Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa
File: 0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa (raw, json)
Hash identifier: Wmww8fKaxALBQheacjWMsWaHA1sAnXbF3R1tb5ANiUs=
Subject key identifier: 11:DE:E6:EE:C0:B8:9F:C9:AF:DC:7A:D0:09:DD:AA:C8:1D:53:81:BE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840ADEB47EBB00DE8B955D59E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:eb:47:eb:b0:0d:e8:b9:55:d5:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=cd49e4ab-5bfd-4a45-8e0f-81d13bc17577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:ed:e9:46:51:2e:19:bf:41:f1:ed:56:bc:
58:2b:2f:f3:6c:fd:b8:13:28:50:83:18:0c:1c:67:
ec:46:5a:04:c9:bd:f6:08:02:8f:c7:29:d2:76:56:
45:12:4d:85:08:d4:24:f2:0c:0d:bf:45:b4:c5:e1:
1c:d1:0d:ce:dd:8f:3e:b3:9b:af:c7:c1:d3:76:70:
bc:03:71:ac:f4:c5:f0:e3:1e:8c:14:97:c1:b9:25:
20:cf:17:7e:3a:f8:37:9f:38:1b:a0:d3:2b:f0:3d:
fd:c3:cd:e3:8d:29:35:9c:94:60:af:e6:a7:6d:8c:
ac:cd:7f:ab:3a:80:b7:37:bb:74:37:6a:0c:16:8a:
83:6a:97:74:de:2c:e0:d8:c9:6f:46:66:b4:3d:9e:
30:16:5c:65:68:28:bc:c6:d5:80:70:b7:b8:9c:de:
e5:06:74:71:47:0f:4b:68:a2:71:24:c0:b6:3b:94:
44:d0:34:7a:f4:95:e4:26:de:9a:27:6e:ad:81:d7:
2d:e6:b5:9b:69:2b:b4:83:a5:d1:34:35:ae:1e:6f:
dc:26:41:ad:56:d2:6b:44:7d:84:df:4f:11:69:37:
01:38:ad:25:2a:08:79:d0:18:d7:e4:24:ba:47:bd:
d4:de:41:37:5c:0b:c9:4d:67:b4:5e:86:c8:ff:aa:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:E6:EE:C0:B8:9F:C9:AF:DC:7A:D0:09:DD:AA:C8:1D:53:81:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ea60da9-a507-393e-a9ef-35f3589ccd1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:7e:17:0b:d7:23:3b:d1:36:ed:60:ac:c6:e8:96:ad:10:4e:
c4:7c:2e:90:6b:e5:7a:8a:44:cd:40:25:fb:6f:b4:74:5c:cd:
66:38:24:5c:cd:91:a3:8f:63:e4:bd:38:fd:be:09:f4:4c:62:
76:5f:73:e4:8f:97:42:f4:c2:84:dd:5e:ea:6e:8b:c4:2d:6f:
a7:d8:76:39:ac:d7:d5:04:80:97:b8:ff:4a:24:fc:7d:54:72:
f9:4d:5e:cd:fa:ab:84:7c:16:98:9a:c1:e4:6d:d3:76:c0:74:
02:11:be:17:26:6f:83:14:1e:62:0a:e4:17:68:13:62:1d:39:
a7:15:81:2f:f3:c7:69:47:aa:bf:a7:b6:4d:a5:6f:e9:7a:c0:
76:21:57:47:c4:1b:4e:48:7d:c9:61:9b:57:3d:8d:ee:28:3d:
c0:a1:89:69:8f:02:29:62:01:4e:db:1b:1c:7e:cb:08:7a:52:
21:9a:80:7e:4e:0a:ee:06:1d:27:33:1f:6d:ac:8c:f6:a7:ed:
b8:6d:5b:c4:41:1f:8a:a2:70:58:5a:1c:d1:10:95:af:c9:3d:
00:8e:23:85:08:49:fb:27:ca:aa:0e:a7:f6:02:f9:50:f4:d2:
4c:6e:29:3c:d6:cc:94:2e:fe:77:11:5b:67:a5:64:67:56:ba:
54:b3:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:57 2023 by rpki-client on console.sobornost.net