Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/e6f5832f-abec-3287-81cf-809fe5eada55.roa
File: e6f5832f-abec-3287-81cf-809fe5eada55.roa (raw, json)
Hash identifier: 9/axKRRbC/LGdTXzrYlYt3Ul6lXZOB7eGZYN92mVHSI=
Subject key identifier: 07:F8:14:5E:B8:2F:0C:3A:96:55:E1:AF:91:65:E6:96:D9:88:B2:67
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328583BC8E70BFC89EEB1D156B20590
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/e6f5832f-abec-3287-81cf-809fe5eada55.roa
Signing time: Mon 01 Nov 2021 04:00:00 +0000
ROA not before: Mon 01 Nov 2021 04:00:00 +0000
ROA not after: Sun 04 Feb 2024 05:00:00 +0000
asID: 63949
IP address blocks: 170.187.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:c8:e7:0b:fc:89:ee:b1:d1:56:b2:05:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Nov 1 04:00:00 2021 GMT
Not After : Feb 4 05:00:00 2024 GMT
Subject: CN=a1d8b75e-4393-4269-b51b-250850e7f4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:b9:76:a6:c9:57:2c:c8:87:39:4f:c7:2b:
25:59:36:f8:c1:8a:8b:eb:a4:db:36:96:72:6f:5c:
07:a9:c2:5e:a1:13:0a:df:b1:6e:bb:9c:32:ca:b8:
9e:f9:9d:d3:aa:b2:e0:ee:56:fb:20:c1:5b:7b:3c:
71:30:7e:52:13:ca:c9:ab:83:bc:7c:70:d0:2e:0e:
ca:bc:c2:9e:9d:85:d5:90:60:4d:f3:2e:0b:1c:bb:
72:62:fe:26:94:c5:0a:79:23:22:89:48:f9:16:d3:
6a:8a:c3:56:35:bb:71:b5:10:ae:d3:b2:6e:84:9d:
63:3e:c6:2b:a4:93:4e:b6:e0:d2:40:b4:e2:9c:33:
2d:c0:58:7a:71:3e:a8:67:eb:e4:eb:d0:c0:0e:42:
f1:83:bb:ea:ad:4f:fd:f5:c6:f1:39:40:7c:ff:dd:
0d:65:68:eb:45:0a:b9:34:be:af:5d:e5:8a:2f:4b:
6c:3c:ee:51:b1:64:7a:42:56:cb:a7:f5:cc:ae:86:
bd:14:e0:83:c0:66:8b:f8:64:71:6d:e9:1f:76:61:
95:d0:1b:78:5d:ae:b6:1e:fc:c2:aa:83:e9:c7:96:
c2:c6:06:ca:1e:44:69:5a:07:4d:d8:40:87:70:38:
ad:45:a0:81:af:48:18:ea:80:77:0a:6f:5f:61:56:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:14:5E:B8:2F:0C:3A:96:55:E1:AF:91:65:E6:96:D9:88:B2:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/e6f5832f-abec-3287-81cf-809fe5eada55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
170.187.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e7:24:6e:4d:04:7c:28:c7:b5:bd:47:5a:a9:8a:54:12:73:c4:
9f:34:cd:4b:0c:b6:02:69:c1:d8:17:c9:9b:3f:2c:21:48:1c:
b2:54:e7:99:42:55:7b:f3:3a:06:b1:fd:63:96:9b:84:f6:f0:
b1:9d:a1:0f:5a:1c:1d:ab:83:72:de:04:bf:89:5b:07:3b:ce:
db:3f:d6:65:2b:e1:21:bc:da:c6:38:b8:74:dd:a7:05:f7:7b:
25:f9:a2:d1:a6:0d:8d:f2:a5:26:bf:b0:10:d0:e8:60:79:d7:
d4:f5:7e:8a:0b:8d:1e:1a:4a:fd:66:44:05:aa:4d:97:62:ef:
2c:f8:68:20:bf:8c:f2:a5:60:26:22:40:92:5b:43:83:62:82:
b7:86:99:92:a5:9b:8a:0b:8b:06:bb:73:8a:2b:8d:41:11:0f:
14:9c:12:d3:55:44:0b:26:a3:a0:68:05:16:6f:33:6e:b4:82:
0f:3a:15:40:c3:65:1c:b8:2a:ad:9b:68:7f:e6:19:ce:ff:9f:
3e:26:82:d8:ad:73:ee:ec:85:79:7d:8e:a7:57:5c:9e:50:55:
75:d3:ab:29:b4:a0:af:63:e2:58:87:84:d0:bd:9c:89:28:d8:
fb:9b:d2:7b:49:44:14:b8:4a:81:0a:68:3d:02:9c:67:e4:27:
2e:85:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org