Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfb5cf66-f931-32ac-a10f-65b002a1538f.roa
File: cfb5cf66-f931-32ac-a10f-65b002a1538f.roa (raw, json)
Hash identifier: 9I36tR65dQPuWFEYx4m85rxMQ3s+VdKRak4O2yw6kuI=
Subject key identifier: 16:88:CD:87:1A:1D:53:13:EF:C3:C8:24:EF:A4:18:9D:83:DD:6D:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC504FFEFAD7074CF0C22600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfb5cf66-f931-32ac-a10f-65b002a1538f.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:50:4f:fe:fa:d7:07:4c:f0:c2:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=31b6d9e8-77ab-4423-adef-db5b70219d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:09:c7:ca:dd:3e:1c:1b:dc:0e:40:6e:c1:
e9:e5:6a:7f:73:91:5d:24:9c:57:4a:0a:d4:b0:89:
3e:4e:4b:ab:1e:4a:d7:97:f6:4c:18:60:4a:88:f2:
a6:14:65:68:ad:c9:58:53:da:ee:f0:2e:c7:fa:1f:
66:42:8c:7a:ab:b2:bc:84:ad:da:c1:f3:a2:d3:05:
2e:77:0c:b6:73:ac:f6:87:46:2f:62:b3:c5:2e:35:
7d:aa:c5:55:e7:49:11:e3:22:8a:43:85:ce:07:71:
77:cd:02:3f:84:36:34:64:bb:7e:b5:d7:14:4f:09:
c2:ac:1e:ac:fc:5e:8d:6b:44:4d:4b:04:52:0a:2d:
aa:2e:25:a2:ec:16:f2:cd:de:dc:89:c6:22:3b:d8:
aa:dc:f2:fa:78:84:f9:5f:db:44:f8:5b:bb:4b:5f:
bd:b8:e3:c2:cc:d9:8f:dc:1c:83:88:b8:8f:cb:13:
21:9e:fc:25:59:1a:1f:3d:05:d1:d7:66:b9:5b:d3:
88:3b:69:07:66:a5:8f:f3:77:e8:79:d0:cc:17:3c:
16:76:c9:1d:85:da:44:a3:f9:b7:0d:05:a3:e9:37:
9b:fa:bc:68:9b:61:af:72:5c:c5:a2:c4:66:bc:b0:
c2:47:cd:db:70:4f:8c:dc:90:83:02:df:7b:6f:c8:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:88:CD:87:1A:1D:53:13:EF:C3:C8:24:EF:A4:18:9D:83:DD:6D:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cfb5cf66-f931-32ac-a10f-65b002a1538f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:07:aa:e6:3c:c3:e9:6d:9a:95:65:9a:90:c9:4a:d9:54:57:
28:ac:75:2e:8e:13:ab:1f:2e:6d:de:a5:7f:50:3e:f8:d8:af:
1d:47:a7:0a:a0:ea:ff:be:20:fc:cf:99:f2:fb:0a:87:88:96:
5a:46:8e:53:b4:95:82:3f:fc:d0:4a:04:b4:44:74:64:67:99:
e9:a7:8d:e2:c3:39:07:43:8d:79:46:20:63:9c:67:cc:89:97:
42:66:28:62:b3:de:e0:0b:eb:14:95:88:2d:ea:33:99:db:76:
70:27:8c:2c:28:08:9d:ba:ba:c5:22:e7:8f:e9:0e:97:34:c9:
40:28:80:ad:f7:7b:ad:9a:77:e9:3c:4f:88:95:b0:1b:b6:ba:
2a:41:a6:b2:ad:9b:7e:e2:f8:22:52:d1:80:03:2c:c8:94:53:
43:20:8f:1a:59:c4:77:5d:73:d8:c5:16:8a:ef:a3:f6:74:66:
0e:4f:42:35:b1:4f:0a:df:10:60:7e:8e:af:34:2e:41:a9:03:
c1:a7:37:51:bc:d8:c3:aa:db:4a:a9:a6:7e:d1:cb:72:b3:04:
33:48:8c:96:4a:4f:87:94:19:8d:93:37:59:c4:ed:c7:7e:18:
fc:84:12:a2:ca:ba:b9:7c:6f:02:f3:b3:e1:43:99:74:57:4b:
03:2d:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:43 2023 by rpki-client on console-ams.rpki-client.org