Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df50610a-1e94-327e-b1f0-a1aba4d0ec05.roa
File: df50610a-1e94-327e-b1f0-a1aba4d0ec05.roa (raw, json)
Hash identifier: 8B8OMkXGES6egEljwIglRJyrw030ecqU1hvCurSYZ+E=
Subject key identifier: C3:2C:68:00:9C:DB:95:A2:11:2A:C2:7F:83:FB:88:09:C4:85:D3:2D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584064E58E2EB2D8371E16278800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df50610a-1e94-327e-b1f0-a1aba4d0ec05.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:e5:8e:2e:b2:d8:37:1e:16:27:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=86924c04-1409-4951-b2a3-678b8753750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:18:05:82:2a:6b:2c:95:58:d5:ea:88:c1:
c9:ed:c6:1d:a5:4e:85:9c:dc:06:03:86:60:9c:34:
63:30:e5:04:ef:44:1d:f9:07:7d:bc:ff:79:b1:db:
2d:a7:c6:95:99:f8:42:03:cd:11:ba:44:43:70:7e:
84:06:c8:90:a2:cd:12:4c:af:39:85:6c:fb:c8:91:
ff:8e:f0:69:1a:2a:6d:5f:37:92:45:a1:4f:0b:00:
64:0c:8d:61:35:e9:ea:6b:1b:a6:1b:0c:6c:e3:b9:
d1:6c:70:c9:ba:52:20:9c:2b:08:60:39:2f:3e:e5:
fb:96:03:3c:38:e8:c6:3e:0d:aa:69:0b:a1:cc:92:
77:5b:c0:32:2b:19:f5:33:f0:e5:67:d9:21:d0:87:
02:d4:68:17:ee:28:5c:fa:3b:f8:e3:4f:23:f3:76:
43:35:35:1a:55:ca:74:96:c1:7f:94:18:a2:20:0d:
be:dc:ba:67:c2:a1:7e:e0:f9:8a:3e:93:33:14:db:
83:32:5a:ac:e8:3c:0b:76:1b:2b:c7:e3:9d:16:12:
42:08:30:48:f9:0d:04:2e:80:e7:ad:08:0d:4f:29:
9b:83:8f:b2:af:ad:ac:cf:ac:26:fa:40:4c:bc:bb:
44:82:06:1e:5f:e1:e9:c2:ac:87:4c:45:88:74:12:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:68:00:9C:DB:95:A2:11:2A:C2:7F:83:FB:88:09:C4:85:D3:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df50610a-1e94-327e-b1f0-a1aba4d0ec05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:7c:62:9d:6f:d9:22:6e:92:8d:2e:dc:b8:2f:bb:92:13:ec:
ad:4d:68:8b:90:a0:6a:18:83:53:4f:1a:db:e5:dc:67:38:6f:
82:5a:40:f2:55:d4:2c:ed:9c:38:9a:2a:67:87:7e:05:2c:95:
a5:9c:86:f0:91:ae:7e:2d:99:a2:0d:62:b6:04:51:e9:94:0d:
d7:01:c7:6a:41:72:cd:3a:9c:4b:f4:9a:00:05:d3:ed:9c:99:
57:3f:40:8b:14:1b:46:59:da:6f:28:83:89:f4:a0:c2:44:1c:
76:e1:38:ff:e5:61:f3:5c:e8:06:10:b3:d8:cd:29:e1:1e:bd:
39:4b:1d:b9:c5:c8:6d:36:1a:80:21:99:62:67:0a:e1:2e:19:
c0:99:5c:a9:16:d5:94:83:e9:f0:19:02:6d:d5:60:93:a4:5f:
a5:00:85:80:c0:19:1f:3c:73:f8:21:f2:f9:d8:4b:40:8e:1d:
54:82:2c:fa:16:84:4d:ce:ac:26:98:00:b3:31:8a:40:a4:f7:
56:98:3d:3a:1b:d5:36:ae:f2:44:b5:6b:69:de:25:f7:c5:45:
79:74:1e:2d:0b:b9:e2:9f:26:4a:a5:2d:6a:75:52:28:d6:10:
e3:3f:4e:30:2c:3c:a6:55:2b:25:bc:3b:dd:77:34:8a:ce:73:
ed:54:e2:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBk5Y4ustg3HhYniAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyODEyMDAwMFoXDTIzMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
ODY5MjRjMDQtMTQwOS00OTUxLWIyYTMtNjc4Yjg3NTM3NTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wsYBYIqayyVWNXqiMHJ7cYdpU6FnNwGA4Zg
nDRjMOUE70Qd+Qd9vP95sdstp8aVmfhCA80RukRDcH6EBsiQos0STK85hWz7yJH/
jvBpGiptXzeSRaFPCwBkDI1hNenqaxumGwxs47nRbHDJulIgnCsIYDkvPuX7lgM8
OOjGPg2qaQuhzJJ3W8AyKxn1M/DlZ9kh0IcC1GgX7ihc+jv4408j83ZDNTUaVcp0
lsF/lBiiIA2+3LpnwqF+4PmKPpMzFNuDMlqs6DwLdhsrx+OdFhJCCDBI+Q0ELoDn
rQgNTymbg4+yr62sz6wm+kBMvLtEggYeX+HpwqyHTEWIdBI9UwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMMsaACc25WiESrCf4P7iAnEhdMtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGY1MDYxMGEtMWU5NC0z
MjdlLWIxZjAtYTFhYmE0ZDBlYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD54wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV3xinW/ZIm6SjS7cuC+7khPsrU1oi5CgahiDU08a2+XcZzhvglpA8lXU
LO2cOJoqZ4d+BSyVpZyG8JGufi2Zog1itgRR6ZQN1wHHakFyzTqcS/SaAAXT7ZyZ
Vz9AixQbRlnabyiDifSgwkQcduE4/+Vh81zoBhCz2M0p4R69OUsducXIbTYagCGZ
YmcK4S4ZwJlcqRbVlIPp8BkCbdVgk6RfpQCFgMAZHzxz+CHy+dhLQI4dVIIs+haE
Tc6sJpgAszGKQKT3Vpg9OhvVNq7yRLVrad4l98VFeXQeLQu54p8mSqUtanVSKNYQ
4z9OMCw8plUrJbw73Xc0is5z7VTidw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:23 2023 by rpki-client on console.sobornost.net