 GMT
Not After : Nov 19 20:08:31 2023 GMT
Subject: CN=0c70419d-fb10-455b-888c-fe746345ae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:18:03:05:f7:83:8a:44:b3:cc:41:dd:07:
52:42:91:05:df:38:5c:1e:2c:47:dc:d5:ca:a3:8c:
5d:8a:85:7a:75:32:31:62:88:4a:6b:ed:18:bf:f2:
23:29:90:2f:a7:74:70:1f:5e:d4:d3:ce:22:89:a1:
57:ea:63:61:11:18:ca:be:34:71:2d:0d:8a:97:57:
d8:13:be:7e:c9:d2:23:6c:39:d3:31:d6:e2:3c:62:
7a:ac:51:5c:96:97:a7:1c:c2:03:91:b3:33:46:00:
13:f3:29:62:4a:8d:87:78:9d:42:8c:9e:6c:03:a2:
5f:fa:f9:17:b9:87:d6:c5:0e:3e:6e:60:54:13:52:
f3:2d:70:d1:b0:7e:34:74:3b:b0:13:af:a1:bf:0a:
b6:f1:2c:a6:a6:96:e9:e7:24:36:39:7e:8b:9a:cd:
6f:95:4c:0f:ea:7a:0f:e7:6d:d4:d1:40:69:ee:cd:
be:48:28:9f:07:b2:c0:06:6a:c4:e8:2b:36:0f:5e:
68:eb:a4:b2:c6:b4:db:4d:29:ed:b6:a3:56:47:ba:
c4:8f:58:dd:dc:5b:9d:de:38:23:fc:f6:ab:4d:78:
b2:2d:64:48:ee:fc:e8:e7:1f:7e:35:a4:51:7b:8c:
69:b3:84:69:b4:27:54:55:f3:da:d2:7d:08:8e:6d:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:55:16:9A:81:65:69:BB:0D:06:D3:51:78:FA:2E:F9:DE:33:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/8ce494c8-cda7-3286-a76d-c4cac0eca299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384/18fa4b62-a658-4ac5-98e4-08b2ce78b384.crl
X509v3 Authority Key Identifier:
keyid:E5:60:35:D8:F4:B7:3E:95:AE:CD:91:FF:39:F4:5A:6B:45:56:A4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/18fa4b62-a658-4ac5-98e4-08b2ce78b384.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:da:ec:00:3d:5c:0b:e4:d2:85:27:e0:e6:de:a6:73:29:9c:
44:78:34:30:83:27:3f:5e:b4:18:ce:87:21:19:c2:96:50:b7:
b2:ca:55:50:a6:d0:66:0d:88:00:cc:48:fb:ca:61:2c:24:82:
eb:e5:0e:59:0c:6c:40:fb:7e:a6:f6:57:c0:e3:a1:ca:b0:7c:
97:af:17:a9:7b:5d:7e:86:0f:36:92:d9:dc:e4:04:e0:8e:42:
46:5f:93:3e:fd:97:a2:bc:6c:32:8d:db:44:b6:43:2c:ea:c0:
30:a9:2d:83:f8:b9:21:b9:7f:3d:a9:17:39:e9:78:94:c3:ac:
33:eb:06:42:1d:c3:c8:5a:a5:a8:fc:e6:0e:5d:54:3d:a4:94:
c9:3b:89:3c:ca:71:28:22:08:40:54:55:54:f9:45:f1:96:2e:
81:70:d5:e7:45:95:d7:fa:d6:d0:a0:6b:0d:0c:5d:8b:cb:81:
37:ea:a7:13:3d:f3:6f:ee:9c:78:87:28:be:96:ac:96:22:f8:
d3:e0:27:0d:d9:4d:06:ef:64:42:17:31:6c:58:ee:ef:cb:f0:
6e:98:61:fa:c4:67:03:83:8b:12:da:c7:f3:fc:05:86:87:dd:
2d:98:f2:7d:91:3d:d2:99:b0:72:a4:b8:f2:05:1c:50:05:b2:
91:bc:a9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 17:31:29 2023 by rpki-client on console-fra.rpki-client.org