Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a2432985-5608-3d9f-bb5f-96d95900ce45.roa
File: a2432985-5608-3d9f-bb5f-96d95900ce45.roa (raw, json)
Hash identifier: DOpwmNtlXqUr9vYtGMX1dmgiJrtTvXR3AUU659ZgJaU=
Subject key identifier: 43:A7:13:D0:E8:0D:58:18:18:2E:40:B7:CA:6A:5D:D9:85:27:CE:41
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F43285840015A7EC66F05871F265E3C80
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a2432985-5608-3d9f-bb5f-96d95900ce45.roa
Signing time: Wed 16 Oct 2019 21:03:01 +0000
ROA not before: Wed 16 Oct 2019 21:03:01 +0000
ROA not after: Tue 25 Feb 2025 05:00:00 +0000
asID: 63949
IP address blocks: 139.144.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:01:5a:7e:c6:6f:05:87:1f:26:5e:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 21:03:01 2019 GMT
Not After : Feb 25 05:00:00 2025 GMT
Subject: CN=c44c35dc-2e4f-43d5-8430-03a06c6da3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:f3:ae:ef:61:67:6d:f4:d6:6c:b3:08:17:
64:2e:9d:96:4a:85:76:42:9c:0a:65:19:e8:81:98:
b4:19:42:ce:ae:45:69:0c:43:fc:eb:5d:b3:79:2f:
65:15:06:f5:85:33:3f:1d:cf:0d:55:58:0d:ec:f4:
9f:32:60:a4:b0:ac:48:13:af:fc:b1:90:52:f5:26:
29:e5:2d:c4:64:2f:b7:44:bd:b6:a1:08:bd:9c:e1:
d6:72:ad:9c:54:19:54:0b:fc:71:51:b5:38:3f:04:
21:24:7e:54:11:ee:8e:22:a6:4e:d1:9a:8d:6a:40:
3d:0e:a3:52:78:d5:05:76:14:a4:f9:2d:4b:11:ee:
2e:7d:df:27:14:5c:3a:f9:d6:2d:f5:58:b8:20:8d:
51:96:f9:7a:fc:ad:48:a0:ba:a4:23:36:f4:5b:27:
c9:ea:a0:40:1a:ff:7c:26:d7:ef:6b:0f:f5:3f:64:
bc:7e:ca:34:41:34:9a:51:74:89:73:92:1d:96:d6:
d0:d4:9d:ea:25:d8:4c:29:c2:69:90:ff:66:71:44:
47:3c:37:c2:c2:0f:ba:20:84:95:dd:66:c8:8b:1f:
0c:1a:cc:bd:06:50:5e:60:35:9f:97:34:d6:53:15:
b4:47:50:73:06:ca:f7:8f:79:a2:02:2c:5e:ed:21:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:13:D0:E8:0D:58:18:18:2E:40:B7:CA:6A:5D:D9:85:27:CE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a2432985-5608-3d9f-bb5f-96d95900ce45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.144.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:60:b5:16:56:d7:62:69:02:31:38:90:0a:82:02:f9:b2:00:
64:a5:3b:c2:6e:4b:9c:9a:df:64:5d:63:87:01:e3:2a:55:db:
0e:b2:42:de:56:41:37:66:d6:b2:0d:b1:9e:9b:aa:65:a4:6c:
11:b9:35:04:7f:db:93:0c:2b:7e:96:7e:e3:d4:f6:7d:85:18:
9d:e2:a8:99:ae:22:fc:77:1c:8d:2f:84:cf:c2:7f:4f:e0:7c:
eb:eb:6f:fa:95:7a:71:22:db:22:c8:da:55:ef:f4:c4:f4:15:
0b:ab:b3:d4:ee:18:4c:42:83:76:c6:05:f1:74:78:db:ed:af:
c8:3a:39:e9:91:22:54:3b:25:f2:fb:56:0b:fa:a3:2a:8e:a3:
0b:e5:ed:4e:17:ab:64:ea:07:bd:84:8a:42:13:e9:9f:5c:43:
0f:b1:24:5d:21:ad:f3:86:28:42:93:51:40:b4:ef:60:40:b1:
46:76:f4:c8:10:32:cc:0a:ca:99:e0:0a:de:2c:1c:d1:97:86:
62:fa:61:5b:dd:2b:ba:ba:bf:4c:ff:ca:ea:f8:e2:b6:26:cc:
4f:e0:4b:bd:cb:bb:70:db:8c:e7:2f:31:55:96:a1:cc:35:72:
bb:78:43:01:22:05:e4:cc:e5:95:60:60:df:f5:fc:fb:19:13:
4a:7b:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org