Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/68ade040-a214-30f1-9858-332b20a8c5c6.roa
File: 68ade040-a214-30f1-9858-332b20a8c5c6.roa (raw, json)
Hash identifier: 4uDtU9Gm5uGCFd/Ctz/wIH9op2OBSh86PZ8RlQZ/n04=
Subject key identifier: 1C:F0:76:73:3D:7E:75:9F:7C:6D:65:82:06:F1:23:B6:04:51:C9:DF
Certificate issuer: /CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Certificate serial: 010D0C9F432858440183BB02BEF44B728AF58F80
Authority key identifier: 82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/68ade040-a214-30f1-9858-332b20a8c5c6.roa
Signing time: Sat 25 Nov 2023 14:00:21 +0000
ROA not before: Sat 25 Nov 2023 14:00:21 +0000
ROA not after: Fri 23 Feb 2024 14:00:21 +0000
asID: 3356
IP address blocks: 162.251.170.0/24 maxlen: 24
162.251.169.0/24 maxlen: 24
172.82.36.0/22 maxlen: 22
162.251.171.0/24 maxlen: 24
162.251.168.0/24 maxlen: 24
2602:fec5:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:01:83:bb:02:be:f4:4b:72:8a:f5:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Validity
Not Before: Nov 25 14:00:21 2023 GMT
Not After : Feb 23 14:00:21 2024 GMT
Subject: CN=4864bf88-88b3-48bd-a1ff-0594a6b92cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:16:45:40:00:9e:c0:0f:76:18:99:c7:25:
a7:3a:05:12:71:7f:7c:24:11:1a:35:d0:a9:b0:08:
47:86:57:8e:99:01:cc:1c:32:7c:54:31:00:bc:d4:
ff:cc:67:5b:26:cc:5d:c2:a7:9c:44:a5:45:62:d8:
4f:33:a9:fc:a3:2a:d9:63:2e:42:71:04:54:15:f8:
a7:eb:e0:e2:ac:7c:9f:04:01:99:99:7e:20:81:13:
10:9e:dd:e9:6b:f0:d9:bc:8b:a1:8a:2f:3b:dd:03:
09:cd:1d:68:91:c0:77:bb:bd:7b:50:a0:5d:bb:79:
96:ca:c9:c7:e0:2f:22:ec:86:d4:10:a5:14:54:27:
a5:4d:93:ec:19:e0:b8:fd:9d:49:2b:b2:bb:8c:69:
61:63:e0:79:24:1b:17:a1:d1:e6:3e:fa:80:3d:a5:
dd:61:54:2c:f8:18:f8:09:aa:c9:79:7c:3f:93:8f:
ec:dc:cc:58:a9:6e:68:8a:07:c1:c2:c6:c7:08:4e:
78:72:df:18:1b:ca:92:15:89:44:ce:99:08:5c:14:
77:c5:91:56:65:5e:9a:4e:28:78:65:c8:18:b0:5f:
5c:97:b0:c8:56:b0:02:e2:e7:a6:f0:d0:f1:ec:cf:
28:03:f7:d4:69:a3:16:cc:dd:ae:32:de:b2:44:07:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F0:76:73:3D:7E:75:9F:7C:6D:65:82:06:F1:23:B6:04:51:C9:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/68ade040-a214-30f1-9858-332b20a8c5c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/b93a83dc-e910-416f-88d0-d8d64914eb02.crl
X509v3 Authority Key Identifier:
keyid:82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.168.0/22
172.82.36.0/22
IPv6:
2602:fec5:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:19:a4:eb:e4:31:21:f0:14:1f:1d:02:a6:b9:a2:6f:b0:d6:
02:0b:d6:4c:90:17:2d:da:c4:2a:f6:51:9c:d0:a1:72:77:ed:
8d:de:c0:e9:63:54:3a:33:fd:ae:01:c1:ce:2f:f8:4d:30:de:
7d:6a:42:6c:0f:51:20:99:9f:21:83:9f:1d:de:75:86:27:b9:
fd:92:c1:4a:33:2d:a7:bd:cc:ac:4e:fd:7a:44:9b:bc:7a:4d:
1e:61:21:4d:8d:24:0e:c7:45:7a:85:be:39:58:7a:25:5e:6c:
24:1e:ca:e4:ad:41:6b:fc:cc:f9:a9:29:d6:6f:1c:d1:f9:80:
0f:7f:af:d1:58:37:80:19:1d:d9:f3:c4:83:7a:82:2a:fd:16:
0f:e8:e4:4b:2d:f7:ff:a7:18:4d:9e:24:bf:44:30:76:8d:c7:
cc:6e:c2:2c:47:af:9b:82:b6:d3:e8:5b:e5:87:7c:e5:94:8a:
09:17:8f:26:3d:c4:5c:96:6e:b6:b5:92:a4:5c:49:c5:81:4d:
5b:0a:fe:9c:c8:fd:6d:37:d9:cb:6b:34:9a:6d:e5:b0:cf:b4:
cc:8a:91:51:b2:31:f2:62:df:b8:54:7c:0d:fd:90:46:4f:95:
59:42:df:73:60:f2:67:f0:f8:71:b6:70:6f:c4:08:64:74:22:
61:46:d0:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net