Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20bddc7d-1d5f-31e7-98ee-616418497228.roa
File: 20bddc7d-1d5f-31e7-98ee-616418497228.roa (raw, json)
Hash identifier: uQVy361G4f8i9Xa8ZJ1HWf8VcyznZ6FQfOgH9trBeiw=
Subject key identifier: 82:99:57:DF:F6:67:26:A9:6F:9C:0E:F4:6F:1D:05:F7:8F:9C:AB:54
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840250947B46BDD737EF4535500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20bddc7d-1d5f-31e7-98ee-616418497228.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:25:09:47:b4:6b:dd:73:7e:f4:53:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=67a568e9-cb54-443e-90f6-3ddd8d838361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:4c:d2:95:00:bf:0a:f8:81:d4:39:4f:1b:
8d:8c:64:e7:46:77:5d:1c:3c:9d:ef:e7:3e:bb:ec:
67:f8:b9:3b:f5:27:60:46:92:b2:48:e6:70:8f:eb:
ec:9e:1a:e5:71:78:0b:6e:f7:67:32:61:09:ca:b4:
6e:41:04:51:37:30:90:4f:9d:0a:37:1c:12:13:0f:
ee:3f:2c:04:4f:86:f8:c2:2e:5a:4c:f7:c8:0d:d9:
fd:e8:00:06:12:41:13:0a:c6:64:24:d5:c6:ba:b8:
ed:c5:93:64:3c:c6:e8:ea:2a:19:68:7d:84:c2:5b:
ae:fe:59:aa:9f:7d:fa:13:9e:05:d9:da:72:e8:4d:
17:ce:26:50:dc:10:df:ef:51:76:da:54:0f:f4:3b:
83:27:8b:51:ab:7a:26:94:de:24:d1:a9:95:5d:32:
05:d3:96:9e:dd:09:06:d2:be:2b:8f:9b:31:28:f0:
2d:d0:92:a4:f8:90:fe:c5:24:23:52:94:10:d4:09:
cc:69:14:23:01:00:04:3b:4e:c2:29:5d:97:53:25:
2d:3e:36:8d:b2:ab:04:06:93:53:f6:2a:f7:53:ad:
bc:12:7d:7c:e6:12:a4:eb:22:4a:a3:59:64:b7:64:
67:df:94:45:56:22:ac:48:05:b9:0f:fe:b1:22:d0:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:57:DF:F6:67:26:A9:6F:9C:0E:F4:6F:1D:05:F7:8F:9C:AB:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20bddc7d-1d5f-31e7-98ee-616418497228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:dc:61:65:f3:b6:8b:9d:85:43:b6:69:25:28:3d:aa:ee:c0:
cd:d9:ca:34:da:73:22:44:9e:0f:3a:1a:7f:7d:71:9b:c9:61:
14:8f:fc:6e:71:1c:64:3d:83:93:bd:c0:74:5a:52:41:4d:e3:
52:1d:f4:88:7e:38:15:44:70:89:f5:9e:c0:26:c6:45:5c:d3:
a6:10:e6:a6:25:93:4e:05:e3:50:49:fd:7e:eb:0f:68:c3:d9:
a0:55:c5:64:c7:75:78:23:f3:f2:59:37:8e:27:c5:30:c5:1d:
69:e1:0e:ef:c4:08:e4:91:0d:88:c8:87:9a:2b:28:f4:41:2b:
39:2d:df:13:a8:ea:00:e0:41:cd:6d:c1:c0:d4:f5:38:b6:29:
91:d9:8d:80:86:3a:58:46:cc:51:cd:87:21:0e:f0:d7:0f:d8:
f5:37:3e:43:42:b8:a6:8c:bd:37:40:bc:1a:10:8e:0d:f7:0a:
80:71:f6:75:2a:ce:8d:dc:be:53:30:e4:f4:b3:f0:1d:56:c0:
2a:67:94:3c:38:ed:40:48:f2:26:ef:01:bb:e5:9c:c1:6d:66:
36:f3:40:5f:4a:6b:c2:83:1e:c9:74:4b:92:c4:98:48:1a:ad:
17:0f:2b:28:7d:6f:7e:e9:e2:05:3c:ce:fe:6a:e1:94:24:e9:
75:dd:7e:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAlCUe0a91zfvRTVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
NjdhNTY4ZTktY2I1NC00NDNlLTkwZjYtM2RkZDhkODM4MzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKpM0pUAvwr4gdQ5TxuNjGTnRnddHDyd7+c+
u+xn+Lk79SdgRpKySOZwj+vsnhrlcXgLbvdnMmEJyrRuQQRRNzCQT50KNxwSEw/u
PywET4b4wi5aTPfIDdn96AAGEkETCsZkJNXGurjtxZNkPMbo6ioZaH2Ewluu/lmq
n336E54F2dpy6E0XziZQ3BDf71F22lQP9DuDJ4tRq3omlN4k0amVXTIF05ae3QkG
0r4rj5sxKPAt0JKk+JD+xSQjUpQQ1AnMaRQjAQAEO07CKV2XUyUtPjaNsqsEBpNT
9ir3U628En185hKk6yJKo1lkt2Rn35RFViKsSAW5D/6xItCU3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKZV9/2Zyapb5wO9G8dBfePnKtUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjBiZGRjN2QtMWQ1Zi0z
MWU3LTk4ZWUtNjE2NDE4NDk3MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzcYWXztoudhUO2aSUoParuwM3ZyjTacyJEng86Gn99cZvJYRSP/G5x
HGQ9g5O9wHRaUkFN41Id9Ih+OBVEcIn1nsAmxkVc06YQ5qYlk04F41BJ/X7rD2jD
2aBVxWTHdXgj8/JZN44nxTDFHWnhDu/ECOSRDYjIh5orKPRBKzkt3xOo6gDgQc1t
wcDU9Ti2KZHZjYCGOlhGzFHNhyEO8NcP2PU3PkNCuKaMvTdAvBoQjg33CoBx9nUq
zo3cvlMw5PSz8B1WwCpnlDw47UBI8ibvAbvlnMFtZjbzQF9Ka8KDHsl0S5LEmEga
rRcPKyh9b37p4gU8zv5q4ZQk6XXdfiM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:58 2025 by rpki-client