Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/a5e2834b-914a-3d5f-ad50-dec2fc8dda7e.roa
File: a5e2834b-914a-3d5f-ad50-dec2fc8dda7e.roa (raw, json)
Hash identifier: pEPMgOPkxnDu9VCC70Wmj5K6eL4xwGUyG0teZ3Irj/I=
Subject key identifier: 31:DE:45:BF:7B:54:78:8A:AF:D9:AD:C2:AC:30:E5:18:F3:3E:08:87
Certificate issuer: /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial: 010D0C9F4328583CCAB1EC501391D8F0D2CE9300
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/a5e2834b-914a-3d5f-ad50-dec2fc8dda7e.roa
Signing time: Wed 02 Feb 2022 05:00:00 +0000
ROA not before: Wed 02 Feb 2022 05:00:00 +0000
ROA not after: Wed 09 Mar 2022 05:00:00 +0000
asID: 7224
IP address blocks: 172.96.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ca:b1:ec:50:13:91:d8:f0:d2:ce:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Validity
Not Before: Feb 2 05:00:00 2022 GMT
Not After : Mar 9 05:00:00 2022 GMT
Subject: CN=29946fb7-17c5-4436-aee7-272ff014c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:8d:7e:8c:12:f7:9f:45:2e:8d:22:3a:e3:
78:78:7c:cc:3d:d5:b5:83:1a:49:d9:75:fc:4b:f9:
7b:cf:af:b6:d1:84:a0:2d:a3:1e:15:75:5e:33:e2:
d9:c0:26:97:9c:7c:d9:4d:da:ed:c3:6f:ef:67:c2:
87:ca:d2:3d:12:4f:83:02:c8:80:ea:cd:0b:3d:e3:
08:e5:1e:6c:b5:5c:cd:7a:ec:65:e8:e4:00:f4:c8:
78:72:64:cc:c9:2c:57:52:70:17:eb:09:08:b8:f6:
09:8d:e8:f3:ad:f7:a9:6c:d0:a8:20:8d:56:59:99:
f0:4a:a2:b6:92:a1:7f:d3:8a:5d:71:6b:5b:d4:b3:
e1:ff:1f:7f:d6:02:cb:05:bf:c7:32:77:29:fe:23:
eb:cb:f4:35:10:c8:01:fa:3c:a7:a8:ce:d2:9d:0e:
ce:cd:2e:b4:f8:d2:ec:93:5c:25:a7:d7:20:62:5f:
f1:bc:0e:34:1c:4b:73:37:fc:1d:29:91:b0:9d:54:
81:78:43:8b:0f:dd:a3:3a:a1:ee:de:58:a1:eb:17:
87:d2:90:03:e7:7f:f2:b6:06:cb:fb:96:cb:47:d6:
88:9a:8b:91:e6:cd:d3:07:82:c9:57:25:d3:be:ff:
06:65:90:e6:6f:c3:18:47:4f:35:77:6a:94:7d:52:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DE:45:BF:7B:54:78:8A:AF:D9:AD:C2:AC:30:E5:18:F3:3E:08:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/a5e2834b-914a-3d5f-ad50-dec2fc8dda7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl
X509v3 Authority Key Identifier:
keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:6c:bd:fe:48:0c:53:db:bb:e0:9f:47:73:94:49:82:f4:84:
98:09:23:ca:73:bb:8b:09:1e:b9:e0:fd:76:ab:6f:c0:f1:73:
ab:50:c0:4b:ef:68:63:ee:f0:41:50:fc:62:a2:34:20:0c:8c:
d1:35:74:bc:c1:7d:e3:9d:71:20:98:82:25:21:fa:ce:6c:c0:
97:78:4a:c6:29:49:bd:2f:7b:a6:a1:5c:b1:fe:e8:c3:e6:21:
a7:82:0c:6c:8f:26:9e:0b:c4:1f:ba:60:d7:0b:65:23:73:8c:
5d:b8:64:65:6c:8a:85:40:3b:07:3b:80:72:38:f5:c8:2e:a7:
32:56:40:ea:96:f2:d6:b5:df:c4:ed:92:c6:7c:8b:98:bc:ab:
4e:58:94:26:aa:85:e6:c3:e7:e3:e1:fe:67:91:e7:8c:86:a7:
05:1f:ca:31:64:0d:12:af:7c:f0:57:68:af:03:e7:2b:f5:c7:
b6:99:bf:e1:96:0e:7f:09:6a:5a:eb:71:db:d9:96:aa:48:be:
32:f5:29:e9:c0:81:9f:14:b0:8c:88:28:c4:ef:e0:8a:e8:67:
d3:cf:ca:52:5e:2a:a5:60:4a:76:27:2b:ea:4a:61:8d:15:d6:
2d:ea:08:ca:ab:07:dc:e4:5b:b4:26:3d:8e:b8:ed:38:97:ca:
38:3e:0c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org