Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87752c33-79cd-3d54-bfda-98503308bab0.roa
File: 87752c33-79cd-3d54-bfda-98503308bab0.roa (raw, json)
Hash identifier: 3uHKxYt8fGpydhkd5q/m388pgU34tFMFYrgFeit3UWY=
Subject key identifier: 64:33:B7:85:9D:C8:23:59:B6:A7:F4:39:08:2E:47:B7:C7:24:0A:00
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584064FBDE99A5E1806DD4C40D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87752c33-79cd-3d54-bfda-98503308bab0.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:fb:de:99:a5:e1:80:6d:d4:c4:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=08b44740-a9eb-4ddf-818a-6205711a33e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:35:82:ee:50:6b:71:dd:79:fd:3c:1f:55:
e3:d6:56:dc:6c:4a:2a:31:92:73:1a:9f:1e:49:51:
e3:12:9e:eb:29:ed:62:37:57:de:1b:21:fa:cf:f2:
b8:90:5f:cc:b6:6c:62:6a:c9:e5:ca:90:2f:d9:e1:
28:81:f1:d1:6e:f7:53:e4:81:da:b0:2b:4f:65:b0:
a4:eb:1f:f8:bb:4a:a2:ee:d1:1b:26:7e:5d:46:27:
83:ad:67:6c:b7:d3:8f:c4:dd:f0:ec:9e:ca:87:06:
bb:09:b2:af:98:79:91:39:1d:10:69:19:9c:3e:57:
c2:a1:15:6a:32:8d:07:bd:4d:de:d6:57:f2:79:0d:
64:04:22:6f:81:29:55:bf:9c:54:c8:80:4f:71:8c:
88:51:67:0f:fd:73:b9:0d:a9:76:29:38:c1:f5:62:
8a:67:51:d8:87:f1:ab:b9:59:8b:ea:07:ff:15:e7:
32:fe:bb:2f:5f:80:f7:6c:42:88:cd:52:70:98:76:
50:f3:58:2a:c2:f0:e7:6e:5d:b3:29:81:82:44:ed:
15:b3:5c:59:73:73:85:c8:be:41:81:43:11:38:8e:
6c:06:a1:bd:49:d6:a0:41:6b:37:5d:1d:af:96:15:
66:e2:52:45:98:55:fb:4c:bb:b2:69:e7:82:f8:7b:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:B7:85:9D:C8:23:59:B6:A7:F4:39:08:2E:47:B7:C7:24:0A:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87752c33-79cd-3d54-bfda-98503308bab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f9:86:a7:3f:98:39:f8:61:32:76:7d:e6:90:41:b8:e0:5d:
2b:bd:08:d9:37:b9:82:b7:fe:d9:b4:68:40:a2:a6:87:b0:9e:
3d:7f:cc:cd:99:c3:7e:41:10:f7:76:00:ed:76:44:bc:b2:04:
57:5b:fe:0e:37:ee:76:75:3d:00:0f:54:a0:96:ec:c7:31:ca:
84:6d:37:6c:e7:2c:4a:bc:40:4c:8d:da:bb:e5:f9:14:ec:b1:
92:14:aa:0a:75:17:03:05:6e:4f:98:b0:0a:f5:0f:c4:ba:f3:
cb:ab:77:e0:d0:5c:20:4d:98:8b:78:09:f0:78:55:3d:15:e9:
9e:b6:5e:3d:02:a5:0c:f2:d7:ac:64:15:64:93:b3:7f:f2:a8:
84:e1:3c:c9:ca:f0:6d:a6:62:4d:86:86:f8:13:4f:86:b1:8c:
01:62:81:91:1e:c0:02:77:9a:c9:53:43:a6:6a:50:c8:69:06:
42:aa:c6:57:f6:b5:49:fb:b7:95:f4:ec:89:c6:57:a3:76:1f:
f2:e1:ed:8c:79:67:0f:08:c8:d0:f5:f1:f6:cd:fc:50:bc:79:
af:c5:c5:9e:33:0d:c1:f1:67:17:cc:26:72:e3:1a:ea:78:07:
8f:8e:b3:49:1d:14:01:72:08:2f:7f:ad:ce:a2:3b:7d:06:c3:
98:b3:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:19 2023 by rpki-client on console-fra.rpki-client.org