Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe05530-8912-3f6e-9d25-cec19e53c738.roa
File: 0fe05530-8912-3f6e-9d25-cec19e53c738.roa (raw, json)
Hash identifier: snjml9x/Eng55fOGdLPfIWwM6caHHskpCMJ9VQuC/LI=
Subject key identifier: E2:F2:13:92:13:8F:2E:0A:1E:01:68:9D:5C:0B:FE:4F:6A:C3:0A:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB4407C12E154E01C8E1D200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe05530-8912-3f6e-9d25-cec19e53c738.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 144.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:44:07:c1:2e:15:4e:01:c8:e1:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=eb7b6aa6-7acb-4684-89ed-f94295a7c1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:a4:c0:97:12:7e:76:50:04:0a:21:32:f3:
5e:ce:c4:a7:a8:42:70:d2:4c:bd:9d:e1:29:96:42:
ed:06:e8:9d:88:d2:c8:73:40:bc:31:23:cc:75:c7:
f9:86:0a:56:8d:cf:62:6c:e4:28:be:fb:99:ab:18:
2e:e9:93:d6:e2:d0:42:86:0f:4d:f9:b2:6e:5a:1a:
fd:6b:5c:83:41:48:cb:e6:5b:b8:e4:1a:13:61:92:
73:04:d5:2b:17:84:48:90:75:8a:b0:91:92:6c:f2:
ed:cb:25:56:49:64:4c:c3:fd:e7:5a:3b:cd:4d:40:
48:7c:fa:f7:5d:2a:60:3d:f5:97:8c:29:d4:40:c0:
42:21:c4:af:01:77:09:33:0d:9c:b9:05:e6:bd:e2:
cb:7e:16:48:2b:c0:8d:64:a2:6a:6d:9a:2c:f5:2c:
7b:7c:9c:0a:25:bc:c3:8b:80:1d:e8:e0:03:48:7a:
b1:26:88:3e:64:8a:83:22:2e:8c:8f:68:d7:e4:92:
7e:20:8a:e5:05:e0:bb:e9:4f:f5:c2:4d:d5:f8:ce:
7c:92:e5:d7:4d:cd:fd:76:cf:d6:91:52:cc:95:36:
07:d3:04:73:cc:86:6e:43:ae:72:6a:58:34:23:6f:
40:58:0f:38:bc:18:e7:72:93:3e:95:98:b9:d5:cd:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:13:92:13:8F:2E:0A:1E:01:68:9D:5C:0B:FE:4F:6A:C3:0A:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe05530-8912-3f6e-9d25-cec19e53c738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
144.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:06:c6:df:7f:71:25:e5:9a:40:15:ce:14:ac:db:e7:28:8e:
98:be:93:fa:12:dd:f7:8f:93:77:ef:ba:f5:70:ee:5a:b9:9c:
dc:6b:38:94:05:f1:64:16:26:54:c7:44:f7:d6:bc:7f:7e:9e:
bb:d5:0f:15:b6:39:f2:3b:19:0b:e7:7c:55:8c:fc:d3:6b:28:
ce:2f:6f:b6:13:97:27:3e:07:54:66:61:91:70:c6:ba:e4:5f:
61:f0:dc:61:f2:7b:7a:01:a2:f0:24:bc:1d:1e:cf:56:df:d3:
4b:d1:aa:fa:23:b3:8c:70:65:56:0a:07:c0:7c:cd:21:ce:7d:
5c:84:71:9f:3a:a3:80:c2:86:6e:48:47:ba:06:27:20:2f:77:
40:26:fd:71:77:a5:24:6f:5d:92:fc:50:63:75:c4:a9:1a:16:
74:ed:c6:be:1e:11:49:4e:3e:e1:54:89:be:b5:2c:9e:c8:67:
59:fa:24:d0:1c:0a:63:b1:77:72:14:c6:1f:b3:92:ee:e8:cf:
05:87:41:0d:0e:5e:e3:92:cb:17:f7:60:6f:3b:59:c2:85:5f:
a3:8b:2f:3c:21:55:82:34:87:ab:c5:7e:f9:ec:59:dd:05:0b:
ac:f0:2d:78:27:8b:79:91:8b:9a:66:37:a4:4e:64:6f:10:84:
28:cf:3b:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC7RAfBLhVOAcjh0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWI3YjZhYTYtN2FjYi00Njg0LTg5ZWQtZjk0Mjk1YTdjMWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5qkwJcSfnZQBAohMvNezsSnqEJw0ky9neEp
lkLtBuidiNLIc0C8MSPMdcf5hgpWjc9ibOQovvuZqxgu6ZPW4tBChg9N+bJuWhr9
a1yDQUjL5lu45BoTYZJzBNUrF4RIkHWKsJGSbPLtyyVWSWRMw/3nWjvNTUBIfPr3
XSpgPfWXjCnUQMBCIcSvAXcJMw2cuQXmveLLfhZIK8CNZKJqbZos9Sx7fJwKJbzD
i4Ad6OADSHqxJog+ZIqDIi6Mj2jX5JJ+IIrlBeC76U/1wk3V+M58kuXXTc39ds/W
kVLMlTYH0wRzzIZuQ65yalg0I29AWA84vBjncpM+lZi51c0sYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOLyE5ITjy4KHgFonVwL/k9qwwr5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGZlMDU1MzAtODkxMi0z
ZjZlLTlkMjUtY2VjMTllNTNjNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALQbG339xJeWaQBXOFKzb5yiOmL6T+hLd94+Td++69XDuWrmc3Gs4lAXx
ZBYmVMdE99a8f36eu9UPFbY58jsZC+d8VYz802sozi9vthOXJz4HVGZhkXDGuuRf
YfDcYfJ7egGi8CS8HR7PVt/TS9Gq+iOzjHBlVgoHwHzNIc59XIRxnzqjgMKGbkhH
ugYnIC93QCb9cXelJG9dkvxQY3XEqRoWdO3Gvh4RSU4+4VSJvrUsnshnWfok0BwK
Y7F3chTGH7OS7ujPBYdBDQ5e45LLF/dgbztZwoVfo4svPCFVgjSHq8V++exZ3QUL
rPAteCeLeZGLmmY3pE5kbxCEKM871Q==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:59 2023 by rpki-client on console.sobornost.net