Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/495795ba-e884-3c94-9d63-75294965fa6a.roa
File: 495795ba-e884-3c94-9d63-75294965fa6a.roa (raw, json)
Hash identifier: V3rBwdQQIwrP1B2LmS0i3802ctCHCINDvobBj6M7c0I=
Subject key identifier: B0:24:DD:12:13:77:C6:14:35:18:31:FC:12:29:6C:28:B4:37:2D:0C
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F43285844246945F3C510ADD0A0F2C2C8
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/495795ba-e884-3c94-9d63-75294965fa6a.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 36352
IP address blocks: 192.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:45:f3:c5:10:ad:d0:a0:f2:c2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=4b223266-2e81-4c64-beca-93b48ea0c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:bc:54:bc:83:0f:39:f5:d7:6b:9e:d0:54:
73:f7:86:0c:6c:6a:f5:ac:91:8d:7a:d1:85:bf:72:
9b:b7:2c:23:b4:84:f2:52:c0:e9:5f:0a:be:f3:2d:
d9:9d:02:cb:15:60:d2:07:f6:20:41:80:ec:e1:84:
0f:68:87:9d:33:59:f0:60:32:8f:d0:62:c0:ad:d7:
82:ea:e2:b4:7e:36:54:c2:6c:48:3b:cf:a3:ee:75:
aa:e7:a2:d2:63:bd:b4:5c:28:07:8b:aa:ce:e2:c5:
45:5f:05:0c:22:da:01:e3:fb:92:6a:7a:62:94:9c:
e6:04:35:93:46:96:e6:63:f4:10:e6:0c:bc:ca:96:
b9:66:65:0d:6f:c4:f8:61:e4:cf:6f:5c:00:76:ab:
1f:3f:7b:75:2f:f6:09:9c:16:49:f2:df:30:1e:bf:
65:41:f4:17:02:12:8c:82:ec:58:25:59:33:f0:ed:
8d:00:2a:9f:f1:d8:ec:5c:1f:40:78:d6:1e:5c:6d:
59:a7:05:31:c5:bb:e1:d2:24:dd:ce:c1:99:cc:12:
03:40:1d:e5:38:06:d1:d9:62:a4:47:59:4d:a5:ea:
c4:8f:5c:91:b0:d9:f0:e2:06:f5:46:13:b4:f4:88:
6b:3d:c4:25:36:ad:15:b1:e4:cc:31:aa:6e:ad:e1:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:DD:12:13:77:C6:14:35:18:31:FC:12:29:6C:28:B4:37:2D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/495795ba-e884-3c94-9d63-75294965fa6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.3.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:57:31:60:5c:8f:4c:ab:89:21:fa:c4:d2:c9:cf:43:d6:c0:
68:ef:d6:5d:4b:b0:a4:3d:b2:1f:62:c3:bc:cc:b0:6d:da:a7:
7f:68:cf:92:68:23:5a:43:62:cc:ee:49:4e:dd:61:a6:a5:c7:
04:51:fe:3d:d9:19:c0:c8:49:fb:5d:c9:c0:9d:c6:ca:b5:c4:
7a:16:22:21:b6:70:bc:de:78:9a:df:44:01:82:ab:4a:fb:a2:
b7:ec:f8:1a:5f:1d:40:05:03:5c:bc:d3:b3:d2:f9:35:3b:46:
76:3e:c9:a9:e7:a5:25:8c:d7:a2:ab:cc:d1:1c:65:62:fe:e9:
a3:28:7b:fe:cb:51:43:98:7b:c4:68:da:e1:b1:dc:77:fb:fa:
40:55:c4:ac:91:e1:b1:13:fa:e8:8d:27:97:5b:d0:50:55:8b:
c0:20:ff:82:e6:7f:b8:ee:2f:c9:80:45:b4:e4:56:11:32:c8:
88:7f:78:76:3e:97:52:25:82:c4:f2:6b:93:89:63:e0:fc:f5:
4a:1e:e4:ab:4c:3d:a4:19:9c:37:35:b5:97:df:e8:99:81:70:
7e:87:22:a3:94:70:92:7f:e9:50:e7:40:0b:c9:a1:5c:df:de:
53:e8:0a:e9:d2:1e:c0:1a:4a:bd:82:12:92:dc:18:54:72:db:
00:87:aa:a1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEQkaUXzxRCt0KDywsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyMzgyYzctYWJkNS00MjkzLWE3YTItMzM0MDEzZTEy
ODRiMB4XDTIzMTIwODAyMDAxNloXDTI0MDMwNzAyMDAxNlowLzEtMCsGA1UEAxMk
NGIyMjMyNjYtMmU4MS00YzY0LWJlY2EtOTNiNDhlYTBjMjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobK8VLyDDzn112ue0FRz94YMbGr1rJGNetGF
v3KbtywjtITyUsDpXwq+8y3ZnQLLFWDSB/YgQYDs4YQPaIedM1nwYDKP0GLArdeC
6uK0fjZUwmxIO8+j7nWq56LSY720XCgHi6rO4sVFXwUMItoB4/uSanpilJzmBDWT
RpbmY/QQ5gy8ypa5ZmUNb8T4YeTPb1wAdqsfP3t1L/YJnBZJ8t8wHr9lQfQXAhKM
guxYJVkz8O2NACqf8djsXB9AeNYeXG1ZpwUxxbvh0iTdzsGZzBIDQB3lOAbR2WKk
R1lNperEj1yRsNnw4gb1RhO09IhrPcQlNq0VseTMMapureGZowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLAk3RITd8YUNRgx/BIpbCi0Ny0MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMDIz
ODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQwMTNlMTI4NGIvNDk1Nzk1YmEtZTg4NC0z
Yzk0LTlkNjMtNzUyOTQ5NjVmYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTAyMzgyYzctYWJkNS00MjkzLWE3
YTItMzM0MDEzZTEyODRiL2UwMjM4MmM3LWFiZDUtNDI5My1hN2EyLTMzNDAxM2Ux
Mjg0Yi5jcmwwHwYDVR0jBBgwFoAUlTu5dQ4dUDZOf9DY3qJs8GzvRUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMDIzODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQw
MTNlMTI4NGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAwAMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALVcxYFyPTKuJIfrE0snPQ9bAaO/WXUuwpD2yH2LDvMywbdqnf2jPkmgj
WkNizO5JTt1hpqXHBFH+PdkZwMhJ+13JwJ3GyrXEehYiIbZwvN54mt9EAYKrSvui
t+z4Gl8dQAUDXLzTs9L5NTtGdj7JqeelJYzXoqvM0RxlYv7poyh7/stRQ5h7xGja
4bHcd/v6QFXErJHhsRP66I0nl1vQUFWLwCD/guZ/uO4vyYBFtORWETLIiH94dj6X
UiWCxPJrk4lj4Pz1Sh7kq0w9pBmcNzW1l9/omYFwfocio5Rwkn/pUOdAC8mhXN/e
U+gK6dIewBpKvYISktwYVHLbAIeqoQ==
-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org