Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d343ec6-4004-3e19-88d1-121039b5d3a5.roa
File: 5d343ec6-4004-3e19-88d1-121039b5d3a5.roa (raw, json)
Hash identifier: pTLjCQ0Caztpn+NgZzm8KPp9b9qb3AYCwp6oPpecqag=
Subject key identifier: 9F:8C:14:F2:86:FD:FF:8A:2F:D0:6B:0E:D4:FD:1B:DB:83:77:0C:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B9425AB94C791274D9167F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d343ec6-4004-3e19-88d1-121039b5d3a5.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:42:5a:b9:4c:79:12:74:d9:16:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=d6959628-a47d-4807-b1f7-cb3ae1a6a3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:6c:36:33:4b:3f:7e:72:d5:bd:d9:a5:b1:
43:19:a3:76:da:fd:90:c8:0a:04:00:cf:2e:93:70:
de:87:51:50:f6:e8:fa:b4:14:e1:84:b0:ad:f5:4e:
12:e6:fe:87:c2:bf:fd:ce:71:73:fe:ff:01:70:0e:
38:5d:8f:15:d8:2d:0c:41:1e:41:12:dc:0d:e2:8b:
6d:ac:ac:b3:05:a7:e5:cb:6c:3d:03:f5:a4:9d:72:
1a:f6:c9:d8:da:0a:4e:e2:8a:46:7a:f7:ac:30:8e:
70:e3:7d:b6:ed:a1:42:58:cd:75:20:16:f1:83:b9:
55:84:fb:e9:f1:04:85:02:48:12:a1:6f:e1:90:f8:
7e:3f:89:d2:45:26:e2:2f:68:82:a9:18:d0:71:5d:
cd:64:65:b7:8d:88:4e:4a:fa:1d:63:1c:59:c4:31:
9d:7f:34:4f:81:1b:f6:01:9c:e8:e7:9d:6d:12:48:
8b:96:9b:f8:1a:69:be:18:90:8d:fa:b5:b0:d3:86:
28:c4:fb:a7:a5:a2:0f:ac:7e:ce:9e:a9:4a:83:3e:
c9:49:cc:af:fd:38:8d:c4:f3:da:f2:42:16:1c:6e:
b0:8c:d1:a5:0d:8c:08:0c:88:96:cb:ac:94:ad:f1:
54:ed:8d:64:48:70:bc:1c:86:8c:c5:0d:27:85:6f:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:14:F2:86:FD:FF:8A:2F:D0:6B:0E:D4:FD:1B:DB:83:77:0C:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d343ec6-4004-3e19-88d1-121039b5d3a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:fb:23:32:c1:45:cb:8b:ec:ae:8d:70:71:2d:d9:b0:de:85:
a5:1f:a8:d7:5e:46:56:f8:6e:6a:53:3b:19:8e:5a:59:b1:25:
47:52:20:1b:f7:5f:a9:6d:6f:5a:f1:82:0b:3a:d5:19:2a:32:
5b:72:a3:9b:cf:c9:c8:e0:0b:77:ff:10:33:5c:82:0e:50:44:
ab:00:38:9e:d2:53:a5:63:60:1a:17:05:9a:6e:ae:f5:83:54:
89:4a:43:71:7d:0c:11:3c:24:cd:01:a2:0d:98:82:33:fb:9b:
a2:b9:d8:f3:07:f3:bd:7f:37:a6:ca:f9:d8:1a:08:76:7c:dd:
d8:19:46:f8:8a:5e:cb:0c:ef:2e:06:d5:30:8a:b5:56:7f:1a:
6f:91:ae:e4:40:8f:ca:23:9f:70:5b:cc:8a:87:aa:81:d0:1c:
a3:d8:02:91:85:1e:49:fa:c4:b7:fd:b4:da:5c:56:f1:0f:ec:
86:c7:d3:46:f8:d1:b1:37:e1:23:19:40:4a:c5:91:34:92:58:
87:22:72:86:31:ed:4c:16:bc:ca:18:7d:10:f5:04:6e:c0:7a:
e0:91:71:44:fb:8f:07:d8:0d:60:2b:ea:0d:d6:0d:7d:fe:c1:
43:ca:36:8a:85:ff:8a:e6:11:23:fb:36:e9:8f:85:79:43:a7:
21:a8:13:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC5Qlq5THkSdNkWfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZDY5NTk2MjgtYTQ3ZC00ODA3LWIxZjctY2IzYWUxYTZhM2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9tsNjNLP35y1b3ZpbFDGaN22v2QyAoEAM8u
k3Deh1FQ9uj6tBThhLCt9U4S5v6Hwr/9znFz/v8BcA44XY8V2C0MQR5BEtwN4ott
rKyzBafly2w9A/WknXIa9snY2gpO4opGevesMI5w43227aFCWM11IBbxg7lVhPvp
8QSFAkgSoW/hkPh+P4nSRSbiL2iCqRjQcV3NZGW3jYhOSvodYxxZxDGdfzRPgRv2
AZzo551tEkiLlpv4Gmm+GJCN+rWw04YoxPunpaIPrH7OnqlKgz7JScyv/TiNxPPa
8kIWHG6wjNGlDYwIDIiWy6yUrfFU7Y1kSHC8HIaMxQ0nhW8gywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ+MFPKG/f+KL9BrDtT9G9uDdwwXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWQzNDNlYzYtNDAwNC0z
ZTE5LTg4ZDEtMTIxMDM5YjVkM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDI0gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUPsjMsFFy4vsro1wcS3ZsN6FpR+o115GVvhualM7GY5aWbElR1IgG/df
qW1vWvGCCzrVGSoyW3Kjm8/JyOALd/8QM1yCDlBEqwA4ntJTpWNgGhcFmm6u9YNU
iUpDcX0METwkzQGiDZiCM/ubornY8wfzvX83psr52BoIdnzd2BlG+IpeywzvLgbV
MIq1Vn8ab5Gu5ECPyiOfcFvMioeqgdAco9gCkYUeSfrEt/202lxW8Q/shsfTRvjR
sTfhIxlASsWRNJJYhyJyhjHtTBa8yhh9EPUEbsB64JFxRPuPB9gNYCvqDdYNff7B
Q8o2ioX/iuYRI/s26Y+FeUOnIagT+w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:32:10 2023 by rpki-client on console-fra.rpki-client.org