Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85a71708-ab9e-366e-a7e6-cc8ff35cb853.roa
File: 85a71708-ab9e-366e-a7e6-cc8ff35cb853.roa (raw, json)
Hash identifier: +2OaxKmMbOVxLCjWZsLzd6zFo2DbUd1YkSlIMixefPk=
Subject key identifier: 7B:B4:23:87:E0:A2:98:E0:9F:B2:F4:26:07:44:07:33:A2:C2:8E:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BC39F148D49D9E793A32D3E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85a71708-ab9e-366e-a7e6-cc8ff35cb853.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:39:f1:48:d4:9d:9e:79:3a:32:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=3fc5eaf5-6b25-4981-a598-1df9fab402da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:48:c0:ff:a8:c4:2f:e8:e5:bc:53:56:3e:
47:87:9d:43:b1:45:dd:0f:d4:70:c3:4b:20:08:07:
f2:0e:99:4c:99:4f:e0:a6:0e:02:ae:03:61:ab:c9:
b6:82:40:af:78:ee:9a:56:91:45:50:4e:d9:1f:f9:
16:06:c6:d8:14:7c:33:73:54:aa:d5:ed:04:1c:59:
78:e0:7d:9e:09:e0:3a:dc:43:63:e4:e9:0a:be:bc:
31:c6:3f:c6:7a:07:f4:26:d8:72:28:36:a7:c6:6f:
32:22:72:1a:9a:3e:6e:7a:f9:89:34:2a:11:11:98:
ef:44:b2:c6:03:3c:4c:59:88:ab:93:df:6f:e8:b5:
9a:a1:b6:4f:5f:a8:05:11:20:d6:20:cb:00:b1:de:
50:b0:1d:d0:44:da:8c:38:ff:ad:ea:d6:45:86:e3:
8a:e1:1a:81:4d:8b:d2:1d:7e:17:a0:bb:e2:84:c9:
92:f0:08:5c:df:fd:40:27:a3:03:bb:45:78:f3:7b:
e3:93:0b:5d:cf:8c:29:70:ba:55:88:2f:c4:61:a0:
2e:e5:43:c8:48:66:43:31:02:43:63:eb:2d:4c:1b:
bf:a2:72:1e:84:fb:1c:49:40:05:a6:b6:13:9e:1c:
3e:7f:83:01:be:c6:d6:0b:d6:6a:69:bf:61:d4:81:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:23:87:E0:A2:98:E0:9F:B2:F4:26:07:44:07:33:A2:C2:8E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85a71708-ab9e-366e-a7e6-cc8ff35cb853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2e:7c:04:92:a8:5b:0a:df:a6:fc:51:83:88:fc:e3:56:fc:
41:66:d3:89:19:39:03:12:5f:62:64:d5:64:02:c3:d1:cf:7b:
fa:1d:91:4c:7f:ba:6f:0b:d1:c1:a6:a1:da:c5:3f:59:7d:70:
70:39:79:e3:db:6c:2f:02:ab:7c:24:8f:55:7f:f7:d5:ef:52:
df:76:ec:8e:65:4e:a7:30:d0:3c:14:ef:7f:90:db:7c:43:6e:
f0:c0:6e:d7:a3:06:60:6b:36:bf:28:f7:98:d6:59:0f:b4:1a:
68:fc:44:6a:88:1a:0d:62:b5:42:7f:d5:88:4b:7f:92:18:4f:
b8:24:c4:3e:b7:40:b0:df:30:24:ac:7f:8e:25:70:d9:16:e0:
33:5e:39:49:6c:aa:ac:1f:aa:06:66:df:9a:63:51:ed:da:cf:
4a:c9:94:78:0d:04:b6:86:93:29:b0:5e:be:cb:7a:04:38:ec:
14:3d:21:27:c0:9d:80:f9:7d:12:54:08:6a:13:3d:9f:13:a8:
cb:94:c4:84:e0:5d:3d:1b:7e:1e:f5:79:96:df:7d:30:33:6f:
cd:00:72:c2:87:dc:7e:67:aa:cd:b2:c9:d6:23:0b:23:f2:cd:
05:24:3c:48:10:65:fa:8b:d1:f6:d1:e0:98:87:73:21:d0:e6:
af:c4:20:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC8OfFI1J2eeToy0+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
M2ZjNWVhZjUtNmIyNS00OTgxLWE1OTgtMWRmOWZhYjQwMmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdtIwP+oxC/o5bxTVj5Hh51DsUXdD9Rww0sg
CAfyDplMmU/gpg4CrgNhq8m2gkCveO6aVpFFUE7ZH/kWBsbYFHwzc1Sq1e0EHFl4
4H2eCeA63ENj5OkKvrwxxj/Gegf0JthyKDanxm8yInIamj5uevmJNCoREZjvRLLG
AzxMWYirk99v6LWaobZPX6gFESDWIMsAsd5QsB3QRNqMOP+t6tZFhuOK4RqBTYvS
HX4XoLvihMmS8Ahc3/1AJ6MDu0V483vjkwtdz4wpcLpViC/EYaAu5UPISGZDMQJD
Y+stTBu/onIehPscSUAFprYTnhw+f4MBvsbWC9Zqab9h1IEVKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHu0I4fgopjgn7L0JgdEBzOiwo6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODVhNzE3MDgtYWI5ZS0z
NjZlLWE3ZTYtY2M4ZmYzNWNiODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiS58BJKoWwrfpvxRg4j841b8QWbTiRk5AxJfYmTVZALD0c97+h2RTH+6
bwvRwaah2sU/WX1wcDl549tsLwKrfCSPVX/31e9S33bsjmVOpzDQPBTvf5DbfENu
8MBu16MGYGs2vyj3mNZZD7QaaPxEaogaDWK1Qn/ViEt/khhPuCTEPrdAsN8wJKx/
jiVw2RbgM145SWyqrB+qBmbfmmNR7drPSsmUeA0EtoaTKbBevst6BDjsFD0hJ8Cd
gPl9ElQIahM9nxOoy5TEhOBdPRt+HvV5lt99MDNvzQBywofcfmeqzbLJ1iMLI/LN
BSQ8SBBl+ovR9tHgmIdzIdDmr8QgFw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:14 2023 by rpki-client on console.sobornost.net