Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8f6184b-9b00-325d-ac85-993a8eb147b5.roa
File: f8f6184b-9b00-325d-ac85-993a8eb147b5.roa (raw, json)
Hash identifier: cTnywtxnlpNsCsLBZgghgXrH8v9O5M7/F9Zd144NbnU=
Subject key identifier: 64:A0:AC:2A:9F:94:48:F3:80:D4:39:E2:13:A1:C1:2C:8E:91:1F:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C2032E6B5ABDEF11E91A9940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8f6184b-9b00-325d-ac85-993a8eb147b5.roa
Signing time: Mon 30 Jan 2023 12:00:00 +0000
ROA not before: Mon 30 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c2:03:2e:6b:5a:bd:ef:11:e9:1a:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 30 12:00:00 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=240e242f-1891-4ce8-9e55-746941b9c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:10:ac:85:e2:f1:04:fd:34:5e:df:b8:0c:
84:c5:3f:aa:94:87:81:96:78:be:94:b9:88:27:85:
36:81:8c:7d:07:fa:78:23:bf:74:36:0e:b7:df:08:
95:b9:d2:ad:ad:df:b5:7b:5d:7d:2f:3a:d5:4d:9d:
b4:01:c0:fa:13:bf:f0:fc:68:f6:c0:e3:d1:1e:4a:
fd:1d:d1:b4:7b:63:20:37:db:0f:f8:f6:0a:00:f2:
6f:b9:3f:f4:db:cf:af:96:47:69:b0:38:36:f0:76:
a2:5e:46:87:3f:f7:aa:36:79:dd:ea:93:2d:36:df:
4c:5e:1a:bf:e4:d3:61:71:10:aa:3f:ac:27:59:44:
99:46:49:fe:67:fb:64:48:27:f8:87:be:18:92:72:
ab:fa:7c:b4:f0:0b:30:87:46:79:85:77:f1:2e:4e:
59:54:ce:db:aa:d2:d3:a9:a4:03:56:ca:fd:28:41:
2e:5a:14:0c:b7:ca:d3:6b:65:70:3e:ef:81:66:48:
2b:4c:f3:79:f8:0f:7e:40:a6:6a:db:32:8c:15:eb:
27:4a:00:66:e9:98:b8:52:88:34:d7:47:b2:88:15:
b4:ed:40:ed:bf:4c:ce:bc:4e:7f:12:86:f7:ab:5c:
54:27:06:94:8a:56:cc:bf:e0:14:fd:be:42:6f:70:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:AC:2A:9F:94:48:F3:80:D4:39:E2:13:A1:C1:2C:8E:91:1F:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f8f6184b-9b00-325d-ac85-993a8eb147b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:9c:f0:0d:bb:42:05:97:99:d1:24:79:f0:1b:d8:8f:79:b6:
16:4a:5d:fd:a4:ca:2a:c8:9c:28:bb:24:a1:98:74:c4:b0:c3:
0e:20:e0:96:77:8a:b7:ea:de:4d:c0:e8:77:d6:d4:9f:48:96:
ac:49:7c:8c:73:04:78:9f:12:33:34:1c:80:78:4b:8a:1f:3b:
92:b6:38:ae:1d:0f:ac:93:e4:28:65:f9:1e:93:78:42:61:1c:
33:0f:a5:2e:c8:3e:ef:f3:2b:6c:88:f0:a9:81:ed:67:f0:71:
11:03:56:89:08:73:01:18:5a:f4:9f:66:ff:80:59:ef:59:ac:
39:28:8e:81:49:f8:9e:f1:3b:16:cc:b2:b0:3b:7e:3d:e5:6e:
18:b8:39:c5:5e:47:a5:cb:eb:7b:78:41:f7:3f:32:2a:3e:7c:
ec:c6:99:e6:8a:97:9e:80:a7:25:42:b0:39:4e:a7:ae:26:57:
ab:9b:19:25:6e:0b:c0:39:a6:2a:ee:25:b8:40:63:6b:85:05:
83:13:1d:d2:a9:dc:ce:ce:32:65:35:60:8e:23:27:f0:c4:54:
b4:ef:cd:0c:a5:cc:eb:5b:64:dd:09:ba:05:48:09:94:48:1b:
08:58:92:ef:b3:99:52:99:6c:93:35:88:8f:53:a6:b7:a0:bf:
a2:ba:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:52 2023 by rpki-client on console-fra.rpki-client.org