Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c5dc356-9678-407f-8736-51dd871b055c/fc11c16e-294c-3237-baca-b040846ccbd0.roa
File: fc11c16e-294c-3237-baca-b040846ccbd0.roa (raw, json)
Hash identifier: xOVYjK9PAUndBXghtJlOa6IXRudzYiRAuQdwAZ2QY8g=
Subject key identifier: C0:26:EC:B4:A1:3A:DA:5D:51:B4:52:06:AA:A6:05:5F:B7:2A:B8:68
Certificate issuer: /CN=8c5dc356-9678-407f-8736-51dd871b055c
Certificate serial: 010D0C9F43285838E8918FCC27AB015E167A6B80
Authority key identifier: AD:B8:AC:C4:93:33:D9:C7:49:A6:2F:5F:14:97:DD:02:83:20:E7:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c5dc356-9678-407f-8736-51dd871b055c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c5dc356-9678-407f-8736-51dd871b055c/fc11c16e-294c-3237-baca-b040846ccbd0.roa
Signing time: Wed 10 Feb 2021 05:00:00 +0000
ROA not before: Wed 10 Feb 2021 05:00:00 +0000
ROA not after: Tue 16 May 2023 04:00:00 +0000
asID: 62948
IP address blocks: 74.119.4.0/22 maxlen: 24
162.254.128.0/22 maxlen: 24
2602:fedb::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:e8:91:8f:cc:27:ab:01:5e:16:7a:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5dc356-9678-407f-8736-51dd871b055c
Validity
Not Before: Feb 10 05:00:00 2021 GMT
Not After : May 16 04:00:00 2023 GMT
Subject: CN=97df4816-b8eb-4710-a306-5c3e1d0b70c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:0a:9f:29:bc:6c:31:ad:ff:1a:32:8c:37:
d6:8c:35:6c:97:3f:b3:0b:23:87:fb:ed:b9:68:6d:
c0:ee:a1:b4:26:c0:a0:5f:51:49:b2:f5:26:c5:3e:
d0:ec:e9:fd:a2:41:0e:ea:06:87:06:c1:7c:62:5d:
25:35:79:bb:9d:ca:c8:e0:2e:7b:13:fc:fd:da:f5:
37:da:3a:0f:ec:82:21:41:85:4c:07:1c:80:15:bf:
5d:28:21:1c:8b:46:78:62:c1:b4:18:2d:2b:ad:d3:
5b:43:e2:c9:7b:09:f4:a9:ca:5f:40:38:3e:9a:b7:
04:40:48:01:c4:65:ed:56:42:8f:b5:c1:ac:9d:34:
71:ed:6e:20:d4:47:88:2f:5c:93:c0:bf:fd:b4:3a:
ec:26:e8:40:9c:69:ea:b5:53:9e:cb:eb:ea:0c:36:
81:c6:7e:2a:a9:8a:9e:dd:66:03:77:72:dc:ae:63:
77:82:57:07:3a:00:f0:8c:bc:23:c6:07:51:68:7e:
12:67:52:25:a0:b1:2d:b0:0d:76:34:3b:96:7b:ab:
5b:cd:d2:26:04:26:a3:da:6e:9b:c6:bc:b7:dc:2b:
bf:cc:63:f0:30:b7:ae:99:d4:c5:4c:94:89:ac:0e:
d3:fd:19:48:df:b7:2b:d6:3b:dd:49:6c:3f:b6:44:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:EC:B4:A1:3A:DA:5D:51:B4:52:06:AA:A6:05:5F:B7:2A:B8:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c5dc356-9678-407f-8736-51dd871b055c/fc11c16e-294c-3237-baca-b040846ccbd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c5dc356-9678-407f-8736-51dd871b055c/8c5dc356-9678-407f-8736-51dd871b055c.crl
X509v3 Authority Key Identifier:
keyid:AD:B8:AC:C4:93:33:D9:C7:49:A6:2F:5F:14:97:DD:02:83:20:E7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c5dc356-9678-407f-8736-51dd871b055c.cer
sbgp-ipAddrBlock: critical
IPv4:
74.119.4.0/22
162.254.128.0/22
IPv6:
2602:fedb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:6f:60:2d:08:e5:40:c8:9e:63:82:1d:6a:61:f4:90:9a:0d:
c0:c6:e0:03:57:f7:5f:65:1c:88:fa:61:e4:d6:76:61:de:5d:
09:e3:4b:13:ef:2b:97:a2:5c:7e:5e:a6:a3:db:8b:ac:f8:95:
15:a2:2a:8d:14:af:72:f6:0b:8f:1e:a1:42:f6:94:28:0e:b3:
41:39:8e:ff:68:d8:96:ef:96:56:75:57:13:b7:57:5b:83:f0:
95:68:b8:3a:29:4a:aa:7a:2f:95:1d:ad:2a:09:99:b5:d4:6b:
26:5f:15:26:a9:ca:bc:77:a3:f7:81:b2:83:50:75:2c:ac:3a:
d9:d2:37:df:3a:f6:52:2a:79:81:c0:b2:97:60:1a:e1:1e:27:
b3:8e:21:b0:1d:4f:42:84:d7:d7:53:80:00:35:33:9a:69:08:
ff:61:52:09:8a:08:a1:7d:d4:c5:f4:e6:73:b0:5a:92:ff:a0:
e6:34:da:fc:90:59:f8:18:b4:96:6c:61:93:ae:46:4f:a9:64:
7f:5b:0e:eb:74:2a:b7:5e:7f:e7:80:d3:2f:cb:03:b0:43:c2:
92:a3:d5:a1:9c:43:85:06:fc:ca:00:9e:f4:75:52:f9:3d:f1:
d2:bf:24:9f:8f:dd:c9:5e:30:74:29:af:fb:2c:fc:73:70:f8:
31:24:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:11 2023 by rpki-client on console-ams.rpki-client.org