Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5a28e9d-5b58-37a9-add5-025e84927fce.roa
File: c5a28e9d-5b58-37a9-add5-025e84927fce.roa (raw, json)
Hash identifier: 2N+1NmgMKyBK90zWfedS9crxKqtkaRmp2uFMD+oYN88=
Subject key identifier: 41:74:B2:0D:51:25:E0:EF:81:DE:6E:4C:0D:B4:2E:F6:EB:C5:79:DE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B04634824650867696430D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5a28e9d-5b58-37a9-add5-025e84927fce.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:46:34:82:46:50:86:76:96:43:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=43f73fbc-72e7-456a-8394-76079e143b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:fd:4b:e6:4e:48:fa:dc:ed:34:9d:28:83:
c1:52:4d:e4:80:4b:66:06:36:0d:af:c7:57:22:ff:
d4:b6:4c:36:14:6d:15:7a:44:76:51:f1:0d:8e:70:
22:27:d9:ed:d8:4a:28:76:30:f8:ca:d8:de:54:90:
77:85:1e:23:b3:e3:84:58:a1:00:c4:e0:8d:44:ef:
d5:5b:1d:3a:e1:15:a3:76:4f:07:d7:0e:ff:57:77:
25:97:a9:9d:41:57:b2:f6:14:c3:3a:8d:66:b6:bc:
e5:46:16:a6:70:6d:1f:e9:35:93:df:37:07:e1:70:
3e:99:f7:12:c3:c6:99:29:c2:4d:c4:2c:d5:a1:e3:
b7:b1:65:ae:0b:27:18:e8:9c:50:18:ac:98:48:db:
71:7d:60:fe:07:e0:a4:7c:29:62:79:0b:65:80:8b:
64:c9:58:54:14:a3:88:87:b2:65:f4:c0:f1:ae:d4:
4b:38:6a:05:e1:e5:94:7e:92:30:b8:32:9e:b3:b6:
b7:99:d5:b1:ad:cf:fb:68:c7:8b:a0:10:30:79:9d:
a6:b8:77:72:af:50:f9:95:69:56:e0:1e:e9:57:42:
90:f0:b3:59:22:00:52:b8:6e:02:04:e6:66:73:9b:
f6:55:8e:39:11:f6:af:53:2a:3a:95:b2:91:aa:d0:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:74:B2:0D:51:25:E0:EF:81:DE:6E:4C:0D:B4:2E:F6:EB:C5:79:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5a28e9d-5b58-37a9-add5-025e84927fce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e6:a7:68:12:2b:45:8e:17:13:84:1a:41:f5:84:4d:47:21:
81:89:12:13:26:b2:e0:f8:f3:78:4f:d9:24:a6:71:b7:26:87:
6d:19:7a:30:74:27:2b:00:58:42:2b:1b:be:8a:6a:14:07:db:
15:7e:2b:27:80:18:eb:b7:e5:00:66:3c:b8:ff:c0:eb:b3:99:
14:52:2f:d9:22:7d:85:c2:82:48:b1:fc:50:48:c1:af:79:3c:
d1:26:7f:8e:4a:d5:d6:a8:da:25:6b:da:51:86:22:ab:df:26:
3d:e0:27:b8:2e:a5:91:04:d8:38:60:52:8c:4f:b7:09:aa:a5:
21:3c:88:8e:a1:24:a7:53:85:a8:24:3e:c0:10:8e:b6:68:ab:
49:45:21:5a:8d:66:05:f3:55:5d:23:23:b8:c7:a9:83:20:db:
34:6e:7c:a8:45:7f:94:0b:19:ec:5e:f4:9c:05:71:74:12:23:
8c:d1:b7:a3:a7:1a:56:ab:f8:b0:5f:40:8b:a9:f9:10:05:b8:
71:c6:0f:ef:2a:09:23:89:22:03:0b:47:0b:8a:84:e8:0a:51:
6a:43:94:44:62:bf:94:76:39:44:41:63:42:c9:89:66:1e:82:
14:06:36:78:29:32:89:7b:7a:6b:4a:c3:e3:ec:0b:92:0e:38:
26:43:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:26 2023 by rpki-client on console-ams.rpki-client.org