Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/5e5884dd-9572-3742-827b-f5ed39ed877c.roa
File: 5e5884dd-9572-3742-827b-f5ed39ed877c.roa (raw, json)
Hash identifier: eP8ZVrh6enqu16bay3svWCUpJZEH8STdyIyzCq+P9Z8=
Subject key identifier: 31:0E:0D:93:7B:E4:1C:F5:ED:F4:D1:F1:08:F7:F2:14:D7:EC:19:B2
Certificate issuer: /CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
Certificate serial: 010D0C9F4328583CA34215C027F8D461F0901280
Authority key identifier: 72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/5e5884dd-9572-3742-827b-f5ed39ed877c.roa
Signing time: Fri 08 Jan 2021 05:00:00 +0000
ROA not before: Fri 08 Jan 2021 05:00:00 +0000
ROA not after: Mon 22 Apr 2024 04:00:00 +0000
asID: 212934
IP address blocks: 23.130.136.0/24 maxlen: 24
23.130.137.0/24 maxlen: 24
23.130.138.0/24 maxlen: 24
23.130.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a3:42:15:c0:27:f8:d4:61:f0:90:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
Validity
Not Before: Jan 8 05:00:00 2021 GMT
Not After : Apr 22 04:00:00 2024 GMT
Subject: CN=93bb0e47-f310-4f3e-af5c-db432facbb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:7a:d1:1a:77:71:ff:5b:cb:79:52:97:38:
64:e9:8b:f6:cb:ff:5e:78:e6:79:8c:7c:6d:70:09:
da:87:e7:35:38:5a:a3:99:a0:33:d0:44:ef:75:5a:
ce:fd:57:cc:39:0e:d3:7f:ea:7e:4b:49:72:93:33:
8c:1c:ab:96:f7:67:68:ac:ce:58:23:cd:b2:aa:8d:
b1:ab:cb:fd:3e:70:6c:93:6b:56:2b:c3:fe:65:ea:
52:3d:97:e8:c7:3e:d3:5a:14:39:7e:ce:b1:ed:c7:
82:d3:ee:a4:37:3c:e4:7d:9a:9b:07:63:15:b9:d0:
6f:0c:c3:e7:30:07:d1:13:26:0b:52:4b:1d:0c:28:
d6:a0:69:36:ff:3d:15:3c:4e:3d:fd:79:ea:ae:dc:
33:33:fb:1d:4e:03:c2:01:f9:6e:27:f0:28:b1:9e:
07:c2:3b:04:93:83:7e:5e:23:8c:45:a3:b0:5f:b4:
aa:13:68:c4:35:ca:c8:e5:80:02:4d:6c:76:6c:33:
25:90:9a:82:ab:42:95:a9:e1:bb:ad:c1:5c:64:d9:
ac:97:aa:b3:f6:3c:fa:9d:88:15:a6:e8:62:e8:0b:
e8:3e:af:1b:b6:7c:c7:91:69:44:3c:89:83:ed:ad:
21:12:a7:b3:f4:4b:79:c3:a7:07:aa:bc:f5:00:5d:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:0D:93:7B:E4:1C:F5:ED:F4:D1:F1:08:F7:F2:14:D7:EC:19:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/5e5884dd-9572-3742-827b-f5ed39ed877c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/0afacf20-2411-4ca3-ba34-f7e297cdb606.crl
X509v3 Authority Key Identifier:
keyid:72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:e8:da:97:8f:66:eb:3a:e2:22:2c:7a:91:cb:df:d4:37:1e:
8a:01:ce:1c:0c:12:4a:8f:f7:bd:ac:ec:b0:59:43:47:cf:d4:
f8:7f:c3:54:76:7f:97:65:fd:88:49:35:f5:1d:73:18:67:bb:
e8:35:1f:57:a0:da:bf:42:11:0d:99:62:20:24:b5:cc:a0:70:
69:b5:e6:98:5f:ac:8d:81:af:a9:2b:eb:3c:55:97:e2:50:ac:
78:0d:cf:8f:70:f8:72:bb:a6:10:91:d2:05:78:df:53:bd:58:
fe:c6:cc:9f:5a:ca:90:c2:47:c2:06:d7:7f:87:89:c9:45:b7:
65:a4:bf:9f:d8:ca:ad:72:0c:ce:70:33:dd:ef:62:09:c2:b8:
10:38:cb:ed:76:7b:ec:c7:33:ec:0b:47:a1:3f:ec:91:ed:5e:
80:74:87:71:89:ce:20:b6:74:40:76:3a:be:44:36:48:71:e0:
38:8a:9c:b9:a0:e5:70:a3:7b:93:27:ce:3d:dc:b8:ef:94:5d:
3d:f5:ef:3f:1d:f5:c6:f5:e8:a4:4e:12:68:67:f8:12:34:0e:
c0:02:0d:49:5b:1b:71:29:98:ec:56:88:3c:78:53:44:1e:d5:
66:bd:59:1b:d8:46:f7:df:ce:44:56:e0:c9:77:30:49:b7:67:
e2:e5:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-ams.rpki-client.org