Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5a8777b2-49e0-33c7-b22c-1da85f4849db.roa
File: 5a8777b2-49e0-33c7-b22c-1da85f4849db.roa (raw, json)
Hash identifier: CIhVzPTit8VOyytikq9T/Z8ZsqOaHYea0fi8P5rNKsQ=
Subject key identifier: B4:3B:CD:0C:6E:85:D5:29:4C:4D:7A:61:02:73:FB:AB:C3:8E:A2:43
Certificate issuer: /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial: 010D0C9F43285840B9FC8055FCAD8238E9BBFA00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5a8777b2-49e0-33c7-b22c-1da85f4849db.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 23.249.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:fc:80:55:fc:ad:82:38:e9:bb:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=b99042bc-4b5c-45c3-b7bf-a988bcc630a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:32:62:e1:41:b5:8d:86:15:28:c0:62:06:
df:b7:be:da:fc:96:0a:1f:96:78:d3:65:48:ad:8c:
2c:90:de:c6:0a:52:02:77:fd:8e:d7:f4:d8:4b:38:
64:d0:77:a8:e9:2d:b4:91:28:cb:60:c2:9d:fc:1a:
f0:87:56:b3:a1:8b:3b:d3:ce:d4:8e:ee:fe:6a:07:
ee:c7:14:9c:eb:1b:31:06:b4:3b:77:4e:5c:b0:83:
e8:0d:b1:6a:f3:69:47:b9:5d:34:5b:12:87:45:71:
fc:be:46:92:d1:03:5e:3a:c3:b4:8f:78:f4:c9:55:
ce:4f:61:67:2d:25:59:c2:f8:af:f9:9d:c0:a7:c8:
d7:90:a4:ad:18:fa:fb:47:df:e6:f2:2e:13:8b:66:
c3:13:b0:ef:18:8b:cf:17:8d:4a:1c:b8:3d:cc:a3:
2f:62:4f:23:91:b9:9b:1f:78:d8:0a:e9:49:61:da:
49:65:45:8d:39:a5:01:cd:19:f9:6c:31:c1:80:08:
e4:83:10:42:bf:d7:d9:92:98:22:77:8b:6a:2b:e2:
00:5f:ed:3f:7e:30:a8:61:83:a9:5c:7d:63:8f:4b:
85:64:97:38:6b:52:4f:2a:62:28:19:6a:a5:c3:8d:
ed:f4:a4:fe:27:4a:21:63:34:0e:ed:38:dd:b8:72:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3B:CD:0C:6E:85:D5:29:4C:4D:7A:61:02:73:FB:AB:C3:8E:A2:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5a8777b2-49e0-33c7-b22c-1da85f4849db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9a:6c:ed:d4:2f:89:45:ff:86:90:c7:e2:54:b4:94:e3:f4:
85:0a:86:3a:c0:45:63:55:60:f8:ea:f9:3e:e0:59:f5:db:57:
a5:56:f1:f3:eb:7d:e7:d3:78:34:ec:df:9f:8b:e1:77:ad:22:
66:c0:40:a6:09:57:58:09:b5:62:2c:8c:f3:a8:32:e9:f9:eb:
46:e8:22:8a:1b:76:dc:6a:dd:00:10:b8:14:91:e7:17:9a:ae:
40:85:d5:9b:d1:24:7e:80:eb:54:92:7d:04:e1:12:2a:dd:9c:
89:59:a6:60:0b:16:f0:0e:ce:37:60:73:8b:ca:ce:27:25:eb:
22:46:08:e2:bb:c3:2e:67:1e:cc:cb:19:25:41:27:81:2e:da:
9b:92:6c:ff:86:80:3c:dc:38:4e:da:f3:f6:27:96:a6:59:8f:
52:26:8c:a1:55:e2:12:7e:d7:67:c9:3e:a2:b9:b2:47:2f:ff:
8c:96:e7:d9:c2:f3:e6:2d:a4:18:d9:44:0a:b2:0a:78:c4:8f:
72:75:e6:65:57:8a:0d:1b:57:2f:d8:49:b8:50:5e:9e:c1:55:
5b:a0:ea:f2:7a:0c:d4:94:59:95:d5:e7:db:aa:fb:9b:6e:f8:
e4:26:b0:c2:40:8f:9a:20:c0:9a:ab:51:0e:12:4a:88:09:0f:
6b:04:9b:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC5/IBV/K2COOm7+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Yjk5MDQyYmMtNGI1Yy00NWMzLWI3YmYtYTk4OGJjYzYzMGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNgyYuFBtY2GFSjAYgbft77a/JYKH5Z402VI
rYwskN7GClICd/2O1/TYSzhk0Heo6S20kSjLYMKd/Brwh1azoYs7087Uju7+agfu
xxSc6xsxBrQ7d05csIPoDbFq82lHuV00WxKHRXH8vkaS0QNeOsO0j3j0yVXOT2Fn
LSVZwviv+Z3Ap8jXkKStGPr7R9/m8i4Ti2bDE7DvGIvPF41KHLg9zKMvYk8jkbmb
H3jYCulJYdpJZUWNOaUBzRn5bDHBgAjkgxBCv9fZkpgid4tqK+IAX+0/fjCoYYOp
XH1jj0uFZJc4a1JPKmIoGWqlw43t9KT+J0ohYzQO7TjduHKlhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQ7zQxuhdUpTE16YQJz+6vDjqJDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvNWE4Nzc3YjItNDllMC0z
M2M3LWIyMmMtMWRhODVmNDg0OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/nQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmabO3UL4lF/4aQx+JUtJTj9IUKhjrARWNVYPjq+T7gWfXbV6VW8fPr
fefTeDTs35+L4XetImbAQKYJV1gJtWIsjPOoMun560boIoobdtxq3QAQuBSR5xea
rkCF1ZvRJH6A61SSfQThEirdnIlZpmALFvAOzjdgc4vKzicl6yJGCOK7wy5nHszL
GSVBJ4Eu2puSbP+GgDzcOE7a8/YnlqZZj1ImjKFV4hJ+12fJPqK5skcv/4yW59nC
8+YtpBjZRAqyCnjEj3J15mVXig0bVy/YSbhQXp7BVVug6vJ6DNSUWZXV59uq+5tu
+OQmsMJAj5ogwJqrUQ4SSogJD2sEm+A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:27 2023 by rpki-client on console-ams.rpki-client.org