Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d95e459-02d0-3392-a715-4d29a2dd22a0.roa
File: 0d95e459-02d0-3392-a715-4d29a2dd22a0.roa (raw, json)
Hash identifier: owzZBAZf8XM427UWv6k774xaAstIaXj9Hn97tdvrijo=
Subject key identifier: C7:46:FB:3E:43:A1:99:55:5F:1E:DD:63:90:48:FB:99:C6:F7:BC:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8E95A1E2A1F54F106FC8C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d95e459-02d0-3392-a715-4d29a2dd22a0.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:e9:5a:1e:2a:1f:54:f1:06:fc:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=4cbb8e3f-515f-491d-ae91-39b0b447a567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:80:83:6d:67:ef:f3:d9:b8:13:39:b0:f3:
a9:bf:8a:71:ef:84:2d:b1:a9:fc:81:13:b4:e0:68:
a6:88:a2:e7:65:a7:69:b9:29:d4:c7:2d:7e:6b:8d:
65:53:98:7e:34:08:6c:f5:33:d3:5e:71:06:d2:bb:
ca:0e:c6:85:6a:d4:2a:0c:5b:9f:fd:c7:6f:1b:86:
ea:86:16:0a:11:dc:90:da:0f:cb:2c:89:9f:45:3d:
14:5b:d8:73:fe:e9:99:02:ec:7a:63:22:9e:49:32:
85:dc:7b:3d:56:94:2d:2b:23:1e:f2:a5:78:20:41:
9a:24:6c:55:6d:45:1f:8d:59:ff:08:25:06:4a:98:
35:17:dc:d0:ca:00:40:76:d6:f0:42:08:f7:a2:a1:
ac:da:93:fd:5c:98:81:a2:5d:50:30:e7:0d:ba:57:
39:85:6e:d9:cd:43:80:13:eb:60:65:66:f0:6f:46:
a2:a3:d7:a4:f6:a1:ee:d1:9e:31:78:6f:9e:fa:f3:
ac:0e:47:52:b9:11:5f:79:09:8c:78:14:b7:87:ad:
b9:93:a8:82:36:eb:84:40:70:8a:20:32:48:08:dd:
e8:75:2c:88:be:df:b0:78:5e:57:5c:28:a2:b7:c9:
f0:52:90:00:5a:bf:49:4a:c4:09:a2:c6:50:58:19:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:FB:3E:43:A1:99:55:5F:1E:DD:63:90:48:FB:99:C6:F7:BC:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d95e459-02d0-3392-a715-4d29a2dd22a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:93:07:79:ac:90:82:8a:56:de:91:99:5c:e1:a6:aa:8b:d1:
46:62:10:e5:0e:81:2a:90:9b:2a:a4:e3:c7:c2:e0:66:2c:80:
a9:e4:61:a3:08:c6:2c:67:87:6c:05:96:31:53:f6:0f:75:6b:
87:05:46:49:4c:9a:10:b0:32:31:09:2b:65:c8:0b:ea:1c:0d:
b1:11:4b:56:ec:48:26:07:a5:cd:e9:d9:04:d6:0d:32:b8:1e:
d3:df:dc:1e:78:db:cf:a9:a3:77:6a:da:9d:e9:68:b5:5b:e3:
00:2e:04:05:af:a7:55:04:eb:16:e8:6f:68:be:7e:c5:a2:ad:
11:1f:10:90:92:8a:12:a5:27:50:a3:cf:4a:df:a0:88:08:2f:
f4:24:09:d9:44:d4:2e:3f:8d:87:20:80:01:e2:b7:d3:c0:c5:
95:7b:0e:a3:93:59:0c:6f:66:19:f5:83:9f:d6:87:7f:85:d4:
d3:35:77:78:c1:a2:ad:94:e8:4a:17:2b:9e:86:8f:2e:18:cf:
81:3c:2f:f0:a7:ad:95:da:27:3d:33:77:ed:c9:1b:9d:ae:56:
b8:69:d9:4b:aa:83:93:f1:de:d1:94:43:bb:4a:19:c4:e7:36:
4a:45:f1:c6:21:0c:a0:43:62:54:e5:1b:1a:3c:24:d6:ef:c1:
16:52:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:30:30 2023 by rpki-client on console-fra.rpki-client.org