Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/40f8ca25-298d-390a-8595-3d344fb0aa9d.roa
File: 40f8ca25-298d-390a-8595-3d344fb0aa9d.roa (raw, json)
Hash identifier: rXu1jleD/cCf1/IzCipv686B2Ch00aU418EXChGNp4o=
Subject key identifier: 3E:27:38:0E:3E:BB:7E:A4:3D:D1:69:55:A9:0A:F5:DB:62:14:34:44
Certificate issuer: /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial: 010D0C9F4328583F2FF1FB77B2404C652346C9C0
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/40f8ca25-298d-390a-8595-3d344fb0aa9d.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 199.255.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:f1:fb:77:b2:40:4c:65:23:46:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=cfcb7dd9-2d53-4237-ba25-79b10321527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:f0:33:d3:e1:78:60:d6:b8:67:d1:84:7f:
ba:08:b5:00:02:3b:76:cd:22:8a:09:24:0f:bc:09:
c0:92:ce:c2:61:1d:e7:46:f0:c7:6f:f8:50:8d:e9:
73:9a:06:dc:bf:04:5f:68:97:44:00:0e:62:50:f8:
f8:19:56:f4:eb:45:77:87:c5:65:1f:98:9e:f9:05:
1a:c1:c7:91:54:28:5a:2f:1c:6c:57:ef:3c:3c:e9:
1e:e4:31:92:62:eb:7f:61:f7:dd:f4:ba:c3:bc:e9:
25:3d:b3:60:59:ba:5f:96:50:7d:92:56:16:a3:fe:
4d:01:93:c3:17:be:17:3d:f4:90:ff:0b:e6:06:4f:
17:08:40:49:e7:9a:aa:5d:ad:c9:fa:07:67:d8:ed:
68:e9:d5:4f:c8:e9:73:34:32:d6:70:b1:96:a2:85:
12:6d:81:d7:82:ed:48:d0:dd:66:83:fd:8e:6d:1e:
1f:eb:4f:b3:dc:8d:1e:ee:fa:f5:39:f4:99:a6:07:
e4:3b:75:a9:3f:b4:2a:5d:17:8e:5a:8e:65:29:f5:
96:3f:e2:e2:6a:71:51:94:d7:72:cb:23:53:d2:ec:
44:bc:4f:68:53:00:9b:9f:47:d8:ec:e4:50:38:95:
a8:f7:ba:03:91:7c:f7:c7:19:c6:1e:fb:0f:85:70:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:27:38:0E:3E:BB:7E:A4:3D:D1:69:55:A9:0A:F5:DB:62:14:34:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/40f8ca25-298d-390a-8595-3d344fb0aa9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:43:d2:c2:90:51:eb:e4:c3:7a:e8:2a:51:57:9c:27:1f:e6:
93:e5:85:67:88:34:b1:0d:4b:a4:11:bf:9d:ce:92:f9:c3:65:
b1:16:4c:8c:31:94:ae:4f:07:d0:c9:32:45:e7:58:99:8b:f5:
f8:ea:1c:66:2e:74:2a:5c:0c:74:80:3b:55:be:1d:e0:b2:a9:
a3:a1:10:54:5d:44:c6:73:c1:bf:fb:e6:79:78:f1:b7:e2:6c:
66:94:e6:e8:6d:c0:b1:55:08:09:04:c2:5b:94:93:d6:26:8b:
c3:9b:9c:f0:72:f8:9d:27:ef:13:63:3b:0b:00:cd:09:a6:33:
72:3a:94:ae:74:d6:77:88:19:71:97:8c:5b:72:df:70:98:ad:
cc:e9:5e:7c:68:c5:80:41:20:0f:bd:76:a6:98:72:ad:d5:a0:
6e:d8:70:54:36:68:66:41:78:4c:21:5d:b9:bd:12:51:ee:ba:
cb:d9:78:52:ed:eb:6a:0d:d6:5f:79:c0:20:28:87:86:23:c5:
50:ce:57:d4:f1:db:75:e2:76:49:15:2a:8c:15:d5:8c:dc:1b:
9d:20:3c:c6:dd:42:83:83:4f:f7:cc:dc:be:c4:c6:15:08:40:
91:58:80:49:4b:45:f7:8d:ca:d0:77:0b:3b:01:ce:f1:b6:e8:
6b:e9:ef:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8v8ft3skBMZSNGycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDkwODEyMDAwMFoXDTIyMTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2ZjYjdkZDktMmQ1My00MjM3LWJhMjUtNzliMTAzMjE1MjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsvwM9PheGDWuGfRhH+6CLUAAjt2zSKKCSQP
vAnAks7CYR3nRvDHb/hQjelzmgbcvwRfaJdEAA5iUPj4GVb060V3h8VlH5ie+QUa
wceRVChaLxxsV+88POke5DGSYut/Yffd9LrDvOklPbNgWbpfllB9klYWo/5NAZPD
F74XPfSQ/wvmBk8XCEBJ55qqXa3J+gdn2O1o6dVPyOlzNDLWcLGWooUSbYHXgu1I
0N1mg/2ObR4f60+z3I0e7vr1OfSZpgfkO3WpP7QqXReOWo5lKfWWP+LianFRlNdy
yyNT0uxEvE9oUwCbn0fY7ORQOJWo97oDkXz3xxnGHvsPhXAcrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4nOA4+u36kPdFpVakK9dtiFDREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvNDBmOGNhMjUtMjk4ZC0z
OTBhLTg1OTUtM2QzNDRmYjBhYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlD0sKQUevkw3roKlFXnCcf5pPlhWeINLENS6QRv53OkvnDZbEWTIwx
lK5PB9DJMkXnWJmL9fjqHGYudCpcDHSAO1W+HeCyqaOhEFRdRMZzwb/75nl48bfi
bGaU5uhtwLFVCAkEwluUk9Ymi8ObnPBy+J0n7xNjOwsAzQmmM3I6lK501neIGXGX
jFty33CYrczpXnxoxYBBIA+9dqaYcq3VoG7YcFQ2aGZBeEwhXbm9ElHuusvZeFLt
62oN1l95wCAoh4YjxVDOV9Tx23XidkkVKowV1YzcG50gPMbdQoODT/fM3L7ExhUI
QJFYgElLRfeNytB3CzsBzvG26Gvp710=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:27 2023 by rpki-client on console-ams.rpki-client.org