Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/9d660e5b-f67d-394f-9706-4ac1ae6d22c8.roa
File: 9d660e5b-f67d-394f-9706-4ac1ae6d22c8.roa (raw, json)
Hash identifier: gvHUFXSATRoajKG7jcLXeybylLAzI20XaA2cbAOUbys=
Subject key identifier: C0:40:BE:91:C3:A3:C4:18:22:A7:BE:8C:F4:DB:64:90:45:75:55:90
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328576D51CC73C042CFC16E370409E9
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/9d660e5b-f67d-394f-9706-4ac1ae6d22c8.roa
Signing time: Mon 04 Nov 2019 15:24:01 +0000
ROA not before: Wed 16 Oct 2019 04:00:00 +0000
ROA not after: Tue 16 Oct 2029 04:00:00 +0000
asID: 48337
IP address blocks: 172.104.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:37:04:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 04:00:00 2019 GMT
Not After : Oct 16 04:00:00 2029 GMT
Subject: CN=cf51937f-e479-480c-b5e7-432077a2042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:9b:45:e1:51:7c:0c:ed:8f:bd:7e:f4:66:
d1:4f:7a:33:76:5c:d0:96:70:e9:e4:c8:8e:b0:b2:
84:17:04:52:8a:6a:0f:8f:f2:d3:5b:d6:52:c0:3c:
f6:2a:87:b8:c6:cc:1d:01:be:2e:02:ed:91:2b:1c:
7d:6e:a1:e8:48:e6:ac:5d:95:eb:f7:5b:36:51:59:
0f:00:28:52:5e:72:77:55:02:a8:cb:df:0f:d7:44:
88:8e:50:2b:46:3a:30:9c:05:93:31:f5:eb:91:ad:
45:ec:17:d7:49:8b:d1:2e:54:f5:0d:31:ba:ed:5b:
b1:ca:c1:3f:92:ed:19:65:85:81:af:31:ea:39:ef:
b1:3c:d4:81:f0:33:e7:d7:f3:93:ff:0b:6b:fa:95:
29:48:9c:8c:3e:54:f5:ec:5a:6d:2d:0b:52:0b:10:
f5:ab:69:e8:e2:05:83:1e:05:fd:08:e8:9b:72:bb:
3b:8c:e5:d2:d6:b2:04:c8:38:61:8a:56:05:1f:ed:
60:76:02:88:0d:39:ea:82:25:44:d8:2e:0d:b4:1a:
26:3e:07:9b:24:88:45:6d:e5:ba:f6:47:98:62:44:
60:69:83:05:03:df:dd:94:af:2d:ef:c3:a2:ec:ca:
96:36:69:29:d8:e1:f7:b8:e4:d7:04:a3:71:d3:29:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:BE:91:C3:A3:C4:18:22:A7:BE:8C:F4:DB:64:90:45:75:55:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/9d660e5b-f67d-394f-9706-4ac1ae6d22c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.104.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:58:3e:26:bb:60:f5:60:19:dd:3d:33:97:e0:ed:15:5e:ad:
88:be:66:66:39:91:a7:8f:98:55:34:cc:43:c5:5f:c1:a4:39:
e6:cd:83:60:23:43:a4:00:48:1a:de:78:2c:1e:b9:f3:b2:89:
27:f9:45:c4:49:00:4f:bd:33:27:7b:35:f8:05:56:e1:90:04:
3a:bf:b3:3e:80:09:74:00:b2:2f:07:29:86:c4:6c:fe:aa:ba:
c9:90:dd:9c:5d:71:72:b2:0d:29:ba:65:b3:d7:82:7a:1d:34:
1c:78:26:9b:ec:16:de:42:ae:44:68:50:28:60:9b:17:76:74:
27:14:e0:a7:46:ee:f6:af:ae:8d:62:98:c9:c8:ec:d6:cb:9e:
28:28:89:63:64:29:f4:4e:00:f3:11:33:9c:c6:c3:87:aa:af:
72:b2:b4:47:72:31:0a:4e:02:07:1b:77:60:79:38:e0:02:1e:
1c:0b:b6:22:eb:76:64:da:5c:03:c8:46:df:9d:10:91:51:88:
6a:01:d3:40:5e:3a:6b:75:51:0b:d1:d3:76:44:a9:c8:65:e0:
88:c9:ca:c9:28:1d:8c:10:46:42:1b:4c:96:e9:22:ae:50:1f:
f8:fd:17:55:ca:fc:77:9e:56:3b:2b:99:73:2e:da:24:b8:e0:
a9:a8:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org