Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df6c96a-aeb2-3794-bd87-ee3237e28d03.roa
File: 2df6c96a-aeb2-3794-bd87-ee3237e28d03.roa (raw, json)
Hash identifier: nxKjdgTfmEvhcjSBQ+YCP5/ocayAT9ONIRia1oRd9kc=
Subject key identifier: 2B:AC:34:57:64:08:39:06:D9:DA:B2:CF:B9:38:3C:6E:A6:76:4E:B0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840795710D9EA2B24BE7493E280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df6c96a-aeb2-3794-bd87-ee3237e28d03.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:79:57:10:d9:ea:2b:24:be:74:93:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=a515044b-f4b4-4bea-8c69-dea387e0f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:02:20:36:68:b7:40:19:dd:61:b1:9c:3b:
83:38:fa:9c:4f:ff:cb:51:15:97:d5:a5:cc:04:48:
ec:41:ac:ec:f7:11:f8:e6:0c:a3:2b:b0:20:3e:3a:
00:0b:0b:de:e9:a5:d9:f9:97:ad:ea:b7:90:01:a6:
96:f7:0c:12:9e:0e:72:ec:9b:55:5c:83:69:92:bd:
06:81:e0:e5:5c:7a:e7:20:ff:c5:02:d4:bb:57:b6:
bb:d6:a4:86:ef:f4:91:62:7c:d2:14:db:35:b8:db:
d2:a8:35:f7:37:cf:35:5a:e4:4a:b0:40:f6:ea:49:
b6:85:a5:73:61:0a:4e:3f:55:c3:ba:d9:0f:06:83:
82:17:1c:16:07:d9:7c:1b:73:46:b4:5b:db:21:03:
0e:29:5e:02:c0:87:b9:9d:8c:a0:c2:92:c5:d1:0e:
22:68:a8:8c:cf:7b:ed:bc:1a:dc:43:92:2e:d7:18:
b4:b0:09:6b:55:fe:d2:4d:95:a9:cc:fd:f5:96:be:
f0:a5:4a:a9:b0:f7:5b:e9:77:91:c1:8e:82:db:da:
46:92:d8:c3:63:92:4d:89:98:41:6a:2e:79:48:6b:
04:ae:ff:e4:40:14:51:19:03:80:b3:88:f3:0c:ae:
0b:55:23:fc:4b:d8:f1:ed:95:ba:63:0b:82:34:af:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:34:57:64:08:39:06:D9:DA:B2:CF:B9:38:3C:6E:A6:76:4E:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df6c96a-aeb2-3794-bd87-ee3237e28d03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:a6:f4:d6:41:12:de:2b:77:c0:72:10:b3:63:a7:2b:f4:59:
8a:dd:58:ac:b2:fb:02:df:b9:7f:e4:21:40:6e:7f:e8:b3:23:
3f:00:50:8e:43:28:8a:ee:45:35:3f:a9:8d:48:cb:04:49:b1:
50:aa:87:e3:c7:0f:01:3f:f7:97:07:2b:f9:66:b4:76:f1:41:
f5:7d:fe:ff:6c:70:c3:79:70:91:90:db:40:36:68:a7:3a:38:
24:bf:3e:55:4f:42:06:ca:ab:6d:98:34:96:c8:95:72:a2:93:
7b:89:42:85:0b:c9:4f:3b:27:9e:8a:8b:56:c9:1c:06:41:e9:
c0:31:0f:00:fb:67:11:ac:06:ff:ad:3c:ab:db:69:5d:9a:2a:
37:03:b1:db:5d:dd:ea:74:ff:26:39:9c:34:39:59:28:81:84:
ae:c0:b4:ac:b8:05:20:73:56:51:33:8f:d0:1e:d6:fc:a9:d4:
e0:e7:9b:e9:82:b2:10:1e:4a:6b:b4:25:56:a6:0f:1c:58:c2:
22:fb:a2:5c:0f:25:02:29:b1:da:9a:65:c3:1c:0a:09:49:0f:
e6:6d:fe:d9:8f:38:28:70:ec:d7:3a:eb:0f:d7:6b:8a:d2:8f:
df:f4:99:bb:45:bc:3a:ee:b4:24:75:4e:86:bf:28:d5:3d:46:
72:c9:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:31:06 2023 by rpki-client on console-fra.rpki-client.org