Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/6384f54d-0c28-399f-9ac1-8d5b30015e9c.roa
File: 6384f54d-0c28-399f-9ac1-8d5b30015e9c.roa (raw, json)
Hash identifier: ZQ9I56uhLy4jLAYGz+FR3c4lgPWqUvYro9Sj4b/rWI0=
Subject key identifier: F7:50:45:1D:EC:9C:5A:DC:A3:3F:B9:DE:B0:12:54:54:4F:8C:0E:96
Certificate issuer: /CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Certificate serial: 010D0C9F4328583B7BD23A62FEFC97885BE1A400
Authority key identifier: B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/6384f54d-0c28-399f-9ac1-8d5b30015e9c.roa
Signing time: Fri 28 Feb 2020 05:00:00 +0000
ROA not before: Fri 28 Feb 2020 05:00:00 +0000
ROA not after: Tue 07 Jan 2025 05:00:00 +0000
asID: 31874
IP address blocks: 209.194.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:7b:d2:3a:62:fe:fc:97:88:5b:e1:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Validity
Not Before: Feb 28 05:00:00 2020 GMT
Not After : Jan 7 05:00:00 2025 GMT
Subject: CN=6a980525-7d07-4898-9c57-19f922d99da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:f0:0d:7a:f8:88:d6:d7:ef:24:a2:28:84:
14:f1:8e:2f:e1:6f:d5:c8:99:84:dd:82:d5:fe:31:
db:b9:ff:e2:04:4c:52:89:09:3c:36:64:8f:61:f5:
93:7f:6e:d9:c0:95:17:9e:8f:77:14:63:93:37:70:
d8:b1:38:34:51:e2:66:33:5b:fa:f2:68:52:ec:05:
6f:ba:5b:26:79:5c:4b:3c:87:20:76:4b:06:27:60:
9d:e4:57:7c:a7:cd:09:66:3a:10:85:7b:dc:ed:8d:
68:9f:bd:b4:5f:f7:0b:99:c3:fa:2b:70:4d:51:c3:
ab:7f:b6:08:de:89:38:ec:73:f3:75:75:99:c0:96:
82:53:79:77:52:c6:50:c4:03:f9:53:64:82:2d:e3:
b6:d4:3a:d4:77:f9:90:84:b7:1b:08:eb:5d:a7:ea:
de:57:4f:10:89:05:5c:7a:66:f2:ac:52:60:28:d8:
87:cc:f4:5b:31:7e:69:23:6c:5d:bb:fe:19:00:60:
a0:a6:70:29:6f:f6:ca:35:dc:0a:fc:7f:d9:75:d0:
72:61:40:00:be:b3:4a:32:45:9b:a6:a0:88:fa:51:
2c:af:d5:4e:bf:f6:7c:82:ef:be:28:b6:d3:8d:ac:
3e:52:87:a6:40:ad:d6:35:b4:0a:ae:aa:b7:01:f1:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:45:1D:EC:9C:5A:DC:A3:3F:B9:DE:B0:12:54:54:4F:8C:0E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/6384f54d-0c28-399f-9ac1-8d5b30015e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/4c96ceab-4c5d-4801-82cd-913921cb3c49.crl
X509v3 Authority Key Identifier:
keyid:B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.194.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b4:6e:90:80:cd:26:84:69:53:91:3b:7a:48:68:b8:a8:e6:
cf:f9:94:15:e1:fb:66:9b:b3:fc:b0:3d:35:5c:30:91:e9:b5:
f9:90:75:35:4c:c8:d3:63:8b:2b:33:1b:bd:4f:cb:a4:16:c2:
df:40:a5:6a:d7:29:49:f3:2d:d5:59:18:67:0e:17:9e:6b:6e:
71:0d:66:63:79:28:43:29:7d:4f:d5:e9:2c:7b:ea:83:22:ab:
29:1b:5e:a2:79:ac:fd:52:64:61:b0:31:74:5d:68:02:66:72:
cc:45:20:5f:e2:e4:48:b7:93:5b:66:2f:27:a7:1d:a3:dd:22:
32:f8:21:ad:2f:63:d4:1e:ed:6c:a0:5b:21:27:5d:e8:94:38:
87:ca:d8:ef:e0:b2:b5:c9:99:16:d1:82:d2:26:5e:8e:c4:de:
a5:d8:9c:89:89:54:eb:d4:0b:68:b6:c0:ab:59:17:ed:b6:00:
b0:12:3a:e7:34:74:1e:f0:d6:3f:32:6c:e9:f0:43:89:81:1d:
5c:43:33:06:ab:36:27:c5:da:04:5e:2c:34:cb:86:d6:69:77:
ec:f5:ac:e9:04:8d:3c:61:48:c6:5a:f6:8f:6d:f0:9c:e6:b3:
38:67:35:a1:29:93:e7:54:17:27:47:d7:2e:2c:49:25:e5:66:
5a:1e:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org