Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa
File: 40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa (raw, json)
Hash identifier: P6n5YOaOlQQXDapi6Z8QOtioeyQWm3sQ+N3xj4uNPKc=
Subject key identifier: 87:8B:C7:33:9F:CC:54:4C:95:AE:76:3D:7D:2E:5A:20:8D:4A:5C:49
Certificate issuer: /CN=c08201ae-1993-4de4-a7ce-caf065422476
Certificate serial: 010D0C9F4328584563F310FA491230C5B63F1700
Authority key identifier: A3:40:28:9A:42:21:55:A4:7B:A6:F2:C8:F7:A6:42:D8:A2:CF:3A:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa
Signing time: Sun 31 Mar 2024 13:00:36 +0000
ROA not before: Sun 31 Mar 2024 13:00:36 +0000
ROA not after: Sat 29 Jun 2024 13:00:36 +0000
asID: 16509
IP address blocks: 204.153.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:63:f3:10:fa:49:12:30:c5:b6:3f:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08201ae-1993-4de4-a7ce-caf065422476
Validity
Not Before: Mar 31 13:00:36 2024 GMT
Not After : Jun 29 13:00:36 2024 GMT
Subject: CN=8546077f-0a1a-4ecd-af8f-7c0433f8aebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:3c:00:42:25:42:5e:24:bd:28:0a:ce:cd:
78:4e:db:64:47:ea:47:d1:f8:29:01:bf:ac:09:42:
02:11:bf:48:ad:1c:5b:e8:02:d8:d5:74:2a:0b:f8:
61:cd:3a:d1:81:aa:11:54:b1:ec:4e:f1:99:4e:3d:
58:d6:c6:f9:ce:1d:a5:35:09:12:54:2e:7e:9b:2c:
bb:ad:61:b7:66:50:97:b7:18:e6:ac:a0:4a:a5:9a:
de:31:e7:7c:13:57:e8:bf:54:98:6e:33:39:ff:0d:
92:79:b9:05:e4:dd:eb:5a:ff:71:8b:29:6b:ae:41:
fd:de:0a:de:cc:bb:5b:b1:c0:64:38:57:6b:32:f4:
fe:a4:47:ca:b2:3e:1f:dd:61:24:27:1a:6f:c1:d8:
67:20:36:f4:13:f4:5c:7b:bf:42:a1:d4:35:67:a9:
d1:8a:f2:55:a9:a9:e7:70:70:ce:26:58:5f:bd:61:
59:8c:2d:36:60:0b:15:d9:42:93:d3:20:49:de:24:
e8:7f:6f:e7:7d:67:1e:df:23:7b:9e:60:a8:9c:e7:
91:ee:4a:cb:bf:87:73:d2:0f:7b:33:f4:e4:d9:87:
6d:15:ce:63:7e:75:0b:f9:40:cb:15:c3:44:ed:ca:
32:aa:2c:de:e9:04:b7:08:1a:f2:b2:d7:87:a6:fd:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8B:C7:33:9F:CC:54:4C:95:AE:76:3D:7D:2E:5A:20:8D:4A:5C:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/c08201ae-1993-4de4-a7ce-caf065422476.crl
X509v3 Authority Key Identifier:
keyid:A3:40:28:9A:42:21:55:A4:7B:A6:F2:C8:F7:A6:42:D8:A2:CF:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476.cer
sbgp-ipAddrBlock: critical
IPv4:
204.153.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:e3:9b:16:bb:da:40:1c:c7:be:0c:51:24:15:5d:f6:04:8f:
87:a3:2e:db:9a:09:96:46:b4:e9:a0:45:9f:74:ee:84:de:04:
0b:6a:9d:e6:34:26:42:66:9f:98:a1:4a:77:ec:07:57:ca:63:
5c:a5:46:8f:16:84:70:7e:71:99:42:c1:81:b2:cf:5f:67:d5:
cc:71:64:14:45:d5:25:f4:05:ac:ea:c0:62:0a:82:ad:6e:41:
21:8e:55:a0:dd:5e:c3:1d:fb:52:1e:3c:0c:6d:97:b0:8e:37:
36:ef:a7:84:ee:0c:19:b9:10:96:21:86:26:6f:3a:55:92:84:
4f:97:8b:30:2a:70:8d:5a:e5:80:86:64:ba:51:dd:ff:bf:70:
5e:8a:f0:a9:14:27:c4:61:1d:69:22:cd:9e:a5:22:fa:28:77:
ce:e2:68:d4:27:e6:17:79:c0:c4:fa:7e:01:39:ef:01:8d:29:
cb:61:3e:bc:03:32:2b:ba:ec:d5:ef:82:23:04:fb:73:2c:0f:
15:00:74:68:53:3d:13:99:19:52:ba:b4:af:70:24:7d:f1:ca:
c6:d0:bf:a5:76:88:ec:17:2f:72:c9:0d:ab:d6:d3:08:3d:15:
bf:72:65:36:22:ac:c1:05:be:6b:54:f2:60:f5:24:6a:df:2f:
a7:f7:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----