Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/4ab1025e-6207-325d-b917-3b0a24e6f22d.roa
File: 4ab1025e-6207-325d-b917-3b0a24e6f22d.roa (raw, json)
Hash identifier: rM3Fp2kPel2yrjJLGNlVQY+F9I/rKrF3dwtHwXd2MFQ=
Subject key identifier: BA:74:8D:36:7F:1B:E9:56:11:0B:59:7B:13:BE:87:0F:4E:AD:A0:00
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328583F78D43BAB922156FCA5700100
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/4ab1025e-6207-325d-b917-3b0a24e6f22d.roa
Signing time: Wed 16 Oct 2019 21:03:01 +0000
ROA not before: Wed 16 Oct 2019 21:03:01 +0000
ROA not after: Tue 07 Jan 2025 05:00:00 +0000
asID: 63949
IP address blocks: 139.144.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:78:d4:3b:ab:92:21:56:fc:a5:70:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 21:03:01 2019 GMT
Not After : Jan 7 05:00:00 2025 GMT
Subject: CN=0fcf5fd4-c0ab-4c37-9c2d-8d8b79bbb82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:fe:6c:9b:06:6e:0b:a2:db:60:7a:a6:db:
5d:2d:81:74:de:60:6e:02:65:ae:c8:d5:91:66:ba:
b6:f4:10:ca:57:d3:c8:89:e2:17:4d:73:e2:80:9a:
10:68:2c:0e:68:18:c3:63:d2:72:27:48:ee:63:7c:
5c:c9:bc:02:55:ce:9d:d7:81:a4:84:e7:25:e9:01:
26:93:9b:00:18:37:f5:42:cd:54:e0:bf:bf:14:20:
1a:7c:82:88:90:c4:7d:32:22:19:ec:c3:f5:23:0d:
30:ae:d8:f9:6b:7d:7f:e2:6d:4d:5c:51:7b:b1:15:
0c:a0:03:e2:34:12:77:1e:48:67:8b:10:36:a6:b4:
53:90:59:7c:c1:ea:25:ea:1a:c5:69:80:b3:7d:fe:
76:f9:83:0a:c1:c4:0c:a5:13:6c:3a:71:22:0f:45:
79:bb:02:39:a6:c2:b7:12:e3:c9:79:5d:39:54:0f:
3b:83:8d:73:e6:52:a9:08:a6:a1:18:a1:25:80:11:
5e:16:02:a5:4f:5e:f7:d5:01:52:85:80:14:b7:c2:
15:94:16:5f:5c:b2:49:d0:1d:16:bc:48:66:36:dd:
3d:fe:8b:10:1b:30:c6:6a:4b:ea:af:23:af:49:1a:
c0:c1:f7:3b:c2:1b:dd:3d:f5:2d:1f:7a:97:39:86:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:74:8D:36:7F:1B:E9:56:11:0B:59:7B:13:BE:87:0F:4E:AD:A0:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/4ab1025e-6207-325d-b917-3b0a24e6f22d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.144.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:45:5d:4f:47:92:c5:4f:40:0c:af:c3:7e:c1:18:44:27:80:
8c:63:f0:0e:f4:4b:3d:c7:4e:f1:c7:39:fa:1c:04:bf:3f:c3:
a5:bd:cd:ea:16:ab:98:3d:04:34:28:5a:9d:8e:db:3b:89:c1:
39:c2:e6:61:ea:95:ff:97:a7:83:27:fb:3c:ba:44:e4:d3:13:
d9:be:23:8d:79:5b:48:30:67:f2:68:08:03:70:00:b0:98:d1:
aa:ae:62:23:d0:33:ea:81:b9:13:c2:ba:41:b4:e5:d3:e7:7b:
38:9c:9b:6c:52:5f:5e:59:e4:0f:95:db:3a:4e:50:37:a9:d9:
e3:72:e9:eb:74:5c:64:74:79:ba:29:2c:8d:20:a6:8e:4a:09:
2a:ac:36:48:34:61:61:16:a8:32:e2:aa:43:0f:31:51:c4:82:
b9:7d:00:ce:ba:5f:86:e6:af:b2:7d:2e:0a:2c:6f:e1:95:59:
db:30:70:13:03:38:c7:fb:de:8d:f7:b1:bc:d9:5b:79:ae:97:
58:27:aa:88:e7:b7:3d:6a:54:e7:6a:39:0b:96:c6:4d:80:a4:
d9:26:42:4c:38:8d:0d:e6:44:70:39:19:4e:d2:3b:0a:1d:e4:
ab:27:9b:84:36:97:be:46:a6:b9:24:3b:af:e6:59:ca:89:91:
52:84:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org