Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/aac842cc-deef-3e2a-b77e-dd57eda5996b.roa
File: aac842cc-deef-3e2a-b77e-dd57eda5996b.roa (raw, json)
Hash identifier: Kk9IE9JziQez1becJPTyxuh5eyB7Pj8DRg7BH+Ukh8s=
Subject key identifier: 0B:86:D0:F7:95:EC:79:B2:B8:3E:77:2E:B5:C2:2B:E6:F4:B8:D8:4E
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328576D51CC73C042CFC16DF3FBF092
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/aac842cc-deef-3e2a-b77e-dd57eda5996b.roa
Signing time: Tue 22 Oct 2019 15:00:37 +0000
ROA not before: Wed 16 Oct 2019 04:00:00 +0000
ROA not after: Tue 16 Oct 2029 04:00:00 +0000
asID: 63949
IP address blocks: 45.33.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f3:fb:f0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 04:00:00 2019 GMT
Not After : Oct 16 04:00:00 2029 GMT
Subject: CN=dc84e7ff-7c18-4c7c-8cb7-d53fc8041351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:39:a3:f3:77:a7:e3:62:68:32:39:b7:c2:
7a:9d:df:de:4b:f1:d5:0a:ac:4c:1f:65:16:51:2f:
5e:1e:21:72:75:6c:5d:15:f8:dc:df:df:1e:1a:8c:
f6:10:5d:b2:e4:76:f4:12:58:09:f5:c2:5a:12:ca:
7f:6c:da:a5:4c:af:4e:c2:88:9e:f0:60:94:03:8d:
28:98:8c:3c:dd:a4:fc:a5:a0:5f:67:27:17:ad:ab:
7d:9c:b8:33:3e:88:da:b2:fd:af:09:d9:25:fc:e6:
10:de:07:3f:35:bf:10:de:28:b6:0a:37:d2:38:c2:
21:44:33:b2:5a:22:a9:20:50:19:3f:96:4d:71:9a:
d5:8a:1d:80:e2:18:05:bb:e5:34:b1:ac:43:d8:ec:
ae:b4:a1:f3:a2:01:a5:65:3a:1d:5f:e9:00:a0:1a:
8b:c9:bb:24:b0:0e:ec:89:85:26:be:65:f3:a4:c1:
1a:8a:62:b1:e5:ab:ec:3b:5c:85:50:38:0a:17:41:
f5:45:3c:1f:8f:78:48:cd:c6:60:95:38:b2:88:94:
af:72:6f:89:54:55:c7:10:d1:cb:bf:09:49:d9:c8:
c3:18:ef:77:de:57:9c:51:ec:c4:a3:8e:0d:7b:8f:
8a:8e:b7:0a:f9:24:88:7a:a5:68:d2:36:4e:d1:ae:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:D0:F7:95:EC:79:B2:B8:3E:77:2E:B5:C2:2B:E6:F4:B8:D8:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/aac842cc-deef-3e2a-b77e-dd57eda5996b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:83:68:55:ce:08:b4:10:4d:c9:9c:1f:22:26:2e:1b:5d:f5:
18:eb:0c:40:c3:0c:e5:90:52:26:aa:99:07:a3:c1:ea:11:57:
3b:d8:cc:a6:fd:c7:e6:c6:9d:db:84:3e:d5:5a:c2:8a:e8:ee:
0b:2e:d3:22:4b:13:01:8f:ac:e1:e5:fc:ae:48:b9:13:40:47:
ae:84:2b:21:21:92:1d:5e:72:40:ce:00:b8:f6:2e:99:c4:a3:
95:ca:b0:71:7b:10:69:20:49:45:d0:c8:1e:56:de:e6:0b:28:
75:5b:ea:b1:f8:44:20:d1:6c:43:4e:f3:3c:d9:8b:57:bc:39:
b5:fc:e0:d8:3c:74:c9:fd:1a:74:dd:d4:3b:61:01:59:9e:c8:
c4:ec:f4:81:1c:60:9c:00:e7:44:46:bd:8d:68:a5:bf:ab:41:
ee:16:bb:05:a3:2e:a5:0f:55:32:b1:18:53:e2:03:e5:f4:c9:
70:db:59:27:55:de:9d:d2:aa:c5:21:76:68:86:13:0c:8b:78:
08:a7:6a:73:20:c2:75:90:17:29:b6:53:7f:f4:f6:6a:ee:07:
dc:79:5d:35:d4:7f:11:c6:7f:7b:c3:c6:02:3e:e8:08:1e:cc:
00:60:26:ec:85:59:a7:83:40:50:27:9b:83:3e:87:c7:ac:47:
94:89:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org