Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c82c8a68-1794-3663-baa2-6b804eab0165.roa
File: c82c8a68-1794-3663-baa2-6b804eab0165.roa (raw, json)
Hash identifier: Tbb5jJpe++tHtdImKtPqyzA6qV1pY17tp3IE/Tzn+1I=
Subject key identifier: 91:20:B0:0D:8A:92:CC:E8:8B:C3:27:7E:BE:C4:99:CE:19:54:FB:2D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858408FEFC89AB70031263E347E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c82c8a68-1794-3663-baa2-6b804eab0165.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 47.128.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:ef:c8:9a:b7:00:31:26:3e:34:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=10d47067-71b7-47d5-bef2-2c91f7e618c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:da:f2:73:8f:52:0a:c1:4f:62:2c:65:14:
8a:84:7d:a4:5c:49:48:9d:68:b6:7e:6c:34:d4:90:
7c:e7:1e:8f:c1:0f:53:bd:f1:77:4e:75:c7:90:f9:
66:a6:5d:22:45:18:14:c6:aa:4d:96:94:0d:f2:4d:
20:2b:bb:d2:3d:6d:fe:7b:4b:9f:92:d7:3e:80:a7:
81:52:ec:31:23:75:66:f0:35:67:11:84:9a:75:e3:
4d:80:73:ff:6f:a4:80:5c:79:a6:76:68:53:5c:b4:
70:d2:3e:9e:51:a3:77:18:7f:42:5a:19:18:46:b2:
fb:f9:c0:9b:25:8a:88:a2:bc:79:30:ab:ac:27:a6:
19:74:32:87:fd:58:dc:ad:4b:63:07:0e:39:aa:2b:
fd:f3:9e:e8:35:d0:3f:85:d5:4f:c4:8d:af:57:b4:
4f:40:57:2c:0a:6c:ee:23:97:ab:6d:27:f7:25:e2:
02:4e:5e:5a:ed:bc:af:f0:13:0e:58:6d:57:8e:27:
d0:60:ec:ad:5f:16:69:93:bc:87:56:cb:4c:7e:1e:
6d:66:c7:18:16:db:1b:d7:5f:75:f9:52:6d:e0:04:
a4:9a:c9:a5:f5:bb:46:3e:51:7f:99:89:4e:2e:60:
8f:16:fe:f6:d0:e3:31:47:61:cc:78:58:6c:47:8e:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:20:B0:0D:8A:92:CC:E8:8B:C3:27:7E:BE:C4:99:CE:19:54:FB:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c82c8a68-1794-3663-baa2-6b804eab0165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
47.128.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b4:ae:e2:1f:44:3f:14:d5:c7:1c:df:4b:63:8f:1d:4e:bb:
ed:5b:5c:bb:31:7e:bc:27:d4:15:ee:c0:87:6e:17:b1:c2:8a:
dd:0d:92:b5:75:47:70:33:35:ca:d4:12:4d:25:e2:89:2a:59:
11:83:a9:0c:cc:36:b9:f7:71:19:74:00:ed:2f:69:2e:f6:44:
02:ba:46:cd:24:8f:67:24:4c:a0:92:8a:43:92:67:94:96:85:
6d:ed:3a:4c:62:41:34:fb:a7:91:af:b3:1a:ed:5e:05:15:4e:
0b:8d:34:68:b4:ef:b6:a1:78:e9:5c:ad:88:4d:f7:66:53:f3:
d2:5f:b6:98:26:84:d6:86:04:b7:ce:38:eb:af:a1:35:ba:0d:
a3:0c:00:32:fe:d3:66:e6:dc:63:15:8b:ee:da:fa:37:c7:bd:
80:2f:96:ca:00:91:13:ac:f9:8a:fe:c8:50:1f:dd:81:36:55:
8e:c8:65:e1:21:fa:ec:32:d0:c6:51:5a:8e:b4:5d:2f:6a:6b:
30:a8:a5:5d:ad:e5:48:90:61:b5:09:c9:65:07:59:02:73:9d:
8d:38:75:14:a8:d4:d9:00:cf:c2:a2:9d:1e:ae:cf:b5:1b:4c:
76:06:4c:ec:72:9c:b5:ec:e5:5d:88:22:56:92:e4:5b:cf:fe:
3c:e6:53:72
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECP78iatwAxJj40fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
MTBkNDcwNjctNzFiNy00N2Q1LWJlZjItMmM5MWY3ZTYxOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj73a8nOPUgrBT2IsZRSKhH2kXElInWi2fmw0
1JB85x6PwQ9TvfF3TnXHkPlmpl0iRRgUxqpNlpQN8k0gK7vSPW3+e0ufktc+gKeB
UuwxI3Vm8DVnEYSadeNNgHP/b6SAXHmmdmhTXLRw0j6eUaN3GH9CWhkYRrL7+cCb
JYqIorx5MKusJ6YZdDKH/VjcrUtjBw45qiv9857oNdA/hdVPxI2vV7RPQFcsCmzu
I5erbSf3JeICTl5a7byv8BMOWG1XjifQYOytXxZpk7yHVstMfh5tZscYFtsb1191
+VJt4ASkmsml9btGPlF/mYlOLmCPFv720OMxR2HMeFhsR46sdQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJEgsA2Kkszoi8Mnfr7Emc4ZVPstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzgyYzhhNjgtMTc5NC0z
NjYzLWJhYTItNmI4MDRlYWIwMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCL4AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMrSu4h9EPxTVxxzfS2OPHU677VtcuzF+vCfUFe7Ah24XscKK3Q2StXVH
cDM1ytQSTSXiiSpZEYOpDMw2ufdxGXQA7S9pLvZEArpGzSSPZyRMoJKKQ5JnlJaF
be06TGJBNPunka+zGu1eBRVOC400aLTvtqF46VytiE33ZlPz0l+2mCaE1oYEt844
66+hNboNowwAMv7TZubcYxWL7tr6N8e9gC+WygCRE6z5iv7IUB/dgTZVjshl4SH6
7DLQxlFajrRdL2prMKilXa3lSJBhtQnJZQdZAnOdjTh1FKjU2QDPwqKdHq7PtRtM
dgZM7HKctezlXYgiVpLkW8/+POZTcg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:35:18 2023 by rpki-client on console-fra.rpki-client.org