Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa
File: b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa (raw, json)
Hash identifier: kNUSVUZZlcQBeJXrQyF5LdSXE/TnUBjeMzmZ3jqT+4U=
Subject key identifier: 68:5B:E5:DC:43:B9:8D:C8:F9:B2:E7:03:FC:E0:89:55:E5:81:F7:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840680218CD0F9F01F0CF399800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:02:18:cd:0f:9f:01:f0:cf:39:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=f91a9c8d-3df7-42b5-9a25-4d63009296c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:41:f3:bc:b3:c0:b1:0c:b0:f0:47:d3:2c:
e4:60:bf:a9:96:47:97:a3:b8:6e:03:6d:01:46:22:
29:44:dd:be:5e:36:5b:a4:cf:e1:e5:1f:e0:60:f7:
81:7d:0c:e9:cc:b4:17:22:16:fb:54:8e:32:65:fc:
ed:b2:09:58:4f:f5:43:bb:51:fb:23:1e:ae:dd:e9:
a0:9a:94:59:59:86:a6:3d:00:9b:0c:25:9e:2a:6c:
68:dd:b9:b1:69:a5:a2:42:31:b3:6d:d6:47:54:0e:
1b:c4:bf:0d:23:38:ab:e4:ad:d8:63:90:a2:08:a2:
f0:5f:7e:8d:9d:77:86:b7:74:7f:28:19:c6:83:80:
74:a3:3b:3d:8f:90:c4:4b:bc:c7:e5:c9:77:c6:e8:
8c:40:08:a6:e3:24:0a:60:6d:f3:e3:ce:03:a3:b6:
ee:99:f9:7e:2a:1f:70:d6:95:21:9b:b6:87:e9:ed:
ce:6d:c4:14:07:19:89:b6:f8:40:dd:75:83:c5:2d:
95:80:04:f1:5d:51:d8:6b:78:2f:22:74:c2:a5:5a:
36:b9:aa:70:33:ce:d8:04:7c:9a:5c:2c:b8:92:1d:
10:02:ec:11:e3:a5:26:e2:e5:cc:29:29:86:3e:d2:
36:c0:70:1b:ca:0c:6e:d5:b8:87:f0:7f:f2:dc:c7:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:E5:DC:43:B9:8D:C8:F9:B2:E7:03:FC:E0:89:55:E5:81:F7:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0a56b82-d1aa-3ee3-a42f-e1d829714976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:a4:a1:eb:d9:82:63:bf:b9:34:d2:33:a1:e6:ee:99:d5:b2:
eb:f1:71:26:ac:7d:b7:9d:1f:cd:ac:df:59:67:06:00:30:0a:
be:5d:ed:9b:1f:13:45:d8:70:f8:0f:3b:72:25:ac:57:db:f0:
bc:23:e5:93:13:9c:09:4a:8c:60:f5:f3:40:7c:52:7b:3b:bb:
26:cc:86:19:aa:68:17:44:67:c2:db:ad:12:46:83:08:01:a6:
d6:62:d8:1a:1c:a0:f1:a0:af:d2:96:35:c1:f1:ea:d2:09:41:
c0:c1:e3:cc:a1:ba:55:4d:4b:2a:c5:73:4f:fb:ac:20:3d:58:
b7:c9:6d:5b:2b:b6:24:56:cb:a3:65:27:df:c5:7c:30:20:98:
76:68:e3:96:7f:de:ae:77:f0:a2:aa:d2:f0:6b:ef:ee:9c:ea:
d1:dc:3f:e2:e8:cc:e9:0e:b8:6c:e2:41:d4:d6:8a:df:44:b7:
13:e9:ef:07:9a:86:5c:57:23:82:75:61:66:d7:74:4a:22:c4:
31:4e:2f:64:f8:1a:b8:fa:1a:bc:c2:dc:ec:69:30:2a:29:aa:
6f:61:7e:58:26:f1:0c:67:2a:7d:de:50:cb:43:2a:d4:82:69:
0f:6b:d1:d8:0a:fe:7e:e2:7e:6a:93:a1:d9:5a:21:78:51:fd:
7c:79:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:19 2023 by rpki-client on console.sobornost.net