Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2aa92ac9-491a-3ca7-aa39-7f4c2dafabbd.roa
File: 2aa92ac9-491a-3ca7-aa39-7f4c2dafabbd.roa (raw, json)
Hash identifier: l3mooCtwc1c9nJJ6Wn30FH4IXfIeGpEG3zRm/r3Cjsk=
Subject key identifier: 37:6A:C4:43:8A:79:32:F0:DA:62:01:A1:A0:53:E8:E3:13:53:CC:09
Certificate issuer: /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial: 010D0C9F4328583F0BD3CF7157C9DD667AB37E00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2aa92ac9-491a-3ca7-aa39-7f4c2dafabbd.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 23.249.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:d3:cf:71:57:c9:dd:66:7a:b3:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=73607f8f-f643-4bcf-b303-a0c42bfdd06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4d:f7:4b:45:cc:f8:37:ed:2c:e2:98:b5:52:
56:2f:16:ff:a8:7e:43:e5:34:8e:cb:d4:5b:ae:1a:
72:1f:a2:2d:9a:6c:19:73:02:a7:3b:45:c1:08:9b:
2c:8e:99:b9:48:a2:5a:c1:0a:fb:9e:12:53:c6:e4:
6e:67:21:21:7c:77:4e:29:8a:52:bb:e4:23:48:c3:
fb:85:1e:1a:38:a3:87:66:18:36:87:86:5c:9d:0f:
6d:10:60:fe:3b:eb:53:93:40:ab:70:0c:4e:77:83:
fa:4e:95:d4:91:30:ec:10:68:52:42:52:ec:77:8f:
e3:d0:82:79:f6:3f:9d:fe:2f:35:99:b5:25:0d:6b:
9a:a0:29:f1:d3:65:85:f2:c2:7f:6d:c8:62:12:fb:
cb:9a:17:3f:d6:72:cb:9b:77:4e:46:6d:16:77:13:
d4:dd:20:d5:ae:5f:64:b9:13:3e:1c:34:a8:39:f8:
83:19:0c:b2:5f:e0:d2:a2:06:73:90:28:d6:48:d0:
6d:96:e6:72:06:66:aa:2e:34:ca:77:8f:f3:7e:6f:
2c:55:ed:2d:6d:16:11:e1:e2:64:9b:b0:ca:96:57:
e6:d0:ff:d4:f9:db:d8:32:46:ed:a8:b7:a5:dc:6d:
91:11:63:59:45:7d:e7:95:ec:36:bd:88:aa:35:3f:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:C4:43:8A:79:32:F0:DA:62:01:A1:A0:53:E8:E3:13:53:CC:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/2aa92ac9-491a-3ca7-aa39-7f4c2dafabbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:46:75:e1:e7:fa:35:f0:f5:5f:05:34:ad:8d:c9:e2:a0:73:
26:48:2a:24:0a:77:32:97:67:ee:84:58:28:ac:76:74:67:c1:
9f:5d:24:05:88:6e:f2:b6:7a:b0:ef:03:e8:e1:28:c2:28:0a:
87:09:44:33:6c:4f:ab:6e:3b:35:2c:d9:fa:ca:a6:65:21:ef:
e9:f3:6e:43:02:75:29:9e:83:4f:b4:cd:03:e3:3c:ea:77:cf:
67:d3:27:8c:94:50:62:f6:2e:e2:16:e4:a3:18:a9:25:1b:8d:
24:25:be:e1:af:66:2e:44:70:43:79:e9:62:29:a9:64:8e:4e:
c9:d9:a7:99:79:50:84:89:ae:02:69:c7:33:00:4e:37:a6:6e:
74:47:ba:e2:75:be:c9:5e:b7:c1:fe:6a:90:42:ef:46:17:32:
f4:23:ea:02:2b:3f:91:7f:14:34:c7:e7:d5:80:55:d0:d5:87:
0c:a0:2a:aa:db:b5:0f:46:d5:99:07:c4:5c:82:d8:9d:c6:f1:
2b:e3:5f:e2:6e:16:9d:c2:20:04:34:ce:d3:bb:3c:06:ba:11:
13:d9:a9:6e:d8:e1:8c:9e:7f:55:90:52:64:4d:0c:f4:48:7f:
f8:8c:a8:5d:a0:8b:f5:44:d2:73:f1:75:96:37:ff:11:c7:00:
04:2b:3b:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8L089xV8ndZnqzfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDgyNjEyMDAwMFoXDTIyMTAwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzM2MDdmOGYtZjY0My00YmNmLWIzMDMtYTBjNDJiZmRkMDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8033S0XM+DftLOKYtVJWLxb/qH5D5TSOy9Rb
rhpyH6ItmmwZcwKnO0XBCJssjpm5SKJawQr7nhJTxuRuZyEhfHdOKYpSu+QjSMP7
hR4aOKOHZhg2h4ZcnQ9tEGD+O+tTk0CrcAxOd4P6TpXUkTDsEGhSQlLsd4/j0IJ5
9j+d/i81mbUlDWuaoCnx02WF8sJ/bchiEvvLmhc/1nLLm3dORm0WdxPU3SDVrl9k
uRM+HDSoOfiDGQyyX+DSogZzkCjWSNBtluZyBmaqLjTKd4/zfm8sVe0tbRYR4eJk
m7DKllfm0P/U+dvYMkbtqLel3G2REWNZRX3nlew2vYiqNT+vZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdqxEOKeTLw2mIBoaBT6OMTU8wJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvMmFhOTJhYzktNDkxYS0z
Y2E3LWFhMzktN2Y0YzJkYWZhYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/nQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJGdeHn+jXw9V8FNK2NyeKgcyZIKiQKdzKXZ+6EWCisdnRnwZ9dJAWI
bvK2erDvA+jhKMIoCocJRDNsT6tuOzUs2frKpmUh7+nzbkMCdSmeg0+0zQPjPOp3
z2fTJ4yUUGL2LuIW5KMYqSUbjSQlvuGvZi5EcEN56WIpqWSOTsnZp5l5UISJrgJp
xzMATjembnRHuuJ1vslet8H+apBC70YXMvQj6gIrP5F/FDTH59WAVdDVhwygKqrb
tQ9G1ZkHxFyC2J3G8SvjX+JuFp3CIAQ0ztO7PAa6ERPZqW7Y4Yyef1WQUmRNDPRI
f/iMqF2gi/VE0nPxdZY3/xHHAAQrO7E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:27 2023 by rpki-client on console-ams.rpki-client.org