Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63cd48da-0a7e-3fb1-a4d4-9959a7547cb4.roa
File: 63cd48da-0a7e-3fb1-a4d4-9959a7547cb4.roa (raw, json)
Hash identifier: JS0ivvgDAxl8520bJhY3P/lny9RVqMuMzCaG0zgBwcA=
Subject key identifier: FC:B7:F8:11:19:1A:E7:EE:3D:F6:25:8A:4C:26:62:6D:DF:3D:EF:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840AFCF0622F616A175E601A800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63cd48da-0a7e-3fb1-a4d4-9959a7547cb4.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.212.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:af:cf:06:22:f6:16:a1:75:e6:01:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=32ecf7cb-e6e2-4cac-8951-4df429976e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:79:56:e9:19:c5:91:16:48:90:62:f6:4d:
6e:bc:2c:fe:e3:9e:70:f4:08:13:ae:45:45:0a:a8:
d6:0a:34:2c:e8:54:59:db:74:c7:96:38:a4:9e:04:
51:9a:3b:2e:39:ff:4e:86:25:1d:88:31:73:19:65:
e0:a2:f9:53:63:a6:e2:db:90:6b:66:03:f1:08:1c:
c1:88:a8:c8:86:17:5c:29:43:ab:bc:d4:51:36:1e:
76:55:4c:85:d6:4b:f3:84:6e:4b:80:bd:77:d7:a7:
26:3a:d8:f9:90:12:6c:d6:cc:ce:13:a9:dd:20:e4:
42:1c:b6:9a:3a:19:fa:68:65:09:bc:6d:eb:18:b6:
6e:25:a5:a2:34:1f:4d:ec:9d:5c:f2:55:7c:ab:d0:
97:74:21:95:d9:dc:40:2c:7b:e6:4a:16:8a:65:64:
64:b2:50:7b:0a:54:b3:1c:36:21:a5:27:3f:6e:ef:
9c:ab:0c:be:29:38:f6:8d:3a:47:bb:08:dc:87:2e:
63:f6:88:2e:0d:05:8c:27:53:6c:df:e6:85:73:5c:
bb:19:8d:e3:48:38:7b:99:75:a9:ae:91:8a:1d:e3:
11:bc:47:f1:ab:2a:e8:82:a6:f1:92:df:e4:9d:0c:
53:5e:f2:f8:62:a9:5c:ec:a6:af:53:15:b4:56:68:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:F8:11:19:1A:E7:EE:3D:F6:25:8A:4C:26:62:6D:DF:3D:EF:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63cd48da-0a7e-3fb1-a4d4-9959a7547cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.212.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ea:c8:13:e3:34:d5:31:2d:e3:95:61:a9:b2:2e:e2:f8:33:
dc:a4:6a:f1:bd:a4:07:c2:50:c1:2f:01:68:5b:ff:8d:8c:f2:
a7:bf:a2:f5:25:6e:33:7e:07:10:4f:1d:8d:15:7e:33:86:43:
28:fd:4a:91:06:b2:9d:79:15:da:af:57:0a:ab:55:1a:2a:cd:
50:0c:3f:49:5a:0a:db:8c:60:a8:8c:ff:db:40:cb:96:36:a6:
14:a0:4a:d6:d2:07:1a:a5:9c:7b:4d:94:83:b6:0d:26:61:21:
b8:3c:9b:ac:50:db:89:52:51:e4:ea:e2:ac:13:86:6e:ff:32:
2b:a8:d8:0a:fa:f2:77:78:62:63:86:1f:cd:3f:80:9f:a8:5e:
cc:44:6b:70:18:bc:08:b5:35:ff:7e:ca:6e:db:d8:1d:65:6f:
3e:ca:0e:69:fd:f9:d6:f8:d8:32:74:b7:cb:35:f8:a7:78:14:
62:a9:eb:ee:75:3e:35:b6:9c:3f:0b:bc:c9:f2:aa:61:b7:73:
aa:cb:10:a8:27:06:22:a6:d4:d8:62:35:8d:b0:e5:f7:ee:e5:
50:15:3c:73:0e:c5:42:ec:91:ea:10:3c:a1:8b:7a:fb:8a:13:
58:7d:e4:fe:fe:fc:77:77:b2:d3:5e:3b:73:44:5f:69:0a:d5:
54:50:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:12 2023 by rpki-client on console.sobornost.net