Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b471a551-0ec5-335a-8eaa-a09e6ff203fe.roa
File: b471a551-0ec5-335a-8eaa-a09e6ff203fe.roa (raw, json)
Hash identifier: poji7dGX4KCxU1VB6PGOPd0tQ5OoYwTdKMBYO/eOcj0=
Subject key identifier: 66:34:9B:C2:27:8B:72:C8:40:89:E1:40:22:A9:C6:B8:3D:B7:59:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B5AED59E2DBC2088A31CD280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b471a551-0ec5-335a-8eaa-a09e6ff203fe.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.202.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b5:ae:d5:9e:2d:bc:20:88:a3:1c:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=d8fc3d7e-ba03-4119-b275-b56ee162b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:ca:b0:9d:16:e7:19:1b:09:bf:f1:fc:eb:
1a:4f:03:3f:90:54:30:69:a0:86:39:a7:5e:88:41:
b7:0a:33:e2:44:3c:d0:d5:e7:7d:87:ce:81:85:ac:
5a:1f:64:38:5e:84:92:23:42:f2:af:ae:bd:66:e5:
c8:2f:1f:4a:19:10:f4:eb:a2:d3:47:a6:f5:8d:d2:
5e:05:1a:8f:f6:65:62:1c:24:b2:3a:d4:aa:76:21:
cf:a4:85:35:8b:af:66:5b:15:b1:61:76:c6:a7:e7:
72:6d:87:ad:0c:2b:58:d0:d9:6e:c4:e1:37:8e:fe:
44:38:5b:d2:c1:99:55:fd:3a:11:3f:70:e5:b3:23:
96:22:fb:82:40:91:fb:d4:81:99:85:36:d2:e6:60:
60:21:0d:bc:6c:f3:36:83:29:5a:ae:3b:f7:cf:f5:
75:a3:24:15:49:4d:02:14:1c:aa:3f:47:1d:db:91:
bd:3c:27:1c:c1:23:c1:8c:7f:10:3c:c1:4d:f2:29:
1d:66:36:2e:3b:35:28:23:3e:45:39:f6:0e:d3:d4:
ab:16:5c:28:52:be:d7:3f:92:be:b8:7a:d1:68:21:
c7:f5:02:9d:4e:1f:14:4b:1d:30:3b:e3:6b:c9:c2:
e4:99:e8:32:32:d3:f5:c2:92:5b:21:ee:c8:1f:af:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:9B:C2:27:8B:72:C8:40:89:E1:40:22:A9:C6:B8:3D:B7:59:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b471a551-0ec5-335a-8eaa-a09e6ff203fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.202.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:71:a4:14:a5:e1:e3:29:52:ea:a5:78:98:bc:00:9d:e3:65:
b4:7f:f1:ce:60:27:c2:fe:ee:36:a6:10:63:01:89:15:f8:2d:
3a:ee:b5:f0:79:d3:84:9e:14:82:43:1c:ef:1d:07:81:15:2a:
aa:8b:66:9d:f1:10:c7:14:9a:18:10:6d:e0:12:03:ff:18:44:
5e:9b:eb:f5:38:e8:da:f2:1b:ff:4d:02:e3:45:32:8c:e5:be:
45:e7:1a:31:73:c0:0c:75:76:09:26:b5:61:43:8e:57:29:8a:
db:91:15:0e:5b:4f:28:84:22:05:57:44:86:8b:9d:11:c8:6d:
72:cc:ed:05:56:13:80:be:c3:eb:3f:03:f7:4b:34:56:fa:ab:
f7:ef:2d:5c:49:9a:d1:a1:7f:16:b9:bc:33:63:a6:ce:eb:c3:
29:cf:54:03:b0:b2:4a:20:e2:be:03:03:ff:64:8d:0e:88:e7:
07:61:5f:ba:33:d0:be:6e:e1:e0:4c:8f:b4:35:6d:d0:c0:54:
71:2e:53:a6:95:78:87:50:2f:38:8f:0e:4f:f3:88:eb:69:97:
75:af:05:4b:ee:e1:51:ab:0e:c7:2f:e9:b0:cb:8c:a5:76:f9:
06:6f:e8:38:d4:86:f0:b8:57:e8:c2:ad:cd:5b:d5:70:43:e1:
da:08:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:34:40 2023 by rpki-client on console-fra.rpki-client.org