Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/1a207c59-272c-3d1d-a096-65539d29aa39.roa
File: 1a207c59-272c-3d1d-a096-65539d29aa39.roa (raw, json)
Hash identifier: z68fAsv/nV8RODCH+jWCEn8WYSj7rcJYXE5IDTUgyFw=
Subject key identifier: 77:81:0B:B1:E5:8D:CF:B3:72:BD:E5:50:0A:52:86:F9:3D:93:6E:D1
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F43285847BEF6CDF591EE146FE09F1C80
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/1a207c59-272c-3d1d-a096-65539d29aa39.roa
Signing time: Sat 02 Nov 2024 13:00:42 +0000
ROA not before: Sat 02 Nov 2024 13:00:42 +0000
ROA not after: Fri 31 Jan 2025 14:00:42 +0000
asID: 16509
IP address blocks: 198.145.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:be:f6:cd:f5:91:ee:14:6f:e0:9f:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Nov 2 13:00:42 2024 GMT
Not After : Jan 31 14:00:42 2025 GMT
Subject: CN=e447c78c-9874-4fc3-b97c-352e7506ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:44:51:31:32:93:b6:e6:8f:11:48:a5:a5:
05:a1:27:86:6e:52:f1:62:9e:be:25:97:f2:39:44:
6b:a4:ed:3c:2d:66:58:ad:f2:79:d9:6d:7a:49:a1:
e3:2a:20:05:b8:99:69:58:be:74:c4:0b:55:cb:34:
e4:77:49:20:9f:3e:14:8b:42:d0:16:b2:42:91:65:
ad:f4:f3:1c:40:93:cc:59:76:90:18:76:30:97:42:
6f:e8:e8:16:68:65:5d:03:9b:d1:a1:a6:2f:16:10:
02:2b:af:fb:7d:b3:1b:02:5b:2f:49:61:f4:e0:2f:
f2:2f:50:6d:cc:59:17:9b:f7:8c:f6:ec:46:51:9b:
0c:9f:16:1b:39:27:87:ef:f1:84:ec:22:b3:31:b0:
3c:92:3b:43:1c:39:c4:ee:db:d7:f9:95:4a:62:f8:
3a:22:8e:d0:b8:fe:4c:6f:c3:be:93:b3:d2:3f:04:
81:96:da:54:27:a0:81:bb:78:53:cb:68:ba:c7:f4:
3f:a8:a8:4e:5a:18:37:87:16:89:2b:f2:aa:0e:1f:
54:53:7f:00:f7:a6:da:d2:67:d4:2c:e8:ee:dd:4e:
72:d3:58:2e:7d:17:cb:81:17:e1:c2:9a:04:5c:de:
f9:84:6c:9b:09:24:b3:f3:84:c3:f9:76:73:54:7b:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:0B:B1:E5:8D:CF:B3:72:BD:E5:50:0A:52:86:F9:3D:93:6E:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/1a207c59-272c-3d1d-a096-65539d29aa39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:81:5c:01:4f:c0:93:5b:7f:76:51:60:a4:76:5a:3c:9a:2d:
91:e7:9c:bc:f9:6b:07:ed:c5:56:af:d2:06:e0:b5:20:88:a1:
c3:b4:70:da:22:53:c4:32:75:ff:f8:2a:c2:1a:ca:3b:86:ab:
dd:aa:5c:f6:c7:1b:d9:be:c5:8e:fe:00:ff:91:4e:93:7b:de:
45:e0:41:2e:a8:25:3a:92:2c:01:ed:f8:2c:e3:c2:f5:07:55:
39:1e:7e:5c:fc:ad:d5:54:2d:38:16:b5:3f:8c:1c:e6:a0:34:
22:c8:c8:a8:9b:b2:5d:ca:79:45:07:86:2b:be:27:3a:64:95:
04:f5:78:ce:1c:b4:0b:c8:9c:17:40:c7:cd:b4:3c:eb:ea:ed:
4f:20:b5:05:84:3f:11:18:05:7f:48:a0:b1:26:51:4b:1c:7a:
9d:82:39:e0:69:65:29:35:34:cc:b7:9c:a3:d6:31:96:0e:d0:
0c:c3:98:93:de:d2:fd:91:92:43:25:5e:9d:46:c0:e5:67:4b:
96:4f:c6:34:38:a9:62:b3:9e:dd:ea:a0:5f:42:69:d2:72:63:
d2:3c:79:9d:e3:3c:25:47:47:b8:88:3e:d1:a8:64:a0:24:17:
4a:ae:c0:9a:e0:f2:33:7e:bb:8f:09:33:cf:9a:95:7e:2e:d7:
ac:a2:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:06:00 2024 by rpki-client on console.sobornost.net