Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69de9bfe-b680-3203-b901-2a0c143b183b.roa
File: 69de9bfe-b680-3203-b901-2a0c143b183b.roa (raw, json)
Hash identifier: QQPkw+0i7W8mabDVCPoTDbhap8wZCmMpC6EhSMUgEIY=
Subject key identifier: 7B:0F:AC:27:E0:4E:28:B0:6A:9F:42:86:C3:3F:7A:B8:97:E5:06:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B9C8B3AF8B2D0C54D49B0A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69de9bfe-b680-3203-b901-2a0c143b183b.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 52.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:c8:b3:af:8b:2d:0c:54:d4:9b:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=79e3669e-fdf5-498b-bc80-ccfc2d8967f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:e5:d2:d1:80:60:6d:42:90:8c:cc:2b:8b:
a5:28:61:cf:10:2f:4d:43:e1:86:f0:bf:77:59:9c:
16:21:37:e0:e7:07:20:7c:ce:52:fe:8d:02:86:0c:
21:bd:a9:63:37:5f:cf:65:68:2e:65:fa:8c:e1:c3:
37:73:5d:26:a1:df:18:5e:cd:45:e4:fd:4c:1a:b0:
09:3d:46:32:35:cc:b5:d9:0b:c0:f3:a2:03:d4:46:
d5:13:ee:3b:b7:e6:f3:a7:56:29:0e:be:fe:73:47:
e4:39:6c:79:3a:94:8a:38:ff:68:09:ed:2e:96:fb:
e0:17:6c:a7:21:89:e9:32:48:39:51:be:6f:1c:1f:
a3:ab:28:ad:25:66:99:12:b2:dd:88:d7:7d:29:03:
d5:64:5a:5a:9d:a3:34:8d:7f:89:e5:d0:10:52:e2:
81:08:4e:8f:9e:4d:fd:23:84:9e:1a:98:f4:f4:52:
a8:85:1c:b6:8b:c0:1a:a0:25:90:cb:67:87:39:28:
78:33:23:de:5f:64:b1:a7:17:bd:f7:45:d7:79:2a:
60:71:53:d5:21:f3:87:9c:19:f8:b4:99:5d:d1:15:
90:90:04:62:38:52:be:11:c7:12:93:be:02:f3:55:
35:69:f3:e9:31:cc:37:5e:73:a6:32:f8:39:58:41:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0F:AC:27:E0:4E:28:B0:6A:9F:42:86:C3:3F:7A:B8:97:E5:06:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69de9bfe-b680-3203-b901-2a0c143b183b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:74:7c:cb:c7:2b:fd:b1:30:22:4e:d0:f9:3c:f4:e9:cc:0f:
90:32:53:f6:bf:a1:e4:0f:a2:c0:a4:53:76:a1:42:04:5c:3c:
03:d6:d6:d2:b9:6d:c0:6e:9e:aa:dc:f9:95:df:f7:57:39:e7:
98:7a:bb:b5:3f:b7:bf:b5:6f:5f:bb:a4:87:f8:ba:49:eb:1a:
5d:27:55:b6:78:f9:fb:df:77:d6:77:c9:6f:b7:b3:63:f6:66:
03:a1:21:3c:a5:91:dc:80:a2:6c:0d:44:af:5d:7e:65:ab:8c:
bd:a2:e4:a1:df:90:e0:90:80:b8:c7:e2:eb:67:41:fa:76:eb:
6b:52:b3:8e:d3:f8:fd:e6:2c:09:8b:d7:ec:b1:78:e6:91:fa:
1e:98:ca:42:a1:af:00:9c:08:8b:80:5b:14:45:2f:fd:d7:29:
92:0c:e3:9a:8a:45:1e:26:63:d4:56:3d:d1:56:05:ef:e2:f1:
1f:0c:9d:e5:13:68:06:f8:f6:da:14:36:63:ab:f3:a6:33:2a:
62:a4:21:fe:4d:65:99:39:b4:ec:35:1a:b5:c6:98:40:da:7b:
af:c0:a4:8d:d5:b4:3b:31:0f:38:e2:f1:21:5d:49:b9:95:b4:
f9:80:d1:c1:20:4c:8d:f3:92:a3:0f:a6:7d:45:a3:ec:d6:77:
de:9c:82:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC5yLOviy0MVNSbCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NzllMzY2OWUtZmRmNS00OThiLWJjODAtY2NmYzJkODk2N2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhDl0tGAYG1CkIzMK4ulKGHPEC9NQ+GG8L93
WZwWITfg5wcgfM5S/o0ChgwhvaljN1/PZWguZfqM4cM3c10mod8YXs1F5P1MGrAJ
PUYyNcy12QvA86ID1EbVE+47t+bzp1YpDr7+c0fkOWx5OpSKOP9oCe0ulvvgF2yn
IYnpMkg5Ub5vHB+jqyitJWaZErLdiNd9KQPVZFpanaM0jX+J5dAQUuKBCE6Pnk39
I4SeGpj09FKohRy2i8AaoCWQy2eHOSh4MyPeX2Sxpxe990XXeSpgcVPVIfOHnBn4
tJld0RWQkARiOFK+EccSk74C81U1afPpMcw3XnOmMvg5WEHTuQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHsPrCfgTiiwap9ChsM/eriX5QY4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjlkZTliZmUtYjY4MC0z
MjAzLWI5MDEtMmEwYzE0M2IxODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDNNAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY3R8y8cr/bEwIk7Q+Tz06cwPkDJT9r+h5A+iwKRTdqFCBFw8A9bW0rlt
wG6eqtz5ld/3VznnmHq7tT+3v7VvX7ukh/i6SesaXSdVtnj5+9931nfJb7ezY/Zm
A6EhPKWR3ICibA1Er11+ZauMvaLkod+Q4JCAuMfi62dB+nbra1KzjtP4/eYsCYvX
7LF45pH6HpjKQqGvAJwIi4BbFEUv/dcpkgzjmopFHiZj1FY90VYF7+LxHwyd5RNo
Bvj22hQ2Y6vzpjMqYqQh/k1lmTm07DUatcaYQNp7r8CkjdW0OzEPOOLxIV1JuZW0
+YDRwSBMjfOSow+mfUWj7NZ33pyC3w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:08 2023 by rpki-client on console-ams.rpki-client.org