Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5ede6fe3-622e-33d6-aad6-8efe02f1ee8d.roa
File: 5ede6fe3-622e-33d6-aad6-8efe02f1ee8d.roa (raw, json)
Hash identifier: ajAigbqVVh7odHNRf2vT4ieoPiKVFWW6HMX4O8FMDjc=
Subject key identifier: 65:A2:F4:04:DE:8D:F2:64:08:56:1C:19:A5:AB:04:78:F3:29:4B:55
Certificate issuer: /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial: 010D0C9F43285840B9FC833FE8301A0D8B976480
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5ede6fe3-622e-33d6-aad6-8efe02f1ee8d.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 23.249.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:fc:83:3f:e8:30:1a:0d:8b:97:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=c32ffbf7-4658-4cae-821e-7371d183e209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:1c:38:f7:c6:e2:90:14:2e:31:ec:8b:23:
a2:59:9c:4e:80:0f:e0:6f:a4:72:2f:94:94:75:3c:
1d:52:45:c8:a1:78:96:36:0d:08:d4:1a:c3:d5:7a:
20:dc:ec:92:07:1c:dd:00:a4:a5:f4:6e:f9:06:18:
c4:ce:d1:a7:38:62:6c:8e:52:90:2b:9c:b0:75:1f:
2e:89:ce:a0:21:55:6f:53:ad:54:4e:8b:c2:4d:b5:
fc:9a:5b:40:da:b8:37:a1:ef:cd:01:21:0f:3a:2f:
72:18:f5:77:96:7e:f3:90:b8:98:03:b9:5d:9a:89:
9e:08:bc:ed:9a:0e:7a:7c:c0:dc:b1:94:b0:43:35:
b2:0e:ad:21:78:7b:3b:7e:ab:fb:93:9e:7f:54:df:
3e:3b:c8:c8:ad:0e:04:e2:c6:f1:d8:41:1e:c9:b9:
4e:a2:66:76:8c:64:ea:0d:dc:b0:11:1e:34:3a:77:
3a:e8:82:db:52:0e:dd:fb:7f:0b:97:b4:11:3d:72:
10:73:a6:45:af:54:51:b5:d5:8c:af:b0:97:54:bc:
82:4d:35:6e:47:9b:9b:c5:1a:bb:a3:ec:c2:19:1e:
0c:f6:0e:41:62:3b:56:6d:18:61:ff:93:7a:6b:e6:
d6:86:dc:db:e0:8d:42:5b:22:3d:ea:8b:e7:56:ab:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:F4:04:DE:8D:F2:64:08:56:1C:19:A5:AB:04:78:F3:29:4B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/5ede6fe3-622e-33d6-aad6-8efe02f1ee8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:10:ed:0a:81:e0:e2:8f:88:d1:eb:70:f3:0e:f8:50:99:89:
ee:32:66:dc:4c:92:52:0e:e1:87:42:08:17:f3:26:e5:ed:25:
49:33:75:45:37:53:83:07:5b:31:61:e3:a5:0d:40:02:db:02:
54:c4:dc:bc:f7:f4:20:66:78:d4:de:06:c5:62:c5:86:ef:cf:
4b:1b:33:44:3f:6b:33:0a:c9:44:0d:89:65:0d:20:a3:a6:9e:
5b:75:54:0f:e3:66:a5:4a:75:9f:21:8c:51:16:a8:7e:f9:d0:
ed:5f:8d:cd:2e:ab:48:a2:c5:24:00:e8:97:4a:89:da:c4:4f:
a0:9e:42:e8:ec:bb:a1:cf:92:fa:77:43:09:1a:ee:ec:b8:62:
ef:c6:71:59:21:45:62:7c:a5:27:fd:9b:d0:4c:a5:92:3b:b9:
f8:3f:4d:e9:1a:37:f5:24:48:f1:7e:9e:61:b5:cf:76:cf:f7:
aa:ed:39:aa:0b:10:b7:57:8d:54:54:80:51:1a:10:62:16:a7:
e3:f9:64:2e:5e:50:0f:6f:6c:b1:22:ca:b7:cf:33:4c:7c:f6:
7e:81:7c:c9:f8:cd:db:a7:81:35:6f:52:34:7f:2c:4a:52:03:
14:ed:38:3c:7c:2c:aa:df:25:8a:a8:f6:24:31:96:d2:25:06:
6b:d9:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:27 2023 by rpki-client on console-ams.rpki-client.org