Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bacd62c9-b0c7-3b7c-9a96-df663dce1419.roa
File: bacd62c9-b0c7-3b7c-9a96-df663dce1419.roa (raw, json)
Hash identifier: vcHx4TjLyyrl3ukcOme+RXhEOaMgv1S8OsGnB+bMRCo=
Subject key identifier: AA:45:8A:08:0E:F7:37:7B:FD:48:47:13:86:75:05:07:BE:2F:F5:64
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1665D262247
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bacd62c9-b0c7-3b7c-9a96-df663dce1419.roa
Signing time: Wed 10 Oct 2018 08:44:32 +0000
ROA not before: Wed 10 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 54.255.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:26:22:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 10 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=5b2aaef7-c639-4f33-84fa-8be771a9dd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:4a:73:c7:b9:09:05:6f:9e:73:40:94:95:
47:75:b9:6d:73:db:5a:67:1e:12:0a:72:98:8c:52:
4f:80:58:06:cd:42:f8:4a:59:e2:a6:e0:d9:f6:e0:
66:6d:aa:32:2e:48:7a:96:3f:16:81:c9:3e:8e:fe:
f6:30:f9:ec:b3:c0:34:24:0a:77:e2:2b:f9:4f:7e:
89:f7:e0:44:fe:ec:9d:5f:7f:11:06:63:5e:7a:4f:
70:3b:1f:f3:32:d4:88:96:ba:89:3d:ee:ac:a8:6f:
32:3a:38:7a:cc:f0:53:97:41:ef:c8:a8:0a:cd:5e:
72:09:b3:f8:fe:5e:9d:d6:a8:4a:41:ca:dc:e4:ba:
86:f8:18:41:87:19:31:6f:09:ed:27:65:af:f0:6b:
76:a5:db:e5:db:15:cc:c3:6b:7e:c4:27:5c:6d:71:
18:7a:2f:95:1a:83:bc:96:70:cd:71:61:aa:de:e8:
f5:b3:5f:41:fb:2b:65:53:64:f7:b1:49:ed:93:ad:
8e:2a:35:60:fc:1d:86:09:7c:74:70:93:e5:69:ad:
10:d3:31:7c:d7:2f:9e:cd:41:f1:67:52:31:6b:f0:
c3:a5:05:80:6f:0e:9d:d6:e4:f8:b2:38:b2:d6:2a:
a8:8d:16:10:56:03:09:21:4b:91:d9:f3:61:e7:f4:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:8A:08:0E:F7:37:7B:FD:48:47:13:86:75:05:07:BE:2F:F5:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bacd62c9-b0c7-3b7c-9a96-df663dce1419.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.255.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:44:f0:f0:c5:4c:13:db:7f:ff:f6:f3:ea:b3:78:dd:87:f4:
62:ce:05:2a:32:04:ad:8a:80:c9:fc:1c:40:db:6e:04:0e:27:
54:bd:ec:a9:d2:ac:62:0c:b6:25:39:a0:5f:4d:b1:09:45:5c:
38:c9:c3:c9:8f:e0:3f:a1:7e:8e:36:34:a9:7e:36:ff:37:89:
30:22:7c:67:45:d4:dd:4f:c8:22:0a:95:4c:a6:4c:34:b7:30:
ee:68:be:7e:43:72:64:97:0f:a6:77:b2:36:cd:f9:b6:de:be:
a3:6a:55:b0:7e:42:66:9d:e6:1c:25:7e:f1:01:e1:ba:63:11:
1c:20:4f:63:0f:4b:4f:ba:db:b5:bc:39:cd:13:1d:b5:bc:73:
2c:ca:91:78:5d:15:56:b6:e9:e1:0c:0f:6d:c4:83:f9:fc:f2:
6d:4b:05:c3:68:af:de:bb:f9:1b:c6:1d:dd:76:80:a9:1d:f3:
29:31:f8:92:b9:0d:5e:28:07:43:1d:d2:1d:da:96:d7:c5:e5:
53:b1:3f:05:1d:f5:ab:b2:3d:6d:d2:a0:4e:17:d1:18:e5:ba:
ea:48:fe:dc:c5:ac:30:6e:6d:52:6e:56:96:62:71:bb:74:b0:
37:28:b8:2e:35:31:c2:8c:f4:c2:05:3e:17:d6:cd:40:af:b2:
d4:4a:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:18 2023 by rpki-client on console.sobornost.net