Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/494c5261-6564-3379-9334-bca89e2fcdd6.roa
File: 494c5261-6564-3379-9334-bca89e2fcdd6.roa (raw, json)
Hash identifier: jyE6YIsPfli2tbucCdxv6KwY4LtQs0U4plPd+R6K/XM=
Subject key identifier: 0D:B6:D0:9E:02:C0:5D:0B:E9:86:BC:4B:D4:3C:AF:16:B6:7D:79:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584073B30A99D6625ED26F6B6D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/494c5261-6564-3379-9334-bca89e2fcdd6.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:b3:0a:99:d6:62:5e:d2:6f:6b:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=792b3855-efe8-4742-9684-e6739227cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:de:56:ef:4b:45:48:de:ea:cb:84:a1:70:
55:42:db:ad:1b:d8:ba:21:20:32:57:71:cd:2a:a1:
12:6d:ad:c3:bb:e5:05:28:47:07:7e:27:2c:8c:16:
97:69:99:78:ca:c3:73:58:c9:0b:5e:43:9a:fa:5a:
ab:21:5c:a9:06:23:c1:d1:4b:e9:1a:62:a9:76:c8:
8e:d0:85:73:9e:19:36:99:a8:19:e3:d6:91:b1:73:
fb:d4:28:2d:1e:66:35:d2:c8:6b:60:7b:ca:0a:9c:
8a:5e:0d:15:e3:72:cc:02:9b:32:b5:ca:f4:b4:3a:
17:c4:87:d4:2e:ac:e2:3e:72:17:33:ad:b8:a7:28:
67:63:21:6b:5e:b2:a9:db:ab:65:19:2a:6e:26:49:
fb:80:01:e0:d0:9b:4f:4e:5e:76:f1:da:3a:bf:6c:
d0:c3:52:77:59:78:b5:6a:f2:6f:18:b7:bf:48:ac:
b9:6d:b6:6c:e8:94:f2:90:be:2d:4d:a1:10:02:01:
dd:75:fe:c7:6f:69:ee:c5:af:c1:bf:b8:7d:92:53:
d0:db:bb:4a:94:f4:03:dc:56:af:2d:47:34:60:72:
90:33:d2:20:55:84:44:c8:e0:6b:db:df:79:ea:c0:
ce:f4:4a:c5:15:a4:55:9e:b5:d8:c7:9a:93:5c:2e:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:D0:9E:02:C0:5D:0B:E9:86:BC:4B:D4:3C:AF:16:B6:7D:79:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/494c5261-6564-3379-9334-bca89e2fcdd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:be:9f:59:7d:03:f2:e0:ad:5e:ce:b0:cd:c3:8c:a7:09:3d:
d0:4c:d4:ce:77:0e:c8:e8:ab:34:ab:f9:f3:c2:1e:81:cc:03:
3c:a3:dd:71:29:97:cb:90:7e:6d:12:58:08:4b:8a:13:22:c5:
78:58:f0:a9:c2:5e:91:5d:91:63:f8:06:1e:fc:8e:0f:bd:cf:
84:ff:96:4f:3f:99:5f:be:e6:36:06:e4:96:bb:d9:10:17:f5:
d1:df:ee:f7:92:5f:3f:c8:cd:21:75:44:51:09:89:a7:3f:b4:
af:23:ed:de:2d:83:ef:df:8f:c9:61:2f:aa:e2:13:d6:f4:0b:
90:be:4a:39:34:21:59:21:04:93:78:f3:4c:59:20:4f:39:75:
b7:9a:6c:a2:ae:30:8d:5b:58:e9:be:44:db:e1:9c:d2:49:34:
a9:5e:05:36:80:63:68:58:d2:f4:ba:e9:eb:2a:a4:f5:fe:45:
28:a4:8c:d7:2b:1d:bf:34:de:9f:f6:d0:10:45:2b:b2:27:cf:
fb:b4:65:76:27:11:4e:0f:5e:28:8c:5f:ce:a4:f3:10:b2:02:
8e:95:10:16:4f:9c:b2:26:2b:e9:7f:4e:cd:95:b4:57:0c:68:
5a:24:0b:4d:83:c4:37:51:06:72:a3:cd:f8:dd:f4:74:84:2a:
aa:82:fe:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBzswqZ1mJe0m9rbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NzkyYjM4NTUtZWZlOC00NzQyLTk2ODQtZTY3MzkyMjdjYjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLreVu9LRUje6suEoXBVQtutG9i6ISAyV3HN
KqESba3Du+UFKEcHficsjBaXaZl4ysNzWMkLXkOa+lqrIVypBiPB0UvpGmKpdsiO
0IVznhk2magZ49aRsXP71CgtHmY10shrYHvKCpyKXg0V43LMApsytcr0tDoXxIfU
LqziPnIXM624pyhnYyFrXrKp26tlGSpuJkn7gAHg0JtPTl528do6v2zQw1J3WXi1
avJvGLe/SKy5bbZs6JTykL4tTaEQAgHddf7Hb2nuxa/Bv7h9klPQ27tKlPQD3Fav
LUc0YHKQM9IgVYREyOBr29956sDO9ErFFaRVnrXYx5qTXC45SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA220J4CwF0L6Ya8S9Q8rxa2fXndMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDk0YzUyNjEtNjU2NC0z
Mzc5LTkzMzQtYmNhODllMmZjZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEAyEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKC+n1l9A/LgrV7OsM3DjKcJPdBM1M53DsjoqzSr+fPCHoHMAzyj3XEp
l8uQfm0SWAhLihMixXhY8KnCXpFdkWP4Bh78jg+9z4T/lk8/mV++5jYG5Ja72RAX
9dHf7veSXz/IzSF1RFEJiac/tK8j7d4tg+/fj8lhL6riE9b0C5C+Sjk0IVkhBJN4
80xZIE85dbeabKKuMI1bWOm+RNvhnNJJNKleBTaAY2hY0vS66esqpPX+RSikjNcr
Hb803p/20BBFK7Inz/u0ZXYnEU4PXiiMX86k8xCyAo6VEBZPnLImK+l/Ts2VtFcM
aFokC02DxDdRBnKjzfjd9HSEKqqC/nM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:31:44 2023 by rpki-client on console-fra.rpki-client.org