Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/b1b3683e-476b-3f0d-ac7a-4742137600dd.roa
File: b1b3683e-476b-3f0d-ac7a-4742137600dd.roa (raw, json)
Hash identifier: mKnd2rwTalTnS7hD0ZyC9zfMbipjDRIDm2DHrOV6eZY=
Subject key identifier: BF:0A:25:D5:0B:27:39:26:82:37:9D:9B:D5:DE:1D:31:CC:17:0B:B5
Certificate issuer: /CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
Certificate serial: 010D0C9F432858422DC85ADF97EC055D448D5B80
Authority key identifier: A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/b1b3683e-476b-3f0d-ac7a-4742137600dd.roa
Signing time: Sun 11 Jun 2023 01:00:17 +0000
ROA not before: Sun 11 Jun 2023 01:00:17 +0000
ROA not after: Sat 09 Sep 2023 01:00:17 +0000
asID: 834
IP address blocks: 199.48.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2d:c8:5a:df:97:ec:05:5d:44:8d:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
Validity
Not Before: Jun 11 01:00:17 2023 GMT
Not After : Sep 9 01:00:17 2023 GMT
Subject: CN=df4eb5fd-c0da-4c83-ae88-6f713d685f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:be:cc:cc:b2:99:46:22:a2:c7:2d:cc:b4:
b4:ff:fd:14:d0:92:a0:23:b9:77:f7:13:ef:39:db:
30:4a:03:6d:90:7d:43:d1:09:79:e2:ac:a7:2a:25:
7e:64:7f:dc:c8:2f:d0:ac:54:fb:67:b1:08:8b:5a:
99:34:b1:7f:40:43:e9:15:7c:b5:21:42:56:47:ed:
fd:7a:ec:c9:0b:48:a6:68:74:0c:cc:f1:12:04:cc:
39:dd:61:88:11:13:d5:cb:68:9a:2e:82:91:d5:0e:
09:c0:7e:cf:d9:64:55:ff:a0:29:f1:59:4a:f4:fb:
9b:fa:e1:02:ad:75:6f:9c:90:40:66:1f:20:bf:09:
ff:e1:ec:69:a4:a0:28:62:64:50:1d:29:d2:09:ca:
0d:72:8d:0f:44:eb:3d:a3:62:12:2e:4b:71:d7:b2:
87:c0:8f:6a:28:59:89:14:13:9c:09:5d:c0:c4:be:
31:fc:da:13:72:82:f6:48:c0:98:96:7f:1f:be:84:
03:57:d6:78:6f:57:99:e0:c5:d7:68:14:18:a8:77:
80:0f:e0:a6:06:b0:36:1f:15:4e:f5:64:40:b1:08:
ed:16:2e:4d:c2:18:1e:c8:87:e6:d1:23:0a:e6:03:
97:84:1c:01:af:7c:15:94:ca:1f:84:71:07:4e:21:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0A:25:D5:0B:27:39:26:82:37:9D:9B:D5:DE:1D:31:CC:17:0B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/b1b3683e-476b-3f0d-ac7a-4742137600dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.crl
X509v3 Authority Key Identifier:
keyid:A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:f1:1b:e9:49:0e:52:b7:37:2a:80:66:a5:ab:26:67:37:70:
f0:63:58:db:a4:5b:60:e3:10:10:69:ca:87:51:93:46:10:85:
19:dc:e2:e4:f1:25:db:fc:62:7c:ec:29:9e:f1:c6:e2:1b:b7:
fc:ac:66:90:b5:0a:95:0f:38:03:af:ba:ac:5f:24:c5:52:4d:
4a:f9:6e:95:54:e8:2c:2c:1e:06:70:43:00:d9:be:bc:75:4c:
42:02:62:f0:e5:48:41:a3:fa:7f:a5:a0:8b:4d:c6:1f:d2:bf:
df:4f:19:af:50:52:ef:03:82:34:96:00:33:a3:4d:f1:c6:12:
90:32:03:e3:35:40:2d:52:92:e4:a9:a4:d5:42:c4:3c:bd:3f:
a2:76:59:08:a4:e5:6f:e4:ca:bc:02:8a:f2:23:d6:58:98:1f:
41:e3:66:28:4a:38:0b:10:7f:6f:92:c3:b9:a4:ea:e5:82:7a:
b7:b8:7e:bd:45:cc:9f:9e:6e:55:90:ce:85:e4:e2:83:97:6d:
01:dd:d7:dc:20:dd:2c:2d:a0:9c:3b:42:f8:13:69:d7:ae:96:
17:63:e3:25:c0:7a:59:00:4f:45:88:64:a4:33:e3:7a:06:d2:
e4:30:ad:7f:b7:75:d7:61:56:ff:bf:ae:4f:cd:f1:0e:c4:61:
10:af:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 19:05:47 2023 by rpki-client on console-fra.rpki-client.org