Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e6ce854-e24b-3c1d-b5e6-4fcf7b50e7e4.roa
File: 1e6ce854-e24b-3c1d-b5e6-4fcf7b50e7e4.roa (raw, json)
Hash identifier: hWb1XCIhCDFuCRtuHKDWfhqNOlaeynB0pKpFpAMvOTI=
Subject key identifier: 45:92:FB:BA:43:5C:33:E7:0F:E5:B4:9F:50:3A:D5:ED:2A:9F:2A:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFD4FFE82AF4AA1A092CBB700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e6ce854-e24b-3c1d-b5e6-4fcf7b50e7e4.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:4f:fe:82:af:4a:a1:a0:92:cb:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=b2e88afa-f2c5-4027-83fd-9bc5e32d966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:17:98:40:95:75:9d:71:02:48:d8:5d:1c:
58:43:cc:3c:0f:e5:a3:0d:58:00:78:76:aa:c1:e0:
77:fc:47:d3:f7:96:b4:ee:de:fe:2d:2e:0b:c9:ab:
bc:bb:65:2b:81:03:58:2f:dc:e4:3e:76:79:5b:e7:
56:db:05:c3:e7:4a:bf:3c:ca:22:74:d7:be:74:08:
53:eb:ed:3c:fb:cb:08:f5:1f:9b:20:c2:8e:8a:a3:
ff:26:fb:de:14:81:ff:9e:50:a3:44:9c:73:1d:5e:
e9:de:d7:3e:e4:f2:8e:1b:d2:16:f0:6c:e6:40:25:
bb:8e:34:df:64:3d:1f:9f:06:ee:6e:24:6f:95:34:
75:f0:4f:95:24:1c:8f:31:b6:69:1c:47:51:14:ee:
5d:bc:7f:a7:dc:3e:52:6a:5a:0a:d4:16:05:d9:9d:
4a:fb:62:b4:b9:b8:d4:34:04:c1:c1:98:90:bf:11:
09:db:24:68:ac:11:21:ef:68:6f:b5:ad:82:79:15:
13:38:d2:35:ea:19:9e:e6:12:6a:c8:e2:a9:22:d0:
9e:65:10:10:85:fd:47:fd:0d:3c:35:23:00:64:51:
d7:b0:fa:17:54:e5:71:17:3b:cf:fa:ae:01:a3:5e:
2f:44:90:09:0e:dc:d9:4a:78:f0:0a:5e:bb:21:ee:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:FB:BA:43:5C:33:E7:0F:E5:B4:9F:50:3A:D5:ED:2A:9F:2A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e6ce854-e24b-3c1d-b5e6-4fcf7b50e7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f7:59:6f:83:25:34:02:ed:b3:0f:af:50:3b:55:48:0b:9c:
8b:e0:36:89:ff:fc:de:ba:a4:f7:81:15:72:b0:7c:16:8e:f1:
5d:7f:40:5c:16:f6:ba:ab:c5:c2:02:6a:a0:08:b3:91:89:18:
86:37:3b:67:1b:80:ac:b4:87:85:b3:1f:36:3e:63:84:15:45:
fa:87:e5:7e:80:ea:9c:33:1b:3e:3f:d0:bc:97:69:52:95:14:
18:91:32:39:61:b4:4b:d9:af:02:66:ed:a0:15:cf:7b:e6:e6:
2c:0f:b0:0c:91:a6:2c:6d:6d:c4:34:92:7e:71:9c:e5:05:af:
32:90:7b:cc:c3:4f:56:26:eb:09:46:6f:b6:a9:09:73:9c:b9:
15:6f:eb:8c:36:12:b6:ec:a6:68:e9:79:ed:2c:a4:16:f7:05:
7d:ce:e9:0b:e9:f3:cd:af:ef:68:46:05:1d:28:65:ac:20:79:
3c:4f:c5:55:0e:98:1c:40:89:02:4a:2c:2c:65:d8:6d:7d:86:
ab:99:3b:d0:d4:92:a6:75:8e:8e:b4:58:63:91:c5:ba:3c:31:
62:49:4c:58:42:40:95:60:a2:cd:74:83:ce:1e:db:45:ff:0d:
1c:d1:9e:c6:28:83:8d:74:0a:56:40:2a:7d:be:ef:5b:3e:0d:
a0:83:7d:3c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/9T/6Cr0qhoJLLtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyMTEyMDAwMFoXDTIyMTIyNzA1MDAwMFowLzEtMCsGA1UEAxMk
YjJlODhhZmEtZjJjNS00MDI3LTgzZmQtOWJjNWUzMmQ5NjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3sXmECVdZ1xAkjYXRxYQ8w8D+WjDVgAeHaq
weB3/EfT95a07t7+LS4Lyau8u2UrgQNYL9zkPnZ5W+dW2wXD50q/PMoidNe+dAhT
6+08+8sI9R+bIMKOiqP/JvveFIH/nlCjRJxzHV7p3tc+5PKOG9IW8GzmQCW7jjTf
ZD0fnwbubiRvlTR18E+VJByPMbZpHEdRFO5dvH+n3D5SaloK1BYF2Z1K+2K0ubjU
NATBwZiQvxEJ2yRorBEh72hvta2CeRUTONI16hme5hJqyOKpItCeZRAQhf1H/Q08
NSMAZFHXsPoXVOVxFzvP+q4Bo14vRJAJDtzZSnjwCl67Ie7lLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEWS+7pDXDPnD+W0n1A61e0qnyowMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWU2Y2U4NTQtZTI0Yi0z
YzFkLWI1ZTYtNGZjZjdiNTBlN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiPdZb4MlNALtsw+vUDtVSAuci+A2if/83rqk94EVcrB8Fo7xXX9AXBb2
uqvFwgJqoAizkYkYhjc7ZxuArLSHhbMfNj5jhBVF+oflfoDqnDMbPj/QvJdpUpUU
GJEyOWG0S9mvAmbtoBXPe+bmLA+wDJGmLG1txDSSfnGc5QWvMpB7zMNPVibrCUZv
tqkJc5y5FW/rjDYStuymaOl57SykFvcFfc7pC+nzza/vaEYFHShlrCB5PE/FVQ6Y
HECJAkosLGXYbX2Gq5k70NSSpnWOjrRYY5HFujwxYklMWEJAlWCizXSDzh7bRf8N
HNGexiiDjXQKVkAqfb7vWz4NoIN9PA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:40 2025 by rpki-client