Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62b27798-996f-30e6-8a4c-8586f7cd7158.roa
File: 62b27798-996f-30e6-8a4c-8586f7cd7158.roa (raw, json)
Hash identifier: ixqX2C2gBlDOrEUHzZpKMibkQP4ChRBeh38j4g/7Mps=
Subject key identifier: 3F:F3:37:87:28:E6:A5:11:2C:A8:F9:DC:A3:15:B4:CF:91:D8:AA:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406BA4B6157C985759876D1880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62b27798-996f-30e6-8a4c-8586f7cd7158.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 18.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:a4:b6:15:7c:98:57:59:87:6d:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=0fcbadb5-e02f-4be6-8ed9-78f8d14f59e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:02:dd:d7:7d:f6:66:0c:85:a9:47:43:12:
53:b8:ad:da:40:0f:2d:38:61:aa:9a:e6:97:c9:a8:
6c:9c:be:70:49:28:c5:37:3b:62:31:d0:20:12:0e:
a7:bf:a8:11:52:f9:44:90:cf:dc:6e:b2:22:5d:00:
6e:6c:9b:85:a8:86:8b:97:f2:92:e2:58:48:7e:9a:
77:26:b6:89:3e:dc:65:3c:0d:12:8f:cf:9c:59:13:
06:8d:12:03:47:f4:ca:9b:ab:64:71:92:d2:d1:2e:
41:49:db:6e:97:eb:8c:d6:ce:45:33:66:b8:11:30:
69:f3:7f:15:48:4b:5b:a1:6b:3f:d1:b0:89:03:bf:
ea:79:72:0a:6b:2c:d2:c8:92:04:37:0a:7f:8c:33:
33:89:b6:68:b9:ad:82:09:db:b9:62:75:72:38:0e:
08:6c:21:d0:b6:f4:7e:8e:6e:f6:ee:fe:46:0a:a1:
d8:57:8b:dc:cf:9c:1c:83:0f:72:17:09:b6:a6:d4:
f5:ae:9a:98:21:67:98:cb:fd:23:72:e8:c0:55:d2:
85:ec:be:e9:e6:48:40:ec:22:07:d6:21:6b:03:d2:
6e:48:b3:f5:b5:1b:84:f2:09:83:58:f7:6d:6a:5d:
d6:1d:aa:c6:83:c9:b1:e8:02:c0:1b:ae:73:bb:03:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:37:87:28:E6:A5:11:2C:A8:F9:DC:A3:15:B4:CF:91:D8:AA:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62b27798-996f-30e6-8a4c-8586f7cd7158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fd:2c:bf:b2:24:84:ad:2d:fc:cb:5e:31:7d:ca:fe:b7:b5:
4d:ba:cf:0f:40:6e:c5:26:58:64:ba:9b:01:eb:c6:99:6f:46:
3d:c3:3c:fc:d1:f9:76:ac:30:04:d7:ef:32:04:9a:26:62:ac:
05:2c:ec:f1:d4:f6:40:ae:e4:e6:48:54:0f:13:2a:10:37:75:
f0:6c:a7:02:bc:60:36:cc:61:d5:4e:2f:48:23:e8:8f:2e:fd:
a2:61:c9:8a:bc:b7:de:d0:b6:b2:25:3a:23:a2:ea:3a:73:1c:
14:32:8f:9d:13:8c:9e:ad:06:fd:ef:1c:cf:cd:70:2e:bb:38:
58:32:a0:b2:39:c8:57:3c:fa:cf:d9:c9:42:46:2a:d1:37:39:
a4:d0:ee:a1:cb:da:3e:e6:ce:da:42:ad:ec:05:b7:7f:e4:d2:
ff:85:8d:0d:75:05:a2:be:63:f6:a0:f6:16:03:6f:f2:36:d6:
26:87:fb:17:e8:15:a6:05:c3:49:7e:8e:53:8c:cf:fe:16:b3:
42:f6:82:d8:c4:8c:03:00:43:22:8f:41:b0:a9:ce:d4:53:56:
28:01:07:b6:ef:af:7d:39:08:b6:22:48:d0:4b:4d:e5:12:38:
aa:5e:e7:aa:0d:cf:dc:b8:39:91:63:40:c3:65:39:b3:77:48:
06:21:5c:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBrpLYVfJhXWYdtGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMDEyMDAwMFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MGZjYmFkYjUtZTAyZi00YmU2LThlZDktNzhmOGQxNGY1OWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgC3dd99mYMhalHQxJTuK3aQA8tOGGqmuaX
yahsnL5wSSjFNztiMdAgEg6nv6gRUvlEkM/cbrIiXQBubJuFqIaLl/KS4lhIfpp3
JraJPtxlPA0Sj8+cWRMGjRIDR/TKm6tkcZLS0S5BSdtul+uM1s5FM2a4ETBp838V
SEtboWs/0bCJA7/qeXIKayzSyJIENwp/jDMzibZoua2CCdu5YnVyOA4IbCHQtvR+
jm727v5GCqHYV4vcz5wcgw9yFwm2ptT1rpqYIWeYy/0jcujAVdKF7L7p5khA7CIH
1iFrA9JuSLP1tRuE8gmDWPdtal3WHarGg8mx6ALAG65zuwPQEwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD/zN4co5qURLKj53KMVtM+R2KpWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjJiMjc3OTgtOTk2Zi0z
MGU2LThhNGMtODU4NmY3Y2Q3MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEqQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM/0sv7IkhK0t/MteMX3K/re1TbrPD0BuxSZYZLqbAevGmW9GPcM8/NH5
dqwwBNfvMgSaJmKsBSzs8dT2QK7k5khUDxMqEDd18GynArxgNsxh1U4vSCPojy79
omHJiry33tC2siU6I6LqOnMcFDKPnROMnq0G/e8cz81wLrs4WDKgsjnIVzz6z9nJ
QkYq0Tc5pNDuocvaPubO2kKt7AW3f+TS/4WNDXUFor5j9qD2FgNv8jbWJof7F+gV
pgXDSX6OU4zP/hazQvaC2MSMAwBDIo9BsKnO1FNWKAEHtu+vfTkItiJI0EtN5RI4
ql7nqg3P3Lg5kWNAw2U5s3dIBiFcvA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:11 2023 by rpki-client on console.sobornost.net