Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/bed15886-d866-361a-84f7-5a85951d5bfc.roa
File: bed15886-d866-361a-84f7-5a85951d5bfc.roa (raw, json)
Hash identifier: O2QYvYZiue9Jq2ilrBqtHusw+g4HWc7FilBuPQseItw=
Subject key identifier: DD:91:51:2D:C9:3D:8E:4C:4F:10:35:02:7A:A1:9B:7E:66:9C:94:AA
Certificate issuer: /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial: 010D0C9F43285844289954AB762E176D1BF89D00
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/bed15886-d866-361a-84f7-5a85951d5bfc.roa
Signing time: Sat 09 Dec 2023 14:00:21 +0000
ROA not before: Sat 09 Dec 2023 14:00:21 +0000
ROA not after: Fri 08 Mar 2024 14:00:21 +0000
asID: 396982
IP address blocks: 144.49.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:28:99:54:ab:76:2e:17:6d:1b:f8:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Validity
Not Before: Dec 9 14:00:21 2023 GMT
Not After : Mar 8 14:00:21 2024 GMT
Subject: CN=b6b0b043-912b-49b6-8f07-82ffef7e630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:ce:35:48:e5:2a:ea:63:ca:5e:da:be:8b:
84:6e:b0:8d:7d:6f:36:79:a3:92:5d:81:11:64:37:
7e:bc:55:e4:ca:3a:2e:da:79:78:25:d4:08:63:0c:
91:98:ba:0d:ca:be:14:bf:89:e7:c3:d3:fb:4c:9f:
1a:2a:a5:91:8f:9d:25:87:ff:41:63:36:b9:c3:3d:
f3:12:6f:7e:e4:6a:a9:da:02:c2:7b:89:90:3b:98:
00:3e:61:f1:24:0c:46:6e:ba:72:13:b0:34:3a:49:
a0:59:72:0e:b9:b3:48:a6:05:37:0d:af:17:77:32:
12:ff:9c:bd:19:11:2a:24:b5:ec:28:06:26:de:15:
b4:b7:79:3f:ad:15:72:09:70:cc:fb:e5:cc:ea:05:
ac:f1:b5:52:2d:be:ac:a4:0c:ec:3f:15:75:2c:0d:
71:20:93:2e:99:04:80:f1:5e:f2:6e:99:b4:58:e9:
18:6c:1b:a0:e9:0e:39:cd:26:2c:fc:16:86:aa:d1:
61:44:08:35:5b:45:cc:83:f2:b4:82:dd:50:5f:98:
c5:7a:9c:ab:22:0d:f0:8e:78:51:0e:f4:32:64:45:
fa:f9:ea:3e:c9:cf:9d:72:98:22:a5:b0:c3:af:17:
7b:6b:2f:75:1b:b4:b7:c9:8a:82:b9:56:e6:00:b5:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:51:2D:C9:3D:8E:4C:4F:10:35:02:7A:A1:9B:7E:66:9C:94:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/bed15886-d866-361a-84f7-5a85951d5bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl
X509v3 Authority Key Identifier:
keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
sbgp-ipAddrBlock: critical
IPv4:
144.49.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:13:d8:d7:11:26:dd:a4:a5:dc:07:10:71:35:13:17:6b:0f:
7d:d4:82:1f:34:ed:da:b6:6f:77:21:d7:73:b5:bd:91:5d:2b:
73:0b:7f:bb:73:dc:54:c8:af:08:ba:d1:e2:65:6b:e5:bf:d7:
c7:4a:ce:9e:f9:3b:b6:50:66:23:27:01:1b:d7:bf:49:1f:a8:
50:ed:af:cd:e1:c7:93:29:75:6f:70:9d:ff:06:d2:a8:ab:95:
32:0a:94:56:97:e8:bb:43:4f:cf:32:37:b2:48:a5:ed:88:c9:
ba:a2:b9:42:64:4d:1e:12:52:04:02:eb:d4:3e:0e:74:f4:69:
ea:16:f6:a4:5c:e8:7f:37:57:c8:19:a9:e4:dc:34:5f:98:6a:
61:40:e9:a7:b7:59:1f:5f:73:23:fe:8b:3e:2b:29:3a:02:b6:
2b:4f:b4:46:2a:47:c4:81:e3:d6:92:68:d3:6e:fa:30:18:f3:
78:ed:eb:3a:c6:21:5f:6b:1d:01:85:40:ed:10:08:49:7a:77:
1d:a4:14:c1:5d:fa:00:08:67:29:2e:ec:f6:3b:d7:69:17:65:
06:e6:dd:2d:fb:f9:bb:60:4e:59:6e:27:d9:bd:fd:24:ad:87:
9b:07:3e:f7:98:b7:73:34:4e:ed:b9:48:d2:5c:0c:b6:af:c2:
84:fa:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org