Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a59fcb57-70d7-35b1-96d7-db6b62a50963.roa
File: a59fcb57-70d7-35b1-96d7-db6b62a50963.roa (raw, json)
Hash identifier: xcARAtwHRcVYzkFFi9fBmu9P4CJjScPPPzLwKEL/mf0=
Subject key identifier: 90:EB:F8:46:E8:0B:0B:F9:BA:51:72:25:5B:FF:52:48:4A:96:3D:53
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F4328584424694569096923BA79152180
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a59fcb57-70d7-35b1-96d7-db6b62a50963.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 36352
IP address blocks: 198.23.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:45:69:09:69:23:ba:79:15:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=6c491e31-b60a-4409-85b8-8846094c532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:3f:d1:20:8c:c9:f5:56:9c:4a:19:d4:82:
aa:bc:f5:fa:93:d5:6f:9c:96:f7:9f:75:c5:ef:e6:
20:a7:1c:57:38:72:6b:2a:b2:40:46:83:f8:58:00:
13:58:ad:7d:dd:cd:db:03:40:4c:70:01:a2:5e:bf:
83:ea:cb:d6:92:f9:f3:59:bb:2d:8a:3a:0e:f9:d3:
00:c4:28:97:48:f7:af:db:39:d6:61:27:25:80:53:
d9:3e:10:1d:40:09:41:84:10:8c:60:3d:72:6e:db:
74:da:59:92:63:2c:ae:80:2f:c9:24:1a:49:15:f0:
1d:06:0e:27:a4:11:d9:68:95:ee:2b:11:ad:1a:6e:
59:f4:e7:fd:6e:65:35:3d:d3:8b:a5:f4:7a:80:a1:
7e:65:11:fc:05:c1:32:59:92:be:e5:ad:66:10:bb:
86:b0:e9:d8:84:d8:06:01:f9:15:2f:ff:bc:0f:1c:
90:99:fc:58:5b:6b:e3:25:18:2f:d3:95:2e:fe:67:
e1:1e:5a:53:59:b0:2b:fd:7b:33:dd:59:fb:32:73:
3f:2f:1a:b8:c5:ef:09:5f:a0:7d:84:84:af:cc:c1:
7d:64:dd:94:f6:09:2a:a3:03:29:f0:fa:6a:cc:f0:
85:9c:0e:09:9d:e6:81:8b:41:79:13:82:f4:00:ec:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:F8:46:E8:0B:0B:F9:BA:51:72:25:5B:FF:52:48:4A:96:3D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/a59fcb57-70d7-35b1-96d7-db6b62a50963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.23.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ec:df:b0:b6:66:86:2c:ce:06:36:4a:46:ed:9c:c3:69:15:
b5:ac:86:d4:44:c9:0f:5a:68:05:7b:cf:48:b3:37:54:06:70:
f1:30:23:0a:18:13:c2:0b:ce:64:7e:0e:ec:3e:6f:82:e1:cd:
fa:46:fc:61:ec:3f:70:3f:aa:61:91:9d:99:3a:30:1f:92:ae:
d3:87:8d:4e:09:11:a8:26:fb:c5:3c:95:c6:8d:91:1b:d6:96:
e7:28:43:28:fd:b5:1f:3c:1f:7e:0c:09:be:0d:62:52:d0:aa:
48:d3:9e:8b:28:07:d9:53:37:9c:b4:b5:c6:44:b4:96:62:02:
f5:47:25:62:b0:18:51:05:84:a3:4c:7c:0b:b9:ba:9f:0b:a4:
0b:4b:e1:3c:1f:25:af:0b:4b:35:2f:f6:80:e7:75:49:ee:28:
d5:6a:b2:c7:a9:e1:63:c7:23:2d:3c:18:2f:88:92:85:8d:3e:
43:92:eb:7a:d8:f3:34:99:33:13:53:fa:97:d4:20:ce:ec:0f:
80:ad:fa:92:f9:9d:0d:19:4f:a2:6b:3c:f0:70:dd:27:11:f0:
74:8e:ca:e2:c6:47:ff:45:39:bc:9a:d0:54:bd:9a:24:61:c3:
d5:bd:7b:1a:18:e2:ce:9e:a8:1e:ef:5e:99:82:61:5f:3d:e8:
bd:bc:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org