Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/44ded18d-7160-3c65-8b35-5d18002e5ea4.roa
File: 44ded18d-7160-3c65-8b35-5d18002e5ea4.roa (raw, json)
Hash identifier: tsKa6p+NY0mfPpQ/Trj57EjMgXhoOrFxPuBZwXbJ1Tk=
Subject key identifier: 57:55:44:D0:D5:9E:98:F2:2F:49:46:B7:FD:D3:BA:96:D5:C3:5C:BD
Certificate issuer: /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial: 010D0C9F4328583E14F668205CB80CCC7AAC7B00
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/44ded18d-7160-3c65-8b35-5d18002e5ea4.roa
Signing time: Mon 30 May 2022 12:00:00 +0000
ROA not before: Mon 30 May 2022 12:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 62785
IP address blocks: 172.96.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:14:f6:68:20:5c:b8:0c:cc:7a:ac:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Validity
Not Before: May 30 12:00:00 2022 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=aae19807-6748-47c7-a808-81cb745294c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:8e:bf:96:03:45:88:d4:9e:7c:05:98:e2:
76:13:5b:15:d2:69:d5:cd:36:74:78:7a:1f:2b:bd:
f9:a9:2e:ca:8c:b7:e2:43:75:e9:92:c6:cc:6e:a7:
28:9f:86:7a:3a:b3:ef:3c:03:1f:f9:ad:23:b7:a9:
a1:11:42:0e:af:fd:3f:d8:48:11:8a:e4:2e:3e:a6:
9e:28:fa:34:5c:46:39:8e:38:51:fa:f1:5a:34:cd:
c5:05:cd:79:22:16:3b:cd:97:c1:24:e4:4d:0e:e2:
ff:cc:c9:79:fe:ae:8a:df:01:6a:21:3d:14:8b:55:
e2:a9:13:37:92:a4:75:07:58:7d:08:42:63:b9:b6:
01:8b:47:e4:cd:80:86:0b:94:0b:18:f0:92:1e:57:
76:5e:8c:a0:1d:59:9b:05:bd:4b:06:24:b1:67:64:
bb:63:51:97:a2:17:ec:72:c8:96:ba:7e:7c:1b:ef:
a4:92:43:1b:8c:b4:d5:b8:45:5e:7b:fb:34:a3:93:
9a:79:75:05:2a:3a:45:0e:4c:e0:21:e7:8f:1c:26:
e2:64:b3:9f:0b:59:1b:6f:07:3c:6d:06:39:ba:8d:
0f:ad:6c:f0:f1:4d:16:41:60:cf:d9:46:f4:8a:82:
18:92:d3:d4:9a:5c:e9:ea:07:73:34:89:aa:d8:6e:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:44:D0:D5:9E:98:F2:2F:49:46:B7:FD:D3:BA:96:D5:C3:5C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/44ded18d-7160-3c65-8b35-5d18002e5ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl
X509v3 Authority Key Identifier:
keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:27:9f:43:b3:78:b8:25:56:69:b5:3a:aa:b6:6f:f2:da:1b:
fe:d5:5b:32:cf:1a:c3:8f:a9:64:a7:9c:23:2b:83:54:03:0a:
8d:00:ad:b1:ea:d9:1d:a7:c9:90:f1:cc:77:29:d8:58:f1:a3:
ec:fb:5a:c0:82:8a:94:fd:6e:31:59:0c:73:b0:f3:48:f5:e6:
96:72:ef:5f:33:39:06:a2:0e:76:b7:d5:26:0f:1a:61:a9:87:
4c:d3:b0:71:2f:73:fe:34:8e:38:39:61:93:d3:62:4b:01:81:
d4:c4:40:65:0f:eb:bc:07:a8:02:18:c5:00:e4:a1:6f:06:49:
ac:7c:c1:f3:c6:c6:1e:39:ca:f4:a6:92:a4:0b:d5:25:4d:64:
1b:64:6d:17:e0:85:4f:48:fa:c7:87:50:ff:07:6a:34:a0:a1:
98:36:50:12:3f:fd:c0:5e:8a:fa:83:a0:60:9c:05:d2:c4:7c:
fb:06:35:2c:67:ec:3f:35:f1:81:4f:fb:9e:71:19:f0:0a:24:
65:44:f8:54:1e:1a:d6:5e:ac:38:f6:f4:6b:b9:f6:e5:f2:a7:
75:44:4e:81:c6:d5:c4:a0:ac:dd:83:e4:f9:f0:af:e1:a4:c2:
f9:9c:eb:ba:0e:9d:78:13:b6:ab:ff:12:b2:1a:c6:16:b6:a6:
47:68:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org