Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88407ac6-db16-329b-af28-ea1cb99c7bc6.roa
File: 88407ac6-db16-329b-af28-ea1cb99c7bc6.roa (raw, json)
Hash identifier: SdPWsyy0DAgiXgfY5FHwoNLB9cxoEfpxd3MeCQvj4gM=
Subject key identifier: A1:98:4D:99:C5:81:1F:94:5E:40:AA:AE:CB:7A:28:4B:F4:B0:3A:38
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB264795FC42CF9620345500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88407ac6-db16-329b-af28-ea1cb99c7bc6.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:26:47:95:fc:42:cf:96:20:34:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=4af13702-0999-44ff-9f97-aca52c4b4a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:70:bf:d1:62:d7:ee:a1:7c:f1:51:5f:1b:
eb:db:a0:c1:8b:30:45:28:b8:18:07:1e:5f:24:13:
b7:46:17:ad:63:df:82:ce:81:60:ad:e7:bc:d5:de:
f5:fe:72:27:c3:75:26:ff:db:a3:7b:04:1f:f9:41:
78:90:04:87:9e:26:a0:20:eb:91:e7:3a:a1:b2:56:
4d:9b:ae:89:7e:84:cc:24:76:33:bf:1f:e5:ef:8d:
92:ef:a3:0e:6c:cf:68:aa:5b:be:eb:55:2d:09:a9:
75:ba:ae:70:f3:73:c3:34:fb:6e:84:87:6c:73:1a:
97:79:30:81:1c:20:ac:fd:7e:a3:2c:9f:70:4c:a9:
28:b5:54:c5:56:34:47:df:11:8d:a3:49:3e:dc:da:
a1:a2:eb:bd:a1:6d:74:db:3d:83:dd:b3:3d:53:76:
03:84:64:08:09:91:cc:a0:6f:dd:a8:cd:40:97:02:
10:16:b8:fa:bb:f1:de:49:f1:41:0c:10:b4:58:08:
9f:85:d5:fe:56:08:0b:52:9b:3d:e5:5b:cf:2d:cd:
24:62:55:20:e8:68:be:f6:f9:da:be:bc:2e:6f:5b:
93:48:4a:c2:9f:99:6f:f0:01:0e:b3:69:51:d1:93:
2f:5b:cd:ec:85:c9:d2:30:1a:ec:9c:e7:cc:8e:dd:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:4D:99:C5:81:1F:94:5E:40:AA:AE:CB:7A:28:4B:F4:B0:3A:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/88407ac6-db16-329b-af28-ea1cb99c7bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ea:e0:f5:58:2e:13:52:02:c8:ca:67:ee:92:e1:4e:05:93:
bd:0d:ff:6a:ca:30:fe:cc:66:48:d4:2e:c6:21:ae:66:ea:98:
6d:19:5b:af:32:80:16:b0:9f:b3:22:b1:76:59:c7:e9:44:c1:
0c:12:a3:d7:d0:31:3e:c4:f1:c4:76:63:98:69:1f:f3:da:0b:
7f:46:54:03:69:79:7f:b1:22:eb:c2:dd:1c:31:3b:06:ee:97:
f3:e5:73:6e:c8:52:e9:9a:df:e4:21:16:2e:72:50:3f:3a:16:
63:bb:9f:02:a6:ea:ef:f1:6d:dd:a9:58:2f:11:39:d1:5e:9e:
d3:91:3b:99:b8:8a:65:b5:db:f8:0d:48:70:0b:37:7c:5c:92:
ae:85:31:35:fb:8a:1d:f6:69:ab:a0:8a:76:d6:46:16:b0:9e:
16:7e:46:31:88:37:b8:43:d2:d9:10:e9:6c:62:dd:3d:db:2e:
4f:72:b7:79:b3:a4:27:93:f7:10:d0:cb:4a:55:75:c2:91:1a:
cf:8f:1d:d5:0e:c9:49:05:7d:6d:db:da:09:d0:fe:8f:92:48:
2e:42:57:41:c3:f2:e8:12:17:92:c3:bc:75:22:bd:94:75:c1:
ff:c0:6b:07:72:87:f5:d1:5b:77:63:11:b3:8b:40:9d:a6:22:
da:a0:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:11 2023 by rpki-client on console.sobornost.net