Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/976d2b4d-bfa3-3d43-b859-511684b5a58c.roa
File: 976d2b4d-bfa3-3d43-b859-511684b5a58c.roa (raw, json)
Hash identifier: Hmo+tLvWUepb3+sqISViFgluZsW3v6OwsNLTVWXGpm8=
Subject key identifier: 49:BA:C3:61:D2:6E:38:59:B5:41:B0:3A:BB:45:BC:D7:2F:6D:6C:2C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B93B1E5F74CCF584D0BF7C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/976d2b4d-bfa3-3d43-b859-511684b5a58c.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:3b:1e:5f:74:cc:f5:84:d0:bf:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=d7925cd6-9d44-4763-b855-b4f512584286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:43:d2:2a:5c:0b:bc:33:6e:d7:63:66:8e:
56:a2:38:ae:f6:cb:7a:87:b4:28:3f:bf:78:54:6f:
b3:69:a2:37:48:a7:82:e3:c8:ac:30:ea:7a:79:43:
a3:e4:71:44:3d:87:8b:7c:c4:99:bd:90:a9:fd:6f:
6e:bd:8d:c2:70:62:e4:de:84:59:20:c5:30:98:b1:
56:02:95:4a:54:f0:b2:a6:a7:65:56:ea:a8:11:e5:
82:83:fd:d7:65:7f:dd:03:63:b6:e3:c8:0a:f2:7a:
fe:e1:85:1a:e8:b2:d5:71:d5:f4:b5:d7:eb:56:6e:
31:08:f2:8a:00:29:ee:92:7d:eb:ba:f9:25:4f:7c:
23:7e:d3:7a:fc:93:28:99:2c:f3:1c:86:29:8f:a9:
54:de:7b:14:9d:7c:be:e3:5a:9f:85:e0:a1:a1:36:
80:dd:ff:87:cc:81:6f:f3:7f:5d:6e:d5:c2:f6:fd:
30:54:14:ee:36:96:7b:64:f5:97:8c:a2:de:64:52:
05:e5:4d:3c:1d:ab:03:05:dc:df:c6:f7:ed:4e:ac:
d0:04:c6:d0:e7:56:78:8a:7f:e3:a7:ad:c9:83:f6:
e2:e7:8e:d3:8a:84:88:5f:97:0c:2e:e5:4e:27:c7:
9c:c1:17:53:c5:f6:a8:3e:d6:51:17:70:5b:71:16:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:C3:61:D2:6E:38:59:B5:41:B0:3A:BB:45:BC:D7:2F:6D:6C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/976d2b4d-bfa3-3d43-b859-511684b5a58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:82:8d:ce:3d:0b:dd:66:63:e1:e0:86:fe:fc:d3:7d:f6:b4:
f7:f6:a6:de:bd:dd:7e:37:79:62:5a:4e:2b:27:c5:54:35:3a:
99:c7:6a:34:36:32:da:15:ec:5a:51:f0:56:fa:db:46:12:ba:
14:af:ec:2c:9e:0b:47:42:88:f2:bb:7c:91:db:e4:44:14:19:
ac:11:e3:04:82:3c:fa:bd:a7:38:d0:24:8f:55:9b:c1:26:75:
e9:31:57:79:07:88:9d:64:0e:d2:f7:a6:78:78:a4:dc:e3:c6:
c2:00:81:91:1c:4a:39:b3:b1:51:fe:ea:fb:ce:69:16:e2:40:
36:ea:3d:0d:f5:67:25:d7:38:d2:13:08:e8:f9:a7:c1:70:1d:
58:0b:06:54:df:9c:16:99:65:40:8d:fb:8b:5d:0d:8d:bf:6f:
83:b5:f9:2d:e1:5b:6f:cb:43:85:28:41:21:9e:6f:e1:a7:7a:
92:71:83:5c:7f:c4:a3:a5:51:2a:8c:41:98:b4:83:2e:45:c9:
30:70:d4:13:00:28:2f:5d:94:c2:2d:c7:94:90:b7:28:ba:ca:
f7:bf:6f:9c:16:3b:58:29:0f:46:3f:e2:02:4c:ab:b6:5a:b3:
44:5b:bc:56:0c:38:d7:b3:35:80:f3:72:4e:e6:6d:4d:8f:8f:
43:ca:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:48 2023 by rpki-client on console-fra.rpki-client.org