Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25fa8a25-48f9-3a9e-aa37-0016fb0840e4.roa
File: 25fa8a25-48f9-3a9e-aa37-0016fb0840e4.roa (raw, json)
Hash identifier: QSpI5Img4nPK9Q3bjciVlwLmdKpuGT3mtxGswAzx61U=
Subject key identifier: EB:1A:01:D7:C5:14:FD:E2:67:92:C9:35:FA:FA:53:19:7C:35:32:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9C1FD92FBD5335EAA2A7E980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25fa8a25-48f9-3a9e-aa37-0016fb0840e4.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 98.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9c:1f:d9:2f:bd:53:35:ea:a2:a7:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=ffc8cc2d-951b-4565-aad8-ef88afb96758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:03:18:02:f5:d5:31:b4:77:75:5b:23:62:
f2:f1:16:44:8d:69:e8:b6:4a:56:9b:74:cf:bf:36:
52:45:38:b7:84:10:1a:61:f2:ae:15:4f:17:39:40:
10:27:8b:d7:1e:80:7d:32:7d:d5:1f:df:49:83:56:
c2:1e:18:27:27:79:af:99:e3:83:fa:a6:b4:67:b2:
90:64:3d:17:09:1c:e4:b9:74:56:72:97:96:39:e1:
41:62:1e:cb:9b:a0:5a:d3:3b:a4:48:68:7a:34:84:
7f:80:76:51:5e:09:f2:75:a3:3f:ce:ab:14:43:8b:
b8:72:26:4d:c4:5d:24:83:44:aa:68:87:d6:bd:a2:
04:9d:7c:34:37:7d:63:2a:24:69:ba:dc:9c:3c:7b:
e3:2a:f3:f2:fb:8f:d1:25:6c:1c:eb:76:ba:5e:d7:
51:5d:f5:2f:ee:46:49:97:33:81:32:43:ae:ad:7c:
b3:3e:9c:7c:d1:0b:69:99:2d:e5:99:47:9b:33:86:
3c:33:38:c4:ec:dd:75:14:21:c0:76:5d:d5:ad:ea:
11:33:47:cd:06:21:24:29:cd:73:af:05:83:ca:4f:
66:18:9c:44:27:bb:ab:e5:a6:20:44:75:3b:b7:92:
d9:97:50:70:44:94:66:83:07:67:3e:45:26:cf:1d:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:01:D7:C5:14:FD:E2:67:92:C9:35:FA:FA:53:19:7C:35:32:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25fa8a25-48f9-3a9e-aa37-0016fb0840e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:43:80:8f:9a:73:4f:88:95:50:63:ee:ea:5a:56:21:00:0f:
01:89:d8:d6:98:bd:f3:d4:f8:46:04:c9:76:84:77:52:c7:a4:
9b:fa:8f:2c:c1:f8:2a:5e:57:94:b1:3e:b7:ec:95:cb:1e:8d:
1d:87:31:cf:db:8f:e9:58:57:fa:86:30:14:09:12:6d:84:1d:
01:d1:ef:08:83:4c:08:bf:24:ac:2a:d5:52:65:98:8f:52:ae:
ed:36:de:f7:3d:e4:ea:6b:61:80:69:99:ba:5b:b3:97:81:ab:
02:2b:f5:b4:16:da:ad:4b:63:91:38:61:99:35:8f:66:8e:68:
60:d7:7f:fa:a5:c5:08:5b:b9:0b:1c:4d:17:eb:e0:02:a3:a3:
72:df:f3:49:e4:4e:31:0c:b2:57:b6:0e:a3:35:24:a1:0d:e4:
00:f5:2d:32:3a:f9:80:75:94:70:94:73:27:ef:47:2f:aa:35:
16:32:d7:9a:2a:9f:40:7b:5b:d9:ba:08:aa:8e:7c:74:ca:86:
50:79:0e:99:fa:04:f3:25:62:2a:4b:73:00:43:80:a0:09:91:
81:6e:56:96:39:a2:e6:0b:84:be:77:53:b9:2f:65:c7:3e:49:
17:73:4c:0f:19:4e:64:18:86:46:ed:0a:f3:96:10:28:8b:c9:
0f:53:c4:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+cH9kvvVM16qKn6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZmZjOGNjMmQtOTUxYi00NTY1LWFhZDgtZWY4OGFmYjk2NzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYADGAL11TG0d3VbI2Ly8RZEjWnotkpWm3TP
vzZSRTi3hBAaYfKuFU8XOUAQJ4vXHoB9Mn3VH99Jg1bCHhgnJ3mvmeOD+qa0Z7KQ
ZD0XCRzkuXRWcpeWOeFBYh7Lm6Ba0zukSGh6NIR/gHZRXgnydaM/zqsUQ4u4ciZN
xF0kg0SqaIfWvaIEnXw0N31jKiRputycPHvjKvPy+4/RJWwc63a6XtdRXfUv7kZJ
lzOBMkOurXyzPpx80QtpmS3lmUebM4Y8MzjE7N11FCHAdl3VreoRM0fNBiEkKc1z
rwWDyk9mGJxEJ7ur5aYgRHU7t5LZl1BwRJRmgwdnPkUmzx1zeQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOsaAdfFFP3iZ5LJNfr6Uxl8NTLpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjVmYThhMjUtNDhmOS0z
YTllLWFhMzctMDAxNmZiMDg0MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYoMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIUOAj5pzT4iVUGPu6lpWIQAPAYnY1pi989T4RgTJdoR3Usekm/qPLMH4
Kl5XlLE+t+yVyx6NHYcxz9uP6VhX+oYwFAkSbYQdAdHvCINMCL8krCrVUmWYj1Ku
7Tbe9z3k6mthgGmZuluzl4GrAiv1tBbarUtjkThhmTWPZo5oYNd/+qXFCFu5CxxN
F+vgAqOjct/zSeROMQyyV7YOozUkoQ3kAPUtMjr5gHWUcJRzJ+9HL6o1FjLXmiqf
QHtb2boIqo58dMqGUHkOmfoE8yViKktzAEOAoAmRgW5Wljmi5guEvndTuS9lxz5J
F3NMDxlOZBiGRu0K85YQKIvJD1PE/Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:59 2025 by rpki-client