Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03bb46e8-2bee-354a-b98b-8bf7fa99718e.roa
File: 03bb46e8-2bee-354a-b98b-8bf7fa99718e.roa (raw, json)
Hash identifier: nqP18/DkRNsUbe+rS+/QLSx3uq9AZ0CPZNI7MpqxI3g=
Subject key identifier: 4D:01:19:92:5D:52:F8:C0:B2:18:AB:33:28:39:2A:72:82:CF:A1:6E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406B86EB0A955AE6B85AF6CB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03bb46e8-2bee-354a-b98b-8bf7fa99718e.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:86:eb:0a:95:5a:e6:b8:5a:f6:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=2275d19d-8d0c-4e7a-b6b1-cb51927d9496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:3b:65:80:3f:79:c9:7d:18:67:4c:c3:17:
9b:17:73:e2:79:57:26:ee:db:3e:9b:fe:c1:14:8f:
66:ec:3e:fb:3f:73:b9:69:45:69:71:e0:0b:69:fd:
e8:a1:b5:d4:a8:0a:fe:50:d3:4a:35:a8:42:82:81:
d2:26:a3:d5:d5:fb:53:ad:07:f7:57:5c:4b:36:b3:
c6:eb:96:96:35:56:75:af:a5:4a:c6:93:64:32:3b:
b6:c0:c0:11:cb:84:cb:52:05:54:ac:75:8f:96:52:
a6:6c:99:9f:fe:e9:bf:a8:a6:73:db:16:9a:38:95:
a5:3e:91:d0:fe:b3:e2:36:23:44:30:32:f5:8f:6c:
c5:ff:c6:76:90:6a:06:7b:4e:32:e5:89:51:98:ff:
d4:ed:5c:60:e2:e1:e7:07:9f:06:0c:f0:73:54:df:
8c:06:87:6d:05:7f:11:10:9e:34:29:8c:90:ae:74:
48:5a:75:f2:5f:00:84:43:68:08:3d:ca:06:83:70:
9d:58:21:26:92:31:8d:75:1b:c6:5b:b5:b4:fd:83:
fe:a8:e9:e1:68:7e:1b:0c:7d:91:cb:27:90:31:15:
28:1d:c2:e2:bc:12:c7:3d:c2:fc:15:9e:13:30:b8:
a1:2a:df:b9:69:93:ae:c9:d1:d2:e6:03:b0:6c:0e:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:19:92:5D:52:F8:C0:B2:18:AB:33:28:39:2A:72:82:CF:A1:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/03bb46e8-2bee-354a-b98b-8bf7fa99718e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:7b:25:c4:8f:13:58:f3:c0:e7:42:ee:7f:5c:f4:c0:74:2c:
4b:b2:36:25:bd:33:ab:eb:66:41:a7:70:6c:42:31:78:bc:8d:
d3:14:5c:59:b5:f7:a1:ca:e5:9a:57:c7:66:5e:82:48:b8:a1:
32:c4:10:9a:a5:9f:a7:24:0f:2e:07:bd:b3:4c:de:bc:42:8d:
2e:1e:4c:ee:15:50:e7:7c:73:6a:8a:47:32:6e:f2:11:4d:df:
03:2f:c4:43:de:d7:a4:ac:72:37:3d:59:13:3e:31:16:d3:c1:
82:27:75:6e:65:a7:f7:b7:c3:cd:fc:1a:3b:42:77:8e:57:2d:
17:d9:d3:e8:4b:b3:e4:ac:ea:59:b5:c5:0d:e3:2d:22:57:88:
96:e9:c9:6e:c4:37:1d:fe:c0:7d:5e:a7:02:cd:3a:bf:d7:e9:
e3:d6:ef:8a:59:d2:86:3a:53:9a:ed:23:c1:ff:b5:99:7e:87:
fc:d9:87:0d:e8:21:a2:db:a7:36:75:85:83:30:d7:df:e5:54:
20:bd:58:67:46:12:73:bf:37:f2:0e:d4:df:e2:f6:4a:39:14:
66:aa:7a:91:7d:52:10:10:f4:a7:fd:fe:b9:12:f4:79:9f:1c:
cb:f1:ec:2e:cc:fd:db:9d:d5:bf:ce:3f:0e:17:38:04:a6:1f:
6c:4b:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:19 2023 by rpki-client on console-fra.rpki-client.org