Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/cf040b57-0a26-3083-bc17-36a13f415ca7.roa
File: cf040b57-0a26-3083-bc17-36a13f415ca7.roa (raw, json)
Hash identifier: sjqmHYQKVzfGShgOdmd+RMVfiPtTk5zdwDUVylf+yh4=
Subject key identifier: 9A:12:29:2D:3E:2F:EC:04:11:86:03:A3:F4:34:8B:70:2B:81:03:AF
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328576D51CC73C042CFC16DF456FC4C
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/cf040b57-0a26-3083-bc17-36a13f415ca7.roa
Signing time: Tue 22 Oct 2019 16:40:04 +0000
ROA not before: Wed 16 Oct 2019 04:00:00 +0000
ROA not after: Tue 16 Oct 2029 04:00:00 +0000
asID: 63949
IP address blocks: 72.14.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:56:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 04:00:00 2019 GMT
Not After : Oct 16 04:00:00 2029 GMT
Subject: CN=19524c30-288c-47af-be5c-c668dd3e6782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:7c:4f:d2:58:d8:09:e2:38:f3:39:dd:61:
6a:9d:64:89:46:6d:7f:92:8e:cf:cb:52:8f:1d:82:
f8:7d:d9:2e:13:55:19:f7:5f:70:d9:95:98:3a:1c:
1d:ff:21:cf:5f:f4:66:8e:31:0f:5c:0e:95:11:89:
0f:e5:4b:89:ab:59:2a:43:eb:45:db:1b:e5:15:23:
4d:d0:6d:93:6f:dd:0b:b6:ab:96:d7:96:0b:69:9b:
85:78:75:0e:90:d7:56:ae:e0:ea:99:77:99:3b:a1:
ed:47:31:17:83:d9:2b:64:45:8a:f3:d6:23:55:bb:
ec:31:23:17:0b:ef:cd:6c:31:8c:88:65:6c:3e:15:
d1:db:83:99:a8:f0:48:a8:f1:0e:ba:8c:13:65:8b:
93:0d:83:3d:01:77:03:65:41:2e:02:4c:6b:ce:eb:
8f:d1:68:3e:ac:75:60:55:b9:6a:40:91:da:c1:bb:
f9:34:a6:4e:a5:bd:3f:d9:d2:25:35:cb:07:91:2e:
ef:36:db:9b:db:74:d0:65:9c:a0:b3:2c:b7:8f:4b:
3e:fb:c1:30:67:43:2e:44:46:19:d7:1d:e6:3b:08:
ed:bc:c0:c2:4e:95:7e:ab:0c:e9:53:9b:01:b2:35:
51:de:cf:6d:04:0d:00:2d:28:88:2f:7c:85:66:0f:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:12:29:2D:3E:2F:EC:04:11:86:03:A3:F4:34:8B:70:2B:81:03:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/cf040b57-0a26-3083-bc17-36a13f415ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:db:a3:9c:7c:84:af:be:9e:a8:1c:31:8f:3b:60:57:63:9b:
01:3d:d0:fa:dc:0a:f5:22:6e:de:d8:44:1b:dc:ff:09:c4:aa:
a8:bf:37:14:2b:65:64:76:52:4a:59:dc:bc:e1:ae:2d:7e:0f:
99:e1:5a:5c:fe:ec:e1:0b:2a:78:45:d7:04:23:f8:48:64:82:
5d:ea:37:77:4f:a7:b0:a9:01:04:f9:9f:c3:ec:11:b9:a8:17:
9d:a8:15:81:79:1a:62:58:03:ce:30:0e:ed:85:1b:b7:f3:02:
5e:ae:44:1f:5b:31:82:26:e4:92:f2:44:da:1b:bf:54:f2:51:
88:f9:d9:36:55:d2:e4:6c:6f:5c:85:c9:d4:16:08:7c:12:57:
59:ec:e1:9e:89:22:72:0d:dc:f5:b4:77:74:a9:c2:1d:0d:51:
95:22:ba:93:1c:e9:28:2e:20:c5:47:1e:e8:e7:b6:9a:87:1e:
fd:e0:c0:1a:5e:67:b2:ff:42:7f:6e:0b:6d:9d:63:f2:ce:27:
ab:ce:10:3a:d8:c7:99:58:de:d7:d9:ec:f9:e8:39:41:bb:8c:
2a:b8:df:04:e1:8b:bf:9b:92:0c:76:8a:29:7f:3d:3a:b5:72:
ef:78:9c:87:01:86:93:2a:08:bd:84:72:22:5a:67:cc:a3:44:
05:35:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org