Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/aae3e778-4782-335a-ac6e-21f062503651.roa
File: aae3e778-4782-335a-ac6e-21f062503651.roa (raw, json)
Hash identifier: /B3JjnI7nkh9rXjLcLbmkcOoj3Mzh9LxkZgveiPiM1g=
Subject key identifier: 21:3E:D1:80:E0:DF:71:9B:C7:6F:7A:92:F8:93:68:13:A5:17:90:37
Certificate issuer: /CN=01f47c46-30d2-4d97-adb6-04702f65d33c
Certificate serial: 010D0C9F4328576D51CC73C042CFC16F1F258EA9
Authority key identifier: 8B:FB:3D:AB:03:D2:84:1B:03:E2:88:2D:BA:D5:8C:0F:A5:5D:A0:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/aae3e778-4782-335a-ac6e-21f062503651.roa
Signing time: Thu 19 Dec 2019 17:12:32 +0000
ROA not before: Tue 26 Nov 2019 05:00:00 +0000
ROA not after: Mon 26 Nov 2029 05:00:00 +0000
asID: 16509
IP address blocks: 199.91.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:1f:25:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f47c46-30d2-4d97-adb6-04702f65d33c
Validity
Not Before: Nov 26 05:00:00 2019 GMT
Not After : Nov 26 05:00:00 2029 GMT
Subject: CN=bccea256-d74f-40ca-9de6-1ddbe289d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:1e:6d:ae:9c:e5:60:14:da:4f:e4:c7:c3:
12:19:1b:26:f3:5a:c1:16:44:67:23:69:0c:e2:7b:
24:3e:83:2f:4a:12:50:38:68:0b:d8:1c:95:b7:1f:
94:4c:df:02:02:a0:b9:34:bd:ed:ad:a1:58:f0:7b:
9d:96:a6:5c:69:bb:b7:88:ab:08:54:b7:0b:d0:32:
8a:c0:f4:4f:da:81:2c:9b:eb:f0:40:da:aa:94:7e:
43:eb:c1:27:ab:03:15:ed:40:b9:61:f0:13:58:71:
12:1a:24:eb:9c:34:18:0c:64:2b:82:64:7f:fb:a5:
02:e5:9e:d4:25:50:06:03:ea:3c:8c:0e:10:72:bf:
89:00:87:51:52:18:6c:0c:bf:fb:1f:9d:08:04:c9:
5d:dd:04:fa:43:f3:e1:8c:05:ef:50:5e:1b:20:2b:
a9:56:a1:d0:51:39:1d:9e:02:07:14:2b:75:99:86:
f6:1d:ba:c8:89:80:86:d1:02:f5:a1:60:80:d6:f0:
3f:bb:31:29:bb:ab:b5:76:fe:cb:8a:0a:8c:50:10:
72:7c:55:00:7f:f3:7f:5b:0f:df:3c:a7:bc:59:7d:
9e:f2:da:96:89:1b:b7:77:07:a0:28:32:b3:d8:db:
33:77:39:71:72:17:0f:de:b2:a2:51:48:52:a0:dc:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:D1:80:E0:DF:71:9B:C7:6F:7A:92:F8:93:68:13:A5:17:90:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/aae3e778-4782-335a-ac6e-21f062503651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/01f47c46-30d2-4d97-adb6-04702f65d33c.crl
X509v3 Authority Key Identifier:
keyid:8B:FB:3D:AB:03:D2:84:1B:03:E2:88:2D:BA:D5:8C:0F:A5:5D:A0:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b0:55:a6:56:da:79:09:07:38:b4:b2:f3:32:9b:4b:0c:fb:
32:45:9f:71:f7:60:54:ff:ae:29:5e:b1:08:93:1d:07:75:cf:
