Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/c42adb58-88fe-372e-a018-68c51cd968d3.roa
File: c42adb58-88fe-372e-a018-68c51cd968d3.roa (raw, json)
Hash identifier: G6SmgI41C4CPFsxsowWP8dkFPH90SV+W22xLbqpMsvg=
Subject key identifier: CB:96:8D:29:AE:CC:10:64:B2:91:5E:C9:6B:D8:E0:CA:DB:58:2C:34
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F432858442303F72FB293B3450B6AD980
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/c42adb58-88fe-372e-a018-68c51cd968d3.roa
Signing time: Thu 07 Dec 2023 14:00:20 +0000
ROA not before: Thu 07 Dec 2023 14:00:20 +0000
ROA not after: Wed 06 Mar 2024 14:00:20 +0000
asID: 36352
IP address blocks: 96.8.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:23:03:f7:2f:b2:93:b3:45:0b:6a:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 7 14:00:20 2023 GMT
Not After : Mar 6 14:00:20 2024 GMT
Subject: CN=c1d34ca4-79f0-4344-995a-64df463300da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:44:fb:0d:0c:c6:8e:b8:70:d7:0d:41:b1:
33:0a:49:7b:70:1b:4d:1e:e0:06:f2:21:d1:79:04:
3c:89:62:0d:13:cc:2b:af:57:e2:f9:3d:6d:ab:12:
de:4e:d5:29:37:23:ba:30:33:f3:b6:4a:9f:87:5d:
51:6e:a0:02:9e:4f:fa:fd:79:c2:f1:6b:bd:dc:58:
b9:e3:77:ec:55:38:9c:8e:fc:26:64:dc:0f:2e:9c:
48:4a:f8:71:7a:a7:d9:6f:04:ce:69:76:57:30:d0:
96:f4:ae:ed:95:e0:cd:b2:92:83:b4:1d:79:6c:23:
92:ea:f5:d8:1e:62:3b:59:bd:92:88:7f:06:6c:0b:
95:ec:92:42:c1:26:f3:53:ac:d3:2e:ca:3d:22:b3:
d6:c0:3a:14:fe:94:67:1a:21:e5:4e:d4:38:29:7e:
eb:9b:8d:52:46:0a:a7:f1:1b:2a:cf:cb:49:eb:d1:
4c:53:78:50:70:df:f5:79:65:4f:c9:3b:cf:9b:a8:
2f:4a:3e:e2:00:cf:e2:04:e0:ab:dc:a3:78:2c:55:
b7:33:76:5c:5a:6a:7f:1d:75:46:f4:52:2a:ec:77:
e0:bb:f3:36:b1:73:8b:6a:62:64:6d:87:23:5d:fe:
1d:3c:4b:0a:75:30:52:d7:84:23:e7:f3:46:bb:6b:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:8D:29:AE:CC:10:64:B2:91:5E:C9:6B:D8:E0:CA:DB:58:2C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/c42adb58-88fe-372e-a018-68c51cd968d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
96.8.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:4d:41:64:3a:67:b0:03:07:30:17:fc:15:fb:1c:74:6c:36:
d8:5a:fd:7c:18:a7:13:17:ac:d7:7d:7f:58:98:29:8c:f2:99:
33:f2:d9:7a:47:f4:16:c4:7c:98:fa:36:54:d4:59:f5:6a:2b:
cc:60:9f:e7:ac:bd:f1:fc:72:16:2b:4c:de:3d:1e:29:78:0a:
81:b7:5d:aa:71:3d:0f:c4:bd:0e:f5:f4:8b:94:b6:e2:7f:44:
29:4f:1f:b0:aa:df:89:8e:31:a5:86:78:bb:7a:23:96:15:e3:
7c:1c:e4:5e:ad:a9:92:4c:66:41:cf:80:52:c1:c7:db:f3:98:
93:70:cb:34:75:b0:8c:87:c8:4c:e6:de:cc:91:76:71:5b:74:
e0:ea:e3:87:66:35:a3:13:e3:b8:e3:cc:4b:4d:3f:a3:f0:d2:
d3:30:1e:f2:d0:ce:d1:0f:90:d0:e9:71:ec:65:9f:59:63:e2:
0b:ed:8b:49:9e:ca:ad:f0:5b:4d:e3:2d:39:9c:42:58:3e:3f:
00:9d:3c:23:a1:fe:0c:10:36:56:b3:86:90:17:b7:b8:16:bc:
ca:6a:60:de:69:04:62:04:da:2f:16:a2:c3:80:65:3e:41:61:
c7:14:ea:97:54:ba:7a:58:23:72:a7:a4:9b:d4:70:b7:0c:e7:
bd:66:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:12 2024 by rpki-client on console-ams.rpki-client.org