Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca1b0772-8984-39db-aa73-a8334a96f39c.roa
File: ca1b0772-8984-39db-aa73-a8334a96f39c.roa (raw, json)
Hash identifier: DMUD5aTWwG6NLik4Tm1MrS6YN2XK/7celra5QRH8Mt8=
Subject key identifier: 0A:61:21:9A:57:83:B0:8A:B9:F7:7D:D2:A3:E9:E4:76:77:F1:A4:7A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC503CEB28414B8728B6FF60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca1b0772-8984-39db-aa73-a8334a96f39c.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:50:3c:eb:28:41:4b:87:28:b6:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=2af10b75-84ac-4c2e-b5f6-3b3755a6d255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:3b:6c:35:72:51:75:5a:f4:ff:23:05:32:
96:23:48:8a:ad:ac:24:0d:d4:6a:73:6d:fd:48:84:
aa:63:55:1c:34:29:74:d6:d7:69:9b:75:0a:33:20:
9c:69:ba:a5:fc:e8:44:c1:64:f8:ba:cb:cd:4e:82:
64:73:f2:7a:11:86:ec:7e:2b:9d:38:f2:31:c9:de:
1d:d8:8b:8c:71:80:56:6b:ca:3c:f3:fe:22:80:60:
2a:13:e9:8a:a7:ef:b8:d8:3a:1b:c6:05:9c:40:be:
be:68:c7:1f:2e:4b:fb:17:06:1c:9c:85:44:dd:be:
d5:5e:be:ce:e1:ec:f6:e1:7d:1c:26:89:44:54:4c:
03:99:58:50:dd:00:54:e2:95:84:ce:24:70:e4:ff:
30:07:e9:a0:95:89:f4:03:b0:c6:1c:9a:ad:c2:eb:
fa:54:25:23:54:35:fb:f9:a1:7c:a0:37:cd:29:63:
ff:62:bf:a4:46:91:ea:bc:fb:7e:fd:0b:8f:95:4b:
0d:3d:8b:d8:01:ea:de:d8:43:32:57:40:ff:1c:d2:
31:99:bb:d7:01:8e:66:79:b7:92:ec:fd:f4:23:99:
8a:92:7f:85:69:ca:2c:a1:d2:1e:b0:09:e9:54:ed:
6f:aa:3a:65:92:a0:79:5d:90:b6:26:5e:5e:93:1c:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:21:9A:57:83:B0:8A:B9:F7:7D:D2:A3:E9:E4:76:77:F1:A4:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca1b0772-8984-39db-aa73-a8334a96f39c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b8:67:db:30:78:89:40:3d:22:f3:65:0a:b7:60:ec:60:6f:
8d:e2:6f:d5:03:41:d7:04:33:5d:3e:8f:45:b4:bd:a9:05:68:
c9:90:f7:d6:4b:8f:df:75:dc:c5:d6:29:b8:79:4f:a3:3c:96:
50:62:80:33:63:49:6e:bc:aa:b2:61:44:b7:6e:2c:fd:ac:fb:
75:9f:3f:6f:c7:8e:31:65:1d:08:ab:e8:66:13:19:45:5f:b8:
b1:5d:37:0f:83:82:1e:98:02:07:be:38:8d:0f:ce:81:3c:0c:
fe:e7:7f:ce:9b:b8:7e:d9:52:4d:c1:31:fe:0e:50:91:5f:e4:
ef:4e:cb:62:e9:f6:5f:5e:48:2c:a8:0f:01:60:5b:a1:fc:af:
4d:60:f3:db:39:dd:e9:0a:08:82:68:08:f7:e6:82:d2:fa:f9:
b1:2b:2a:cc:7a:4c:e0:c4:19:78:a0:c8:77:67:69:87:2c:dc:
74:a6:e4:d2:81:a8:08:42:ce:e9:c8:da:10:24:9a:8c:4b:f9:
ba:fb:f5:8f:d6:57:03:76:61:6b:83:2c:89:51:bc:ed:65:74:
86:20:46:bf:91:f3:ec:48:9d:fb:29:c4:20:bd:2b:c1:51:5c:
c6:00:35:cc:51:0f:84:45:f0:94:f6:d8:4f:c5:a5:6d:56:2a:
e9:ca:f0:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC8UDzrKEFLhyi2/2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MmFmMTBiNzUtODRhYy00YzJlLWI1ZjYtM2IzNzU1YTZkMjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YM7bDVyUXVa9P8jBTKWI0iKrawkDdRqc239
SISqY1UcNCl01tdpm3UKMyCcabql/OhEwWT4usvNToJkc/J6EYbsfiudOPIxyd4d
2IuMcYBWa8o88/4igGAqE+mKp++42DobxgWcQL6+aMcfLkv7FwYcnIVE3b7VXr7O
4ez24X0cJolEVEwDmVhQ3QBU4pWEziRw5P8wB+mglYn0A7DGHJqtwuv6VCUjVDX7
+aF8oDfNKWP/Yr+kRpHqvPt+/QuPlUsNPYvYAere2EMyV0D/HNIxmbvXAY5mebeS
7P30I5mKkn+FacosodIesAnpVO1vqjplkqB5XZC2Jl5ekxzKPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAphIZpXg7CKufd90qPp5HZ38aR6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2ExYjA3NzItODk4NC0z
OWRiLWFhNzMtYTgzMzRhOTZmMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAk7hn2zB4iUA9IvNlCrdg7GBvjeJv1QNB1wQzXT6PRbS9qQVoyZD31kuP
33XcxdYpuHlPozyWUGKAM2NJbryqsmFEt24s/az7dZ8/b8eOMWUdCKvoZhMZRV+4
sV03D4OCHpgCB744jQ/OgTwM/ud/zpu4ftlSTcEx/g5QkV/k707LYun2X15ILKgP
AWBbofyvTWDz2znd6QoIgmgI9+aC0vr5sSsqzHpM4MQZeKDId2dphyzcdKbk0oGo
CELO6cjaECSajEv5uvv1j9ZXA3Zha4MsiVG87WV0hiBGv5Hz7Eid+ynEIL0rwVFc
xgA1zFEPhEXwlPbYT8WlbVYq6crwzg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:35:21 2023 by rpki-client on console-fra.rpki-client.org