2f:d7:08:f7:b2:be:5a:bb:d5:63:a0:95:15:5b:50:db:00:c8:
0b:80:82:c3:4b:5f:ae:a9:95:65:90:c4:52:a7:43:4a:be:63:
23:dd:72:50:23:a1:19:15:4a:ec:f9:85:11:2d:f7:26:dc:ab:
b2:37:35:b8:7e:fb:5a:bf:3c:99:5b:a4:a1:34:46:3b:40:0b:
49:53:58:89:5b:12:0f:b9:b3:c0:36:ed:fc:13:bc:c9:77:cb:
74:e7:5c:af:04:0a:ae:70:99:a1:47:2a:96:75:82:3a:74:a9:
19:ce:bc:41:ef:a1:e9:52:42:e2:3c:cc:97:9e:71:6e:f9:06:
44:af:0d:ef:aa:59:7e:c4:a2:98:bb:8e:6c:e8:ff:c2:a0:3e:
49:aa:36:05:ca:7b:1d:64:3b:6a:4c:4a:f8:4f:fd:f8:4a:25:
12:03:36:d1:ad:c5:14:c3:c1:80:f8:6b:a4:7f:a1:e0:63:b6:
e3:55:9e:63:73:dd:6f:48:de:d9:13:a4:40:e5:f0:e9:fd:b8:
ad:e6:ef:98:99:29:32:8a:ed:07:35:be:5b:20:d4:9b:06:9e:
1e:31:04:52
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbx8ljqkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDAxZjQ3YzQ2LTMwZDItNGQ5Ny1hZGI2LTA0NzAyZjY1ZDMz
YzAeFw0xOTExMjYwNTAwMDBaFw0yOTExMjYwNTAwMDBaMC8xLTArBgNVBAMTJGJj
Y2VhMjU2LWQ3NGYtNDBjYS05ZGU2LTFkZGJlMjg5ZDBhMzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANOpHm2unOVgFNpP5MfDEhkbJvNawRZEZyNpDOJ7
JD6DL0oSUDhoC9gclbcflEzfAgKguTS97a2hWPB7nZamXGm7t4irCFS3C9AyisD0
T9qBLJvr8EDaqpR+Q+vBJ6sDFe1AuWHwE1hxEhok65w0GAxkK4Jkf/ulAuWe1CVQ
BgPqPIwOEHK/iQCHUVIYbAy/+x+dCATJXd0E+kPz4YwF71BeGyArqVah0FE5HZ4C
BxQrdZmG9h26yImAhtEC9aFggNbwP7sxKburtXb+y4oKjFAQcnxVAH/zf1sP3zyn
vFl9nvLalokbt3cHoCgys9jbM3c5cXIXD96yolFIUqDcFvsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQhPtGA4N9xm8dvepL4k2gTpReQNzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDFmNDdj
NDYtMzBkMi00ZDk3LWFkYjYtMDQ3MDJmNjVkMzNjL2FhZTNlNzc4LTQ3ODItMzM1
YS1hYzZlLTIxZjA2MjUwMzY1MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAxZjQ3YzQ2LTMwZDItNGQ5Ny1hZGI2
LTA0NzAyZjY1ZDMzYy8wMWY0N2M0Ni0zMGQyLTRkOTctYWRiNi0wNDcwMmY2NWQz
M2MuY3JsMB8GA1UdIwQYMBaAFIv7PasD0oQbA+KILbrVjA+lXaC2MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMDFmNDdjNDYtMzBkMi00ZDk3LWFkYjYtMDQ3MDJm
NjVkMzNjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdblTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAJrBVplbaeQkHOLSy8zKbSwz7MkWfcfdgVP+uKV6xCJMdB3XPL9cI97K+WrvV
Y6CVFVtQ2wDIC4CCw0tfrqmVZZDEUqdDSr5jI91yUCOhGRVK7PmFES33Jtyrsjc1
uH77Wr88mVukoTRGO0ALSVNYiVsSD7mzwDbt/BO8yXfLdOdcrwQKrnCZoUcqlnWC
OnSpGc68Qe+h6VJC4jzMl55xbvkGRK8N76pZfsSimLuObOj/wqA+Sao2Bcp7HWQ7
akxK+E/9+EolEgM20a3FFMPBgPhrpH+h4GO241WeY3Pdb0je2ROkQOXw6f24rebv
mJkpMortBzW+WyDUmwaeHjEEUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org