Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/45cbe01c-3491-3311-bb27-7ac3bef0a41c.roa
File: 45cbe01c-3491-3311-bb27-7ac3bef0a41c.roa (raw, json)
Hash identifier: HQCKZDNgM4I8hz2UnHy6AvBrPYvsVrPvGfYZnlsgIUI=
Subject key identifier: 18:38:B3:F5:C6:EB:AF:B0:8B:17:B8:E8:CD:BD:E4:DF:65:94:75:51
Certificate issuer: /CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Certificate serial: 010D0C9F43285844C10F9E3B056ED6AE6961B300
Authority key identifier: 50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/45cbe01c-3491-3311-bb27-7ac3bef0a41c.roa
Signing time: Fri 02 Feb 2024 04:41:37 +0000
ROA not before: Fri 02 Feb 2024 04:41:37 +0000
ROA not after: Thu 02 May 2024 03:41:37 +0000
asID: 834
IP address blocks: 147.189.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c1:0f:9e:3b:05:6e:d6:ae:69:61:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Validity
Not Before: Feb 2 04:41:37 2024 GMT
Not After : May 2 03:41:37 2024 GMT
Subject: CN=454be671-8590-4051-8a6d-6b89247225ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:dc:81:21:13:a4:d7:8b:01:94:e7:90:f7:
c5:73:a9:00:c1:4a:e5:39:ac:1c:8e:1a:ac:a8:af:
45:76:5b:0e:37:9e:74:37:14:fa:e1:24:db:a0:5b:
c6:04:89:69:57:61:94:6a:99:e8:0d:79:a5:0c:5f:
e1:24:72:2d:46:ab:ed:81:84:35:5f:9c:7c:f8:ff:
ef:e9:fe:16:68:04:14:39:e5:c6:49:db:3f:af:ce:
04:bd:40:58:c9:77:51:03:44:0a:38:cd:14:1d:ea:
fc:20:a7:e1:30:44:cf:04:56:a7:6b:4f:4e:fc:d4:
5e:e5:3c:2f:4e:20:42:0c:cb:b0:61:77:94:ae:06:
f9:2e:e3:b2:c4:48:c5:68:92:50:20:58:6e:cb:c8:
38:31:13:ae:00:48:d6:56:ad:0a:c1:80:35:b8:13:
76:4c:72:35:bb:26:eb:ff:b8:8c:96:4e:9e:38:e1:
00:a6:f7:a8:c2:06:2e:02:07:75:99:c3:3d:98:1d:
e1:21:6f:55:f7:0d:6e:13:ca:82:2e:57:2b:83:55:
18:89:56:0a:06:87:0d:1e:2b:c3:12:16:ae:27:6c:
88:c7:47:da:1a:87:18:8d:78:bf:e5:79:95:5d:cb:
3a:9e:66:e4:c6:6f:b5:46:e2:97:fd:cf:f1:b5:c6:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:B3:F5:C6:EB:AF:B0:8B:17:B8:E8:CD:BD:E4:DF:65:94:75:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/45cbe01c-3491-3311-bb27-7ac3bef0a41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.crl
X509v3 Authority Key Identifier:
keyid:50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
sbgp-ipAddrBlock: critical
IPv4:
147.189.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:08:c6:55:eb:b3:8a:01:7c:6b:85:1b:be:c4:39:b0:09:9d:
af:23:4c:44:b6:88:60:19:95:8c:37:dd:6f:b4:96:ac:8a:93:
cb:91:51:8b:7f:94:af:29:e5:1c:39:7e:f3:be:f1:f1:f5:78:
f2:c8:66:d9:8a:71:ef:ff:93:2f:b0:e0:15:e9:66:90:35:62:
25:9e:ce:c4:21:cc:f4:cf:eb:2d:b2:08:94:d8:18:9b:95:5c:
53:a6:db:01:07:23:e6:5e:c4:2b:7d:0d:e3:95:a9:e4:ae:5b:
5a:40:34:fb:58:0b:dd:27:22:c5:c8:7e:76:35:79:d8:2e:38:
e4:71:d6:aa:11:11:51:97:ab:96:76:5c:be:72:a4:92:1f:53:
14:34:a8:a7:e5:a3:4a:3c:a4:ed:c8:59:c5:01:3d:a4:04:bd:
e7:50:36:32:7c:ad:f8:4c:8a:8b:2f:56:ac:77:b3:c1:f0:70:
13:fc:79:ad:88:d6:52:8c:bf:50:2f:22:12:08:bf:b4:30:94:
89:7d:36:4e:04:98:3f:84:6d:87:e4:d9:ea:ba:39:bb:e5:10:
9a:0e:5c:f6:f3:4d:a4:7d:7d:ee:d4:f3:aa:2f:a1:3e:25:00:
c9:30:a3:0e:4d:18:f2:5f:bb:75:11:58:ea:a2:15:36:9d:1b:
07:95:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org