Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/1bd70cef-a789-33a3-81e1-f946e86a5f63.roa
File: 1bd70cef-a789-33a3-81e1-f946e86a5f63.roa (raw, json)
Hash identifier: pLWhSBgA++TzczwLFThTJX14A1e8P3I8nibMc7FiIcA=
Subject key identifier: 74:90:9E:65:1B:BE:C4:8C:90:DC:81:47:AB:A5:07:C1:64:A4:AF:F0
Certificate issuer: /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial: 010D0C9F4328584006D9957B7530D71B2768BF10
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/1bd70cef-a789-33a3-81e1-f946e86a5f63.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 7224
IP address blocks: 172.96.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:06:d9:95:7b:75:30:d7:1b:27:68:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=a1d2d27a-4c6d-45e8-8a83-829a7decfd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:bc:ea:82:19:a2:d9:a7:36:5f:6c:e0:f6:
73:89:9f:cb:a1:ac:5c:77:ff:ed:40:b3:a0:64:eb:
c8:ce:34:49:1d:50:9e:fd:d7:8e:34:e4:58:87:7d:
cc:90:e0:9c:76:27:bf:ba:e0:61:d5:1e:93:3c:e9:
31:72:00:48:9c:56:7c:ec:0d:05:27:06:32:b5:e8:
13:49:c7:68:61:9d:e0:2d:28:1e:60:dd:3d:c7:c2:
f0:ac:5b:2d:d1:79:ed:54:f4:68:8a:fe:85:75:ab:
f6:18:e4:ee:18:aa:6b:bf:70:4d:dd:19:2c:4a:9d:
37:c0:4d:1a:a3:2e:d2:2f:09:ca:9a:ab:4b:f0:c7:
43:7d:a0:f1:b6:17:5e:e9:bc:8c:d5:6c:2e:15:2b:
48:9c:12:57:fb:fa:d1:f4:e0:4d:d5:0f:d2:bd:87:
f2:dd:88:38:51:b2:8b:9a:17:ae:28:a8:45:48:66:
d1:6b:ef:be:1c:c6:70:4e:14:f3:d2:07:49:60:0d:
f0:5f:3f:c1:4b:b4:10:aa:7e:ed:1c:8e:f2:07:da:
2b:11:43:37:89:ff:9e:3f:4e:b9:3a:1f:ac:3b:4f:
2a:2b:8c:8a:7c:41:03:8c:44:90:82:e8:7a:5c:8b:
64:71:ce:77:34:dc:ff:69:a5:af:d0:b1:90:51:33:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:90:9E:65:1B:BE:C4:8C:90:DC:81:47:AB:A5:07:C1:64:A4:AF:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/1bd70cef-a789-33a3-81e1-f946e86a5f63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl
X509v3 Authority Key Identifier:
keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:d4:8b:54:34:5b:34:33:47:23:8e:65:e6:64:91:3e:17:7c:
5b:62:46:29:07:b6:13:77:af:69:77:d1:58:00:51:51:38:d7:
ea:dc:76:e6:97:68:1a:0f:b2:b5:92:dd:36:2a:8b:f7:9f:96:
a6:5e:27:64:a6:1b:63:fb:9e:b7:14:32:bc:b3:bc:65:27:67:
16:32:c7:96:2b:d1:62:7f:82:d2:56:11:4a:34:67:77:87:5f:
87:78:04:a0:6e:a5:46:55:4b:b6:3c:27:f4:e1:02:b8:94:75:
6d:b6:96:8a:98:6e:25:47:8a:1f:00:50:1b:a7:4a:26:2f:95:
36:bd:ba:1a:e2:b2:33:61:e2:41:17:3c:34:fc:0c:a3:64:2a:
bc:9d:97:c7:c5:70:a6:87:02:97:9d:f6:75:8d:8d:d3:e3:97:
ca:ce:7e:db:df:c5:db:e1:34:7c:3c:12:d5:18:dc:36:47:73:
65:83:fe:a0:4e:4c:ee:aa:6b:a4:79:ef:9c:51:24:a4:51:0e:
d1:22:1a:c7:ae:fb:c6:49:68:e9:3a:53:6a:19:7b:ad:cf:91:
6a:78:71:46:70:17:da:99:dd:a7:65:e1:5c:f6:dd:1b:51:30:
cd:d0:15:c9:d5:39:72:58:39:af:ce:e7:1d:7f:c8:9a:16:42:
ca:72:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org