Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/d9957fc4-395d-3361-bdee-1692ff7114d8.roa
File: d9957fc4-395d-3361-bdee-1692ff7114d8.roa (raw, json)
Hash identifier: TRX5txBUtFCJNs5QELNKxMRYTIK7HxSrdT6FCpu7Xs0=
Subject key identifier: F9:39:84:27:A5:2C:F7:66:06:57:73:5B:AD:39:FB:53:C0:E2:6D:A0
Certificate issuer: /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial: 010D0C9F4328576D51CC73C042CFC16DEF2DF142
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/d9957fc4-395d-3361-bdee-1692ff7114d8.roa
Signing time: Mon 21 Oct 2019 16:37:08 +0000
ROA not before: Wed 16 Oct 2019 04:00:00 +0000
ROA not after: Tue 16 Oct 2029 04:00:00 +0000
asID: 63949
IP address blocks: 23.92.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:ef:2d:f1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Validity
Not Before: Oct 16 04:00:00 2019 GMT
Not After : Oct 16 04:00:00 2029 GMT
Subject: CN=77bcb2fa-932b-4562-a98d-c96236217a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:70:b1:ad:8f:a8:e0:5b:42:4e:4b:3d:0c:
0b:4f:17:1f:0e:6e:e3:3b:31:1a:27:08:e2:d1:58:
93:84:06:7c:03:72:0e:34:58:93:9e:a1:c8:bd:17:
39:f8:8f:e3:b9:de:cb:33:f6:6c:b9:03:ff:18:75:
f2:7a:9b:c1:aa:49:62:20:9c:ce:7a:ed:21:e2:15:
96:81:c1:f7:11:fb:c4:a6:e8:39:61:ed:79:3b:53:
4c:e8:91:05:c4:85:88:59:9e:c3:8d:16:c6:f2:c0:
fe:08:0a:41:e3:80:ca:d2:4b:ac:bc:1e:43:f9:67:
b9:d6:af:f1:22:17:fe:4e:3b:26:5f:35:96:38:af:
c3:b0:29:7f:a8:07:ab:fd:b8:38:79:7e:10:5e:e2:
37:29:07:dc:ad:30:45:9d:6c:0c:f1:9e:24:52:4f:
1c:36:67:db:48:33:31:b0:45:f7:21:b6:3e:4d:ed:
40:89:be:d6:05:8a:bc:10:2b:bc:3e:c6:b8:d5:27:
d3:a4:a9:3f:52:31:44:7d:20:e4:cf:5b:a0:1e:f5:
5b:3e:81:13:47:51:80:80:46:81:c5:31:8d:36:d7:
05:70:4c:3c:be:47:a6:09:e6:ff:30:16:14:45:c7:
45:00:79:cb:0a:73:ed:ce:d7:c2:cd:f8:be:f3:36:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:84:27:A5:2C:F7:66:06:57:73:5B:AD:39:FB:53:C0:E2:6D:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/d9957fc4-395d-3361-bdee-1692ff7114d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl
X509v3 Authority Key Identifier:
keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.92.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:f9:64:47:b2:b1:94:66:0d:86:be:a9:57:cb:3c:d9:d6:5d:
08:27:57:84:1b:d3:93:01:d6:f5:b9:d8:4d:c3:a5:d1:ee:a0:
61:02:54:02:80:48:d2:43:d7:63:f6:80:68:a8:1f:cb:e4:b7:
17:05:eb:1d:4c:10:74:7e:17:26:dd:9c:ca:d0:e4:b6:3e:11:
e3:6c:36:39:18:9c:f1:f6:21:1c:e5:83:1b:70:ea:fc:a9:e3:
fb:bb:95:f7:11:6f:04:c7:85:e7:81:ff:88:86:fe:34:48:92:
c5:8c:47:28:ad:82:ce:b2:85:48:69:e3:ce:c5:3d:8c:6b:e2:
81:a3:bd:1e:87:fe:ae:34:04:28:02:ff:c0:89:ce:6d:f3:68:
ef:6d:73:71:6c:07:10:e1:4e:ab:67:28:3d:19:93:e6:10:cd:
0e:22:0a:2c:1e:7c:61:d1:9b:60:9f:67:0c:a4:9c:b0:71:99:
0b:8d:2d:8d:41:37:bc:ae:84:83:26:0c:51:65:ba:61:e5:67:
92:5e:0c:fe:bc:6a:4f:16:12:c1:95:77:f2:0b:2a:bb:7e:13:
b3:3e:d0:97:3e:aa:12:f2:53:1b:a0:2a:d1:16:14:3d:cf:0b:
8f:82:8d:68:0b:6c:f0:8c:ea:86:d6:74:cf:6a:59:8b:c9:16:
23:c9:5b:f2
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbe8t8UIwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRmLWZhNWMwNzQ5MjVl
ODAeFw0xOTEwMTYwNDAwMDBaFw0yOTEwMTYwNDAwMDBaMC8xLTArBgNVBAMTJDc3
YmNiMmZhLTkzMmItNDU2Mi1hOThkLWM5NjIzNjIxN2EyZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANXrcLGtj6jgW0JOSz0MC08XHw5u4zsxGicI4tFY
k4QGfANyDjRYk56hyL0XOfiP47neyzP2bLkD/xh18nqbwapJYiCcznrtIeIVloHB
9xH7xKboOWHteTtTTOiRBcSFiFmew40WxvLA/ggKQeOAytJLrLweQ/lnudav8SIX
/k47Jl81ljivw7Apf6gHq/24OHl+EF7iNykH3K0wRZ1sDPGeJFJPHDZn20gzMbBF
9yG2Pk3tQIm+1gWKvBArvD7GuNUn06SpP1IxRH0g5M9boB71Wz6BE0dRgIBGgcUx
jTbXBXBMPL5Hpgnm/zAWFEXHRQB5ywpz7c7Xws34vvM2yvcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT5OYQnpSz3ZgZXc1utOftTwOJtoDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJj
OWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3NDkyNWU4L2Q5OTU3ZmM0LTM5NWQtMzM2
MS1iZGVlLTE2OTJmZjcxMTRkOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRm
LWZhNWMwNzQ5MjVlOC8xZWNlYmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVjMDc0OTI1
ZTguY3JsMB8GA1UdIwQYMBaAFACv7SUrbtnkGc8SE6kp7d3ibnoqMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJjOWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3
NDkyNWU4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBdcEDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAzflkR7KxlGYNhr6pV8s82dZdCCdXhBvTkwHW9bnYTcOl0e6gYQJUAoBI0kPX
Y/aAaKgfy+S3FwXrHUwQdH4XJt2cytDktj4R42w2ORic8fYhHOWDG3Dq/Knj+7uV
9xFvBMeF54H/iIb+NEiSxYxHKK2CzrKFSGnjzsU9jGvigaO9Hof+rjQEKAL/wInO
bfNo721zcWwHEOFOq2coPRmT5hDNDiIKLB58YdGbYJ9nDKScsHGZC40tjUE3vK6E
gyYMUWW6YeVnkl4M/rxqTxYSwZV38gsqu34Tsz7Qlz6qEvJTG6Aq0RYUPc8Lj4KN
aAts8IzqhtZ0z2pZi8kWI8lb8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org