Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80d97d07-aac0-3cac-9f46-5fec0cafea71.roa
File: 80d97d07-aac0-3cac-9f46-5fec0cafea71.roa (raw, json)
Hash identifier: p45VVR6YCfSUL/Eb3C8dgba/NGxSAtbnPOmzVQjqD3A=
Subject key identifier: 48:47:30:49:B1:BB:8E:D6:A3:0F:AF:FC:C1:5D:57:93:80:38:EA:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407816FC0BE587F0EA37055300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80d97d07-aac0-3cac-9f46-5fec0cafea71.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:16:fc:0b:e5:87:f0:ea:37:05:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=1b466935-a30d-4b24-8da9-e195a2f6df81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:c2:01:1b:20:4c:28:85:64:15:ca:e7:96:
d7:d2:dc:57:17:12:b7:47:6a:9f:bf:47:aa:62:cc:
82:38:ba:d5:01:8f:c7:38:c3:6b:ad:a6:ff:bd:83:
bc:63:ba:7e:e5:fe:15:f3:25:eb:e3:32:90:46:0a:
a7:b9:ce:6f:29:5b:d3:d2:29:8e:ec:bf:a5:35:1e:
83:38:8a:ab:32:22:70:33:60:19:91:bb:9a:57:17:
5f:36:de:c4:22:a5:ec:96:3a:62:0d:05:d3:e1:fa:
30:06:57:56:4f:5e:0a:af:d5:64:30:3f:06:de:ec:
4d:77:73:89:f7:0e:ae:eb:7c:cf:d8:db:10:58:c0:
5f:d3:77:22:3d:3f:89:21:ce:5f:f9:68:02:56:72:
a3:12:32:77:44:f7:9a:3f:02:14:da:16:34:24:2b:
2c:4b:59:44:f5:58:12:fb:39:5c:19:ea:ac:23:09:
04:63:96:c3:ee:83:5d:98:b4:fd:2c:2e:1b:d4:9d:
bd:6f:6c:bd:02:a1:9c:24:ca:ca:83:20:b6:8d:48:
cd:49:1d:34:e9:97:44:09:b0:2b:25:39:29:c3:cc:
9f:c7:2f:75:60:f6:ca:94:04:97:bd:7c:1e:dc:ac:
96:88:a5:ac:e3:c8:07:1e:3a:1c:6d:da:c4:4a:6c:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:30:49:B1:BB:8E:D6:A3:0F:AF:FC:C1:5D:57:93:80:38:EA:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80d97d07-aac0-3cac-9f46-5fec0cafea71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:8e:00:88:f7:fc:09:00:f0:e7:0d:44:cc:ec:a8:77:d3:19:
3d:b3:d7:b0:95:86:6a:04:4e:ea:dd:64:3b:58:76:7c:0e:26:
d1:95:e0:3c:a4:5d:ac:99:75:aa:a4:d0:1d:5d:22:df:fb:02:
17:6f:58:19:36:5c:89:bb:0b:7a:0f:65:23:13:02:e0:8b:e8:
4b:0d:aa:45:af:d5:32:4f:04:54:4a:75:f2:62:47:03:e9:af:
4e:18:71:89:0f:2e:dd:50:d6:03:89:be:87:70:67:05:4b:be:
d0:25:0a:24:4c:f5:32:b2:da:a6:e7:d9:14:03:ec:11:d4:08:
82:59:fb:d6:f6:e2:68:dc:50:cb:c0:0d:f6:f9:bc:fd:f0:ac:
96:93:36:c6:ca:a9:87:8f:d1:aa:54:c5:59:e9:d3:f6:eb:dc:
7c:30:3d:63:9c:fc:8c:db:c1:f2:4c:86:0d:97:a9:e8:1f:f1:
e4:2f:cc:29:b3:da:3d:29:c4:b9:3b:80:4a:6b:09:05:42:4f:
25:bb:aa:b8:26:47:4f:b4:78:69:1a:c1:80:45:ab:ac:39:eb:
b5:15:14:79:b0:f4:a2:06:bd:cd:96:72:29:99:e7:78:6c:02:
ba:35:65:40:88:2e:e9:a7:53:cb:2d:3b:d5:bb:29:89:ea:6a:
8e:a7:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:57 2023 by rpki-client on console-ams.rpki-client.org