Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/10b28557-8394-3c81-b3ba-0ddb6b09fcf4.roa
File: 10b28557-8394-3c81-b3ba-0ddb6b09fcf4.roa (raw, json)
Hash identifier: iYw89SOjVeiesO3+qkByLh+CySSiER0O2vO4itvo29o=
Subject key identifier: 83:E3:14:86:B9:C2:FB:7E:31:C3:0A:9F:72:1D:3C:1A:94:EC:53:5A
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328583E568BB8E4D5B62D3CE059C060
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/10b28557-8394-3c81-b3ba-0ddb6b09fcf4.roa
Signing time: Tue 21 Jun 2022 12:00:00 +0000
ROA not before: Tue 21 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jun 2029 04:00:00 +0000
asID: 63949
IP address blocks: 139.144.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:56:8b:b8:e4:d5:b6:2d:3c:e0:59:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Jun 21 12:00:00 2022 GMT
Not After : Jun 22 04:00:00 2029 GMT
Subject: CN=35573207-18ca-43c2-b0ba-a7e9e709ba31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:85:47:e4:73:67:f2:6a:e7:fb:9f:4e:1e:
7a:0b:6b:6b:3e:a6:47:32:8f:f6:f9:42:24:0d:06:
f0:52:da:bd:30:90:6f:85:82:f0:56:da:12:a3:81:
4d:c9:3b:d5:49:59:98:e8:09:7b:11:23:77:fc:ad:
03:a8:82:c9:03:da:6d:7b:a5:c1:2d:38:b9:6b:33:
68:96:a8:3a:ad:ba:df:a8:83:3d:27:b9:b1:2f:3e:
30:fd:77:f4:05:f0:92:bb:0e:f3:13:aa:d7:8f:dc:
00:7b:10:e6:01:54:bd:a7:b9:2e:5c:b1:29:85:ca:
df:67:dc:a2:c0:85:e5:02:a2:ea:8a:3c:51:9e:f7:
30:91:04:a9:45:56:01:b9:b1:ec:f3:b1:ac:9e:05:
02:4d:21:d1:32:69:6b:42:47:0e:49:19:b9:c5:9e:
b1:43:a6:db:bb:f2:97:8f:7f:d7:3e:7b:68:39:79:
12:f5:79:b3:1d:fa:78:af:72:0f:42:25:9d:d5:85:
ab:47:ed:2d:2d:0e:db:3b:ed:77:5d:c5:26:36:4e:
b6:47:06:eb:7d:5b:1a:2d:e3:7b:1a:c0:9f:81:21:
56:a9:fc:06:45:a4:9c:84:15:ca:cb:74:5d:3a:76:
1e:e4:9a:76:25:7f:86:85:fa:c9:8c:01:5e:4c:5f:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E3:14:86:B9:C2:FB:7E:31:C3:0A:9F:72:1D:3C:1A:94:EC:53:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/10b28557-8394-3c81-b3ba-0ddb6b09fcf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.144.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:83:22:77:7c:e6:58:67:fb:c1:4a:29:c9:ce:a2:7b:89:be:
54:09:29:cd:96:99:28:e4:e3:5f:11:b9:2c:1d:0e:52:56:6a:
e1:cb:52:72:52:e0:d7:40:53:21:96:7e:04:be:2d:7c:4a:7b:
e7:88:75:a8:17:72:29:c5:9d:6d:af:0a:cf:f7:18:21:53:aa:
64:fa:5b:cc:eb:05:ef:18:a1:89:8e:d8:07:71:67:4e:75:0d:
65:98:f0:fa:15:f9:72:1c:56:95:5e:85:bb:98:a9:3f:41:be:
9e:ad:fc:cb:a1:7b:7c:69:26:17:1c:b3:4f:6b:c0:80:10:9b:
27:2d:07:05:c3:27:0d:e6:2c:23:42:e8:9c:72:f9:b9:39:b8:
62:2b:58:6f:99:7d:e6:d2:57:51:b0:5c:24:34:80:03:66:58:
74:d4:a6:92:ce:06:36:f1:d0:b9:17:75:e2:57:dc:54:ac:61:
d8:f7:6b:80:cf:c3:2c:af:1a:e1:64:25:3f:4d:b0:aa:30:94:
40:5c:ae:90:47:d9:1f:71:aa:7c:2b:e0:c6:69:12:90:47:a1:
88:c4:cc:0a:af:91:63:d3:12:58:11:24:6d:a8:6d:c5:f8:4d:
37:88:50:09:27:f8:08:cc:d7:d9:2e:e9:92:e3:81:93:6f:f3:
e9:64:dd:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5Wi7jk1bYtPOBZwGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjZWJjOWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3NDky
NWU4MB4XDTIyMDYyMTEyMDAwMFoXDTI5MDYyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzU1NzMyMDctMThjYS00M2MyLWIwYmEtYTdlOWU3MDliYTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYaFR+RzZ/Jq5/ufTh56C2trPqZHMo/2+UIk
DQbwUtq9MJBvhYLwVtoSo4FNyTvVSVmY6Al7ESN3/K0DqILJA9pte6XBLTi5azNo
lqg6rbrfqIM9J7mxLz4w/Xf0BfCSuw7zE6rXj9wAexDmAVS9p7kuXLEphcrfZ9yi
wIXlAqLqijxRnvcwkQSpRVYBubHs87GsngUCTSHRMmlrQkcOSRm5xZ6xQ6bbu/KX
j3/XPntoOXkS9XmzHfp4r3IPQiWd1YWrR+0tLQ7bO+13XcUmNk62RwbrfVsaLeN7
GsCfgSFWqfwGRaSchBXKy3RdOnYe5Jp2JX+GhfrJjAFeTF/c1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPjFIa5wvt+McMKn3IdPBqU7FNaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZWNl
YmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVjMDc0OTI1ZTgvMTBiMjg1NTctODM5NC0z
YzgxLWIzYmEtMGRkYjZiMDlmY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJjOWQtYWFhZi00YjZkLWFm
NGYtZmE1YzA3NDkyNWU4LzFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRmLWZhNWMwNzQ5
MjVlOC5jcmwwHwYDVR0jBBgwFoAUAK/tJStu2eQZzxITqSnt3eJueiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZWNlYmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVj
MDc0OTI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDi5BgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSDInd85lhn+8FKKcnOonuJvlQJKc2WmSjk418RuSwdDlJWauHLUnJS
4NdAUyGWfgS+LXxKe+eIdagXcinFnW2vCs/3GCFTqmT6W8zrBe8YoYmO2AdxZ051
DWWY8PoV+XIcVpVehbuYqT9Bvp6t/Muhe3xpJhccs09rwIAQmyctBwXDJw3mLCNC
6Jxy+bk5uGIrWG+ZfebSV1GwXCQ0gANmWHTUppLOBjbx0LkXdeJX3FSsYdj3a4DP
wyyvGuFkJT9NsKowlEBcrpBH2R9xqnwr4MZpEpBHoYjEzAqvkWPTElgRJG2obcX4
TTeIUAkn+AjM19ku6ZLjgZNv8+lk3dI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:46 2024 by rpki-client on console-ams.rpki-client.org