Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/58d2716c-7c12-3064-8304-1376a9c597df.roa
File: 58d2716c-7c12-3064-8304-1376a9c597df.roa (raw, json)
Hash identifier: 0NOjzSFMUBkejgG3F1gj6nwPeLdU//n336b0VuARRhs=
Subject key identifier: 85:01:C2:8C:82:AC:48:BE:E4:96:A4:28:E9:7F:D9:21:CE:92:C4:F8
Certificate issuer: /CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Certificate serial: 010D0C9F43285844E42B83EF642388DF2AD77280
Authority key identifier: 50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/58d2716c-7c12-3064-8304-1376a9c597df.roa
Signing time: Wed 14 Feb 2024 18:31:07 +0000
ROA not before: Wed 14 Feb 2024 18:31:07 +0000
ROA not after: Tue 14 May 2024 17:31:07 +0000
asID: 6079
IP address blocks: 147.189.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e4:2b:83:ef:64:23:88:df:2a:d7:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Validity
Not Before: Feb 14 18:31:07 2024 GMT
Not After : May 14 17:31:07 2024 GMT
Subject: CN=798d4cce-39fa-4c59-b777-72905037f9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:9d:23:64:81:bd:f2:d1:1d:3a:2a:fd:1c:
50:71:73:0d:19:41:71:64:94:ca:58:64:fa:f3:38:
4a:80:93:7d:8d:3a:b4:1e:07:38:b2:9a:ae:90:b2:
3c:de:b4:3d:5e:ae:e3:f0:b1:01:ca:9e:fb:0d:2a:
4f:b0:1f:5d:1a:31:2f:8a:f5:29:16:9c:a0:d3:0a:
74:da:2d:a5:a3:84:05:22:44:e1:1f:b0:75:f8:d8:
4c:c0:3d:b3:71:65:2e:d1:29:a4:19:fc:8c:34:da:
f1:61:d9:1c:e8:8f:f7:fd:7c:79:fc:bf:98:d6:98:
f8:ac:ee:fb:24:a2:76:10:b1:da:58:9e:13:5f:ec:
45:05:2d:2d:c1:83:2d:d5:96:28:24:af:30:04:a7:
01:05:f1:40:04:d8:bf:0b:a8:d5:e3:f4:cd:82:30:
a1:21:3c:b3:4a:0c:de:aa:2d:a5:fe:99:3b:60:d4:
44:38:e0:fb:e6:50:95:09:53:c7:7f:32:04:b8:e6:
b8:8c:72:34:ec:e0:2f:f7:f0:c8:70:27:1f:bb:be:
7d:4f:c7:6c:c5:b9:ed:59:4a:b5:e2:a2:34:ae:3a:
93:4e:3a:87:96:fe:29:7c:fd:be:da:a1:2a:6b:bf:
a1:0e:bb:73:25:34:77:f0:ec:b2:b4:cf:d6:9f:20:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:01:C2:8C:82:AC:48:BE:E4:96:A4:28:E9:7F:D9:21:CE:92:C4:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/58d2716c-7c12-3064-8304-1376a9c597df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.crl
X509v3 Authority Key Identifier:
keyid:50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
sbgp-ipAddrBlock: critical
IPv4:
147.189.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:b8:68:4d:1b:62:f4:84:3e:de:a9:a1:76:ae:c8:f1:84:4a:
98:6e:33:49:d7:74:56:08:63:fe:82:f0:61:33:54:a0:f6:71:
fd:4c:06:17:81:b3:05:2d:62:1b:97:65:82:de:4f:55:e5:13:
d5:60:9c:96:fc:7d:58:ad:cd:60:ad:8f:4c:c3:37:21:49:5c:
80:b5:4c:b5:95:a5:f6:a9:f8:71:10:27:a1:1e:91:6a:a0:fa:
80:8a:da:87:8d:8e:d3:b3:f5:a3:4a:fd:24:d5:45:7b:cd:b1:
de:fe:dd:92:2b:75:ea:21:c3:04:a5:8a:6d:72:4b:18:05:ed:
cc:e9:04:d5:49:88:b5:05:e4:b6:20:34:4d:0d:63:63:4f:8b:
a8:81:0a:6a:96:5f:fb:71:d4:ba:78:97:a0:50:42:91:7e:b3:
07:ea:63:eb:ef:c9:ec:e6:1b:16:0c:ea:cb:6b:fd:ba:04:69:
c5:d9:b2:16:ad:ab:98:a9:f8:34:91:ef:9d:3d:83:7f:73:91:
96:23:c4:b4:59:cd:ee:43:ea:40:00:45:bc:5c:32:82:ff:c2:
8e:1a:1f:c2:02:df:35:01:f5:a4:41:73:ed:39:fb:29:71:3e:
44:3e:6e:7b:28:88:f9:9a:69:ea:36:d9:66:fc:e5:0d:ea:86:
90:cd:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 19:06:50 2024 by rpki-client on console-ams.rpki-client.org