Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8b045cdb-402a-3ccf-8747-362aa9434f7b.roa
File: 8b045cdb-402a-3ccf-8747-362aa9434f7b.roa (raw, json)
Hash identifier: 5wr5ANWsPiwNiFkH7iEx3dEx0Nj6QE8jgicoWMh7tQA=
Subject key identifier: CD:04:CF:3A:3A:59:46:F6:8A:EC:91:B6:88:C9:90:1A:78:AD:82:C6
Certificate issuer: /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial: 010D0C9F432858478E1BC7A4C77970F10D256BC0
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8b045cdb-402a-3ccf-8747-362aa9434f7b.roa
Signing time: Wed 16 Oct 2024 01:00:31 +0000
ROA not before: Wed 16 Oct 2024 01:00:31 +0000
ROA not after: Tue 14 Jan 2025 02:00:31 +0000
asID: 394081
IP address blocks: 199.87.158.0/23 maxlen: 23
199.87.158.0/24 maxlen: 24
199.87.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8e:1b:c7:a4:c7:79:70:f1:0d:25:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Validity
Not Before: Oct 16 01:00:31 2024 GMT
Not After : Jan 14 02:00:31 2025 GMT
Subject: CN=d3f7fe08-689c-4cdf-8169-10b79102e6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:26:c1:a0:b7:5a:cc:8f:2d:36:74:3a:61:
67:d2:86:99:61:7a:0d:26:69:23:fa:ce:a4:e9:c2:
16:b7:e0:5f:85:41:f2:c0:c6:db:7e:0e:d8:4b:52:
0a:23:ae:3c:93:15:76:4a:63:13:65:c4:53:89:8d:
9c:db:7f:a1:09:69:5c:eb:45:55:0c:e7:59:2d:69:
e9:47:5f:71:27:2c:c6:cc:51:a5:eb:11:28:1c:7d:
21:5e:c5:05:af:fb:59:36:50:22:d9:5e:c1:16:f7:
98:fa:ae:99:ab:37:f0:37:4b:c1:cf:7b:33:5c:24:
13:4a:62:dd:b4:bc:f6:96:0f:ce:48:01:8f:a7:be:
42:fb:87:ed:97:07:aa:05:82:77:ed:87:ea:53:05:
b3:29:08:55:98:9e:49:17:5c:3f:f2:84:31:53:60:
cf:ef:0c:24:32:a0:9d:ad:27:49:f8:6a:3a:cd:42:
f6:a3:b1:c3:76:0e:08:cc:fb:38:9e:fe:31:a5:d0:
49:04:5c:8d:b7:5e:8a:4e:54:a3:c5:25:3b:c8:2b:
87:a1:c3:af:8d:53:f6:27:96:fc:4f:2e:26:37:48:
09:82:9a:5a:f7:ae:44:1e:55:cc:a8:b2:0e:89:e9:
99:87:08:8e:63:2a:42:1c:d2:08:37:5f:51:a6:c6:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:CF:3A:3A:59:46:F6:8A:EC:91:B6:88:C9:90:1A:78:AD:82:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8b045cdb-402a-3ccf-8747-362aa9434f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
X509v3 Authority Key Identifier:
keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ec:50:45:87:27:6b:46:ef:f3:0a:94:b4:cf:45:46:2e:12:
3f:8a:e8:c5:65:f8:b7:3a:ba:d6:c7:8f:c0:3b:6f:4c:ae:37:
db:cd:bb:0b:21:76:09:64:dd:b1:a8:6b:7d:e8:ea:51:65:fc:
dd:97:76:ef:b8:cc:19:81:2e:60:e4:4b:74:06:96:ba:89:92:
3c:a0:f2:2f:6e:be:74:6f:10:d4:53:02:fa:cb:c1:77:c2:f0:
74:84:9d:b6:92:d4:70:18:17:c5:1a:0f:1b:b6:b3:f1:ce:f1:
a5:cd:8f:9a:29:ea:b6:50:a0:2d:ee:21:e1:34:d7:60:a3:0d:
87:00:7e:04:77:dc:f5:e0:82:d8:20:0c:3d:46:7a:2a:d0:33:
64:88:52:23:99:09:1d:35:28:18:bb:a1:c2:34:f3:82:ab:da:
ea:e9:82:23:ba:c1:93:16:98:04:fb:3f:42:fb:1e:d0:8b:ae:
16:82:33:94:a4:9f:96:9d:bb:11:bd:00:e8:c4:1d:dc:df:46:
1d:48:fc:03:2f:66:8a:92:08:c5:58:70:b4:ab:80:99:37:5c:
6a:21:06:ca:6a:ff:d1:cb:ef:95:85:99:2c:39:b9:a8:b1:e2:
fb:75:f8:9a:c5:05:3c:09:93:f6:bc:4e:75:d7:13:10:39:f8:
57:37:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 03:22:27 2024 by rpki-client on console.sobornost.net