Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4502498-5d70-3f58-a7d7-a4a5230deb5a.roa
File: a4502498-5d70-3f58-a7d7-a4a5230deb5a.roa (raw, json)
Hash identifier: mUqkiQOzoYSLS9aV4NDHH5WXA7Imdwu7yUwuaf6wKpE=
Subject key identifier: A7:45:7E:10:D5:DE:DB:18:CA:58:3A:D2:36:BD:B7:C0:D7:E2:C0:59
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665CD3A2E6
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4502498-5d70-3f58-a7d7-a4a5230deb5a.roa
Signing time: Wed 10 Oct 2018 07:14:25 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 3.0.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d3:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=04cd0384-ab95-47c1-b5ca-d1816a08fc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:b3:6f:88:ad:35:00:fa:ac:9a:a7:8f:3a:
80:71:a8:95:12:1e:6b:fb:db:e4:b2:44:24:44:c2:
23:c9:25:86:26:02:b4:28:cd:ca:3c:49:11:7a:30:
da:74:97:03:46:76:aa:7d:78:ee:62:d4:ab:7c:7f:
5b:40:9c:90:ff:d4:e2:6a:1d:47:aa:74:db:1e:cb:
c8:9b:b1:5f:df:09:dc:30:7c:c9:b3:1c:c7:cc:70:
c8:72:f1:56:b2:eb:1f:56:67:5a:46:6c:6d:fd:66:
db:a5:a7:d5:1f:18:12:a8:9a:28:9c:fb:67:a2:98:
b1:d5:dd:8d:65:51:80:b1:18:2f:3b:a8:96:a2:bb:
02:2c:6e:fa:45:f0:8b:d8:2c:9d:5f:53:c6:c8:5c:
43:0a:8e:96:40:18:bf:6b:fd:5c:97:49:43:ec:c8:
7a:33:e5:3f:58:f2:b6:82:0d:d1:c7:5a:82:fc:ed:
1e:a0:69:aa:a6:63:ed:c9:5b:80:84:2f:c7:fd:7e:
24:db:56:bc:89:b2:34:2c:f0:fa:05:1b:8d:2c:41:
c8:6f:e9:40:a1:0e:23:6b:fc:49:6b:e6:f3:66:80:
7a:e7:e8:f0:a1:82:77:e4:d8:46:1a:ae:6b:bb:6f:
c0:66:c8:13:32:b1:4b:30:7b:14:1c:a5:72:ab:4e:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:7E:10:D5:DE:DB:18:CA:58:3A:D2:36:BD:B7:C0:D7:E2:C0:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4502498-5d70-3f58-a7d7-a4a5230deb5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:e5:e4:f6:e7:db:05:0d:10:33:a8:b8:ed:38:9d:77:29:77:
b7:dc:a3:71:3e:c7:bf:50:04:7f:f3:20:a9:37:33:88:8f:25:
d5:9d:e5:d3:89:1f:97:0d:eb:aa:dc:43:d8:d7:b2:31:26:e6:
e5:44:57:16:b8:d3:bc:a7:2d:cf:93:be:79:8e:4b:c1:35:5c:
50:cb:68:8f:17:0d:23:b8:72:23:12:13:e6:51:45:66:1c:00:
2c:03:c2:30:09:57:c1:ad:6e:d9:ad:55:07:2c:39:a2:79:00:
fe:53:8e:0d:bc:19:24:e3:ff:8e:0d:07:71:84:be:89:c5:9c:
b5:8f:5e:fd:5e:b5:0d:37:f8:aa:2e:39:f0:5e:ff:01:88:eb:
9a:63:af:cf:b3:ba:2d:79:e4:e2:4a:99:13:5b:f7:14:1a:07:
5d:dd:98:8e:dd:9d:8a:d9:5f:f9:13:52:d3:fa:40:6e:62:7f:
0a:af:98:62:ee:b2:ff:b6:b6:73:f9:88:f1:f5:94:a8:06:f4:
7b:c7:41:ad:05:3e:48:b4:b0:ea:2d:20:79:06:b7:28:b7:65:
d9:b3:3f:82:c8:2f:61:56:68:6c:d5:be:d7:f2:6a:4b:da:04:
07:6f:4d:cb:ed:0b:18:57:52:10:14:34:24:dc:0d:04:3b:90:
bc:c4:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:09 2023 by rpki-client on console-fra.rpki-client.org