Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/b7c1d715-3111-3fb0-9450-4c55849518ea.roa
File: b7c1d715-3111-3fb0-9450-4c55849518ea.roa (raw, json)
Hash identifier: 8KNfnD/FveHnqWpVnKddV8x0sOd8D84Ui1WXx1tUE9Q=
Subject key identifier: 7F:90:7A:61:08:96:7D:E0:E6:3C:E9:51:77:DF:85:73:B2:5B:51:72
Certificate issuer: /CN=20f6a64b-91b3-442e-a7bd-5821a82b2db7
Certificate serial: 010D0C9F43285843A8CF3FB33631E7C191757B80
Authority key identifier: ED:3D:EF:48:02:A5:D4:E1:93:64:7E:B7:BC:94:59:F2:20:2A:51:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/b7c1d715-3111-3fb0-9450-4c55849518ea.roa
Signing time: Tue 24 Oct 2023 19:25:35 +0000
ROA not before: Tue 24 Oct 2023 19:25:35 +0000
ROA not after: Mon 22 Jan 2024 20:25:35 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a8:cf:3f:b3:36:31:e7:c1:91:75:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f6a64b-91b3-442e-a7bd-5821a82b2db7
Validity
Not Before: Oct 24 19:25:35 2023 GMT
Not After : Jan 22 20:25:35 2024 GMT
Subject: CN=c9df45be-5dcc-4a7d-bbe3-2f7785f4689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:19:2c:f5:71:b7:a5:53:2a:f9:83:45:a0:
1d:72:07:08:c3:01:14:e1:f1:6d:0b:13:93:8e:cc:
06:8f:17:6c:ac:57:47:4b:50:7d:45:7a:04:02:5a:
bf:b3:e5:3b:28:44:7d:d1:6a:d9:6b:00:56:d6:ec:
fe:14:88:19:76:f1:d1:6c:3c:58:7a:59:0b:92:75:
17:52:01:f1:0a:0d:e5:61:7e:15:20:d5:35:3e:dd:
ff:c6:01:15:80:0f:19:6c:cf:98:6f:01:3f:ec:04:
3a:15:75:05:6d:14:4e:30:c7:a4:09:81:7f:5c:5b:
b3:43:4d:5f:3a:8c:e9:ea:67:d2:e2:92:72:62:3a:
08:79:db:48:33:c1:96:07:4f:e0:04:a4:b2:8a:70:
52:70:4b:2d:b8:02:b5:02:e5:e1:65:28:69:e5:13:
1f:7c:6f:0f:15:40:cc:54:21:d0:b2:14:73:88:30:
f8:6b:09:34:a6:ee:39:28:83:33:af:48:77:bd:15:
1b:6f:f2:ba:5f:a5:eb:2c:a5:85:f1:fc:5e:1a:e1:
49:12:dc:51:59:06:8b:f4:89:22:5e:25:3d:5b:bf:
cf:07:81:6d:29:29:da:17:02:77:26:ca:cc:ea:07:
b2:47:d8:d1:7b:61:b9:2e:f2:58:db:a4:29:e1:3e:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:7A:61:08:96:7D:E0:E6:3C:E9:51:77:DF:85:73:B2:5B:51:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/b7c1d715-3111-3fb0-9450-4c55849518ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7/20f6a64b-91b3-442e-a7bd-5821a82b2db7.crl
X509v3 Authority Key Identifier:
keyid:ED:3D:EF:48:02:A5:D4:E1:93:64:7E:B7:BC:94:59:F2:20:2A:51:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/20f6a64b-91b3-442e-a7bd-5821a82b2db7.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:dd:b2:4f:b3:27:25:9f:5c:12:c8:29:dd:68:75:bd:8f:71:
53:41:90:2e:23:44:ab:da:80:b6:31:f8:92:b9:df:c5:ea:9a:
1e:7b:03:ab:17:c0:3e:67:b4:55:dc:38:40:d4:75:c2:b5:6d:
8c:4e:04:53:d4:2b:78:f9:ff:3f:87:89:95:ec:ed:40:86:af:
6e:a4:a5:03:1a:ae:30:e4:c4:56:ca:f5:81:e1:41:23:fc:a3:
40:40:55:c0:a9:80:ff:dd:c5:4f:e9:70:2e:10:59:02:55:cd:
48:5d:2d:fd:2a:ac:de:40:19:59:43:66:bb:60:98:72:8a:1c:
bd:a7:f0:07:1a:2f:b7:bc:2c:45:a8:f2:96:2a:7e:92:b5:93:
df:ff:35:7b:15:c8:31:08:15:93:6c:8a:6c:dc:21:a2:cf:06:
60:9a:d7:e5:71:11:f2:63:74:68:df:a2:9b:84:c1:59:00:fa:
07:ae:77:fb:17:b1:79:b1:91:ff:4a:44:80:38:4a:e1:5c:d3:
34:6b:0f:e7:a9:56:c0:05:f5:66:fa:5c:e8:91:88:73:2d:e3:
05:96:18:9a:71:f6:2e:7e:20:2e:47:37:30:10:41:91:81:58:
57:bc:ac:63:56:59:a7:6a:40:8c:53:3b:2d:54:1e:f8:db:b6:
65:44:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 16:53:21 2023 by rpki-client on console-ams.rpki-client.org