Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/003228a8-81b2-3ff4-815e-a9dea6f82c5f.roa
File: 003228a8-81b2-3ff4-815e-a9dea6f82c5f.roa (raw, json)
Hash identifier: 61FdQu4FVQM4osTrdqXdCZ2RL+ZB8iXslPEn0wdtSVE=
Subject key identifier: 45:A3:C7:9E:C4:67:81:43:69:8B:5E:6A:2C:A5:40:DC:A6:63:34:25
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328584023373DAF54E48199355F6B80
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/003228a8-81b2-3ff4-815e-a9dea6f82c5f.roa
Signing time: Wed 16 Oct 2019 21:03:01 +0000
ROA not before: Wed 16 Oct 2019 21:03:01 +0000
ROA not after: Sun 09 Mar 2025 05:00:00 +0000
asID: 63949
IP address blocks: 139.144.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:23:37:3d:af:54:e4:81:99:35:5f:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 21:03:01 2019 GMT
Not After : Mar 9 05:00:00 2025 GMT
Subject: CN=74792a95-57ad-47a2-8e0e-c8638b74f2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:3e:84:dc:0e:c4:3c:d2:91:b1:99:f2:03:
9b:d2:fc:9b:d9:0b:08:bb:0e:0b:c7:07:6e:47:36:
64:24:e3:a8:9f:fd:2a:ec:74:11:88:71:bf:67:e5:
2d:3b:b0:2c:3c:c5:6a:4f:ec:00:cf:6b:78:ea:df:
f9:d5:45:41:25:62:58:14:4a:30:0c:ba:5e:f4:0d:
3d:3e:20:49:c4:e1:a0:41:85:ff:8e:c7:e7:e5:4a:
c4:29:fc:1b:b7:25:a6:b8:0e:dc:a1:6d:97:12:c2:
d3:58:60:83:c1:aa:76:1b:e1:d4:38:fa:fb:82:bb:
ec:63:9a:aa:5c:10:f1:ca:ac:1f:d2:df:48:89:9e:
84:da:dc:26:70:c3:a8:47:96:05:94:07:0d:53:27:
65:5f:02:54:97:33:15:da:47:9d:8e:01:18:41:07:
b5:5a:32:4b:88:2c:95:e2:98:34:f0:41:8b:b5:29:
81:bc:9c:2c:83:6d:e4:ff:6b:c3:06:8e:9a:b3:36:
e9:56:fe:3e:c2:af:11:c0:c2:32:1e:d9:33:f8:fc:
0f:f5:5c:15:b5:2a:03:e5:11:f4:22:bb:f8:1a:b0:
65:3c:79:bc:c9:67:5d:39:27:75:d1:ab:7a:f8:9a:
14:b8:66:33:c7:9e:bf:27:bd:b9:b8:21:4c:95:69:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:C7:9E:C4:67:81:43:69:8B:5E:6A:2C:A5:40:DC:A6:63:34:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/003228a8-81b2-3ff4-815e-a9dea6f82c5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.144.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f4:24:5c:8a:24:82:5d:41:af:2e:06:96:c0:4b:9c:79:b4:
9d:cb:f6:fa:99:c9:90:9a:73:d5:4b:a1:08:6e:6b:f9:b4:b4:
43:a8:fd:82:4c:3f:d5:7e:60:20:77:62:69:ad:64:2e:6e:45:
35:8e:7b:15:50:4f:c4:f0:3c:84:e1:b9:1b:70:a7:d3:ba:25:
4c:ac:1a:bc:84:c4:4c:80:33:85:4b:a4:02:9a:78:21:d9:da:
97:6e:67:46:59:f3:da:e5:55:4f:01:a0:2f:8f:2b:7b:d3:e8:
1d:e6:0f:d1:06:e8:a8:f6:d8:f6:ba:fe:b6:d0:a5:e4:97:aa:
08:82:a4:8b:58:03:ba:a7:9b:0f:e2:aa:c4:1e:a4:7d:e2:95:
0a:1e:09:f9:32:c6:23:a0:0e:c4:c5:c5:e5:92:5d:0b:5b:fe:
87:47:86:9e:67:ec:fb:fe:e0:d8:da:0a:27:3a:14:60:f3:c6:
de:b5:49:0c:62:a7:14:97:68:aa:e3:56:01:b2:ea:55:23:8f:
c0:63:af:d6:42:a7:ef:d7:bb:de:49:5d:d7:b7:56:27:94:e8:
1b:7b:d7:8e:be:0c:36:6d:f2:cf:44:b0:30:bc:82:af:bf:27:
bb:8b:6b:96:6c:ae:ce:03:b2:ad:1e:92:73:87:cd:2d:32:7f:
5c:a6:4d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAjNz2vVOSBmTVfa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjZWJjOWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3NDky
NWU4MB4XDTE5MTAxNjIxMDMwMVoXDTI1MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NzQ3OTJhOTUtNTdhZC00N2EyLThlMGUtYzg2MzhiNzRmMmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Y+hNwOxDzSkbGZ8gOb0vyb2QsIuw4Lxwdu
RzZkJOOon/0q7HQRiHG/Z+UtO7AsPMVqT+wAz2t46t/51UVBJWJYFEowDLpe9A09
PiBJxOGgQYX/jsfn5UrEKfwbtyWmuA7coW2XEsLTWGCDwap2G+HUOPr7grvsY5qq
XBDxyqwf0t9IiZ6E2twmcMOoR5YFlAcNUydlXwJUlzMV2kedjgEYQQe1WjJLiCyV
4pg08EGLtSmBvJwsg23k/2vDBo6aszbpVv4+wq8RwMIyHtkz+PwP9VwVtSoD5RH0
Irv4GrBlPHm8yWddOSd10at6+JoUuGYzx56/J725uCFMlWmu3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWjx57EZ4FDaYteaiylQNymYzQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZWNl
YmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVjMDc0OTI1ZTgvMDAzMjI4YTgtODFiMi0z
ZmY0LTgxNWUtYTlkZWE2ZjgyYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJjOWQtYWFhZi00YjZkLWFm
NGYtZmE1YzA3NDkyNWU4LzFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRmLWZhNWMwNzQ5
MjVlOC5jcmwwHwYDVR0jBBgwFoAUAK/tJStu2eQZzxITqSnt3eJueiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZWNlYmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVj
MDc0OTI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi5D4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFv0JFyKJIJdQa8uBpbAS5x5tJ3L9vqZyZCac9VLoQhua/m0tEOo/YJM
P9V+YCB3YmmtZC5uRTWOexVQT8TwPIThuRtwp9O6JUysGryExEyAM4VLpAKaeCHZ
2pduZ0ZZ89rlVU8BoC+PK3vT6B3mD9EG6Kj22Pa6/rbQpeSXqgiCpItYA7qnmw/i
qsQepH3ilQoeCfkyxiOgDsTFxeWSXQtb/odHhp5n7Pv+4NjaCic6FGDzxt61SQxi
pxSXaKrjVgGy6lUjj8Bjr9ZCp+/Xu95JXde3VieU6Bt7146+DDZt8s9EsDC8gq+/
J7uLa5Zsrs4Dsq0eknOHzS0yf1ymTfU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org