Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/ae023001-8474-30bc-9aa5-b97fefb85e11.roa
File: ae023001-8474-30bc-9aa5-b97fefb85e11.roa (raw, json)
Hash identifier: xRjMUdiUevQ53ei1LMCQ6EhNQFVHxsKAh+DpYh/cca4=
Subject key identifier: AB:5F:F6:C8:E8:02:51:5F:86:7D:2F:63:6F:16:21:FB:F5:9D:19:74
Certificate issuer: /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial: 010D0C9F4328583D51489C5DDCC6570B82A52880
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/ae023001-8474-30bc-9aa5-b97fefb85e11.roa
Signing time: Tue 22 Mar 2022 04:00:00 +0000
ROA not before: Tue 22 Mar 2022 04:00:00 +0000
ROA not after: Tue 26 Apr 2022 04:00:00 +0000
asID: 62785
IP address blocks: 172.96.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:51:48:9c:5d:dc:c6:57:0b:82:a5:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Validity
Not Before: Mar 22 04:00:00 2022 GMT
Not After : Apr 26 04:00:00 2022 GMT
Subject: CN=a85dc5ff-b43f-40eb-919f-d26c3a026117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:2c:99:5f:44:10:54:1a:bc:7e:50:5b:fc:
ec:c6:73:13:d4:d1:fe:55:27:4b:94:ad:b0:ae:2d:
14:8b:6a:a0:2a:7d:67:11:f4:df:f2:83:1d:04:10:
ba:78:a0:90:16:62:9f:41:29:df:c8:e2:b4:3e:17:
4a:5d:54:8d:b8:cf:9c:c6:22:ca:1f:66:20:6c:50:
ef:23:c9:be:99:92:3b:e5:36:c3:c1:dc:f7:aa:7d:
f6:95:8d:91:d8:47:6f:75:7f:ba:ed:d1:ba:4e:a1:
c5:0e:5f:3f:0b:0a:14:2e:7c:25:ac:09:4c:62:5f:
05:4d:88:20:74:90:c7:cf:bb:d7:f9:97:c7:06:7c:
e4:4b:99:67:b2:e6:51:df:f0:fc:df:a9:29:54:79:
72:15:9d:86:61:58:84:15:3d:5e:3f:64:1d:a1:ab:
93:8c:2d:b6:9b:db:cb:38:7e:50:93:e2:e4:61:95:
22:2f:4e:b3:b8:c1:2e:56:ae:07:cd:96:ef:fd:f3:
2c:32:72:68:3c:f7:ca:00:69:14:03:35:66:88:cf:
4a:a7:0b:60:61:25:71:73:84:f8:79:90:f9:74:80:
a8:cb:53:52:36:3b:89:59:2f:5b:49:db:f3:5a:f9:
d9:69:1b:33:e6:e9:6c:75:7b:5b:42:15:11:11:5a:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:F6:C8:E8:02:51:5F:86:7D:2F:63:6F:16:21:FB:F5:9D:19:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/ae023001-8474-30bc-9aa5-b97fefb85e11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl
X509v3 Authority Key Identifier:
keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e7:5f:5e:5e:2c:74:7f:22:47:eb:5e:1a:7f:5b:8a:cf:8c:8c:
b5:8e:b8:93:55:cc:76:8a:ed:e1:c7:3b:01:74:da:cb:91:c8:
69:75:af:a8:44:64:9a:8b:4c:af:1a:a1:6e:d0:41:85:31:58:
48:1c:4d:ab:9b:f5:cf:d7:f9:01:3a:4d:e7:7a:a0:91:f0:8f:
c3:ea:c0:f2:4d:66:cd:ec:e2:9b:02:fc:da:71:2b:bc:76:df:
e7:49:b5:22:2b:1b:5c:16:77:23:55:9d:d8:16:21:46:e2:a3:
ac:c4:df:be:77:f9:ad:d4:61:73:34:22:06:ad:b9:85:98:f4:
57:6c:12:a1:28:35:f7:16:a5:95:3a:18:dc:6a:37:45:83:bc:
93:90:4e:0f:4b:30:35:37:63:ad:93:a8:56:80:0b:a5:41:d7:
ad:48:57:b2:75:49:8a:02:6b:25:d5:11:54:a2:66:4a:22:bc:
cb:fd:f8:61:35:31:1a:b9:ea:cf:5b:ec:0c:3e:f1:b0:7b:49:
a5:a8:3a:64:7b:18:8a:df:f2:63:a9:58:bb:e2:01:a7:61:fc:
d3:bc:87:f3:88:9a:4d:69:09:80:69:f2:bc:97:e0:45:d4:a8:
d7:85:74:17:a4:0e:ae:31:db:40:79:68:84:8d:b7:74:13:cb:
89:f9:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org