Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26b92017-fde4-31dd-9386-47b6f0c0aee6.roa
File: 26b92017-fde4-31dd-9386-47b6f0c0aee6.roa (raw, json)
Hash identifier: unrl4A+g8LpLwTyv3jAtekmrTs++sZhjUq0foug6b9o=
Subject key identifier: 70:05:49:EA:EE:9B:3F:8B:01:5D:33:FC:0B:F4:67:4D:40:92:E9:DB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF8B23A1F3AC921A98699D940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26b92017-fde4-31dd-9386-47b6f0c0aee6.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:b2:3a:1f:3a:c9:21:a9:86:99:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=609977b0-6958-4e9d-b6ed-4aa0dc8584b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:52:ca:9c:57:7f:cc:21:a6:4c:1c:61:54:
c2:83:3d:11:c0:af:bd:96:58:53:9c:0b:a3:71:88:
58:37:37:99:bb:f6:a9:d5:b7:d5:e6:55:fb:15:81:
2c:63:cc:96:67:ac:29:f5:df:a6:9f:8a:56:10:bf:
e2:b9:c1:0f:96:50:22:57:c3:9a:5f:fe:7c:63:b1:
ac:41:c7:31:ca:f7:a2:c0:f7:0f:b1:0c:a7:ad:d8:
e6:5d:0a:8f:5b:30:fd:01:13:45:57:78:bb:a0:74:
97:1e:32:f9:34:ec:06:32:59:1b:33:27:ff:5e:ec:
b8:69:3e:17:21:4f:6c:98:d0:5f:1d:8d:2b:90:2b:
32:1f:39:23:fc:fe:f0:2e:a5:90:15:67:b1:fb:0f:
a4:3e:a0:8b:ed:1d:f2:35:40:d7:f0:80:9e:25:42:
5c:ad:61:56:12:cc:1d:35:37:df:99:aa:b0:f4:8a:
ac:b5:20:98:1b:1f:67:f1:87:03:67:bf:1e:41:f4:
34:20:30:e5:42:a2:39:94:96:52:28:ee:0f:98:77:
c6:ec:03:96:60:39:14:de:60:d4:7a:a1:39:19:05:
66:70:fd:af:ff:f1:58:b9:d6:35:42:cc:f3:33:de:
7e:68:8e:17:48:bd:5c:74:6e:be:11:fd:79:d3:6d:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:49:EA:EE:9B:3F:8B:01:5D:33:FC:0B:F4:67:4D:40:92:E9:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26b92017-fde4-31dd-9386-47b6f0c0aee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:fa:d6:cb:08:8f:13:ca:9d:2e:81:04:fa:ce:a5:36:1f:73:
df:ea:95:44:e1:1f:83:e6:5a:95:e3:f9:44:66:e0:64:0e:02:
7d:4b:f8:24:54:b5:22:d7:7b:ca:22:45:fc:ed:ff:4a:a1:31:
34:6f:3a:17:c6:ec:43:4b:ca:be:ce:1c:99:a9:72:f4:d2:f7:
8f:17:57:ca:e6:3e:9b:e5:3d:e1:2c:17:a1:2d:b2:44:37:30:
25:aa:30:a5:5e:b7:73:c9:2e:08:6e:35:3b:ac:55:41:5b:ae:
17:4d:61:e1:eb:ef:50:3b:9a:9d:08:2e:c9:49:99:49:1f:60:
50:14:9f:6d:5b:0c:49:15:6b:f4:2b:67:71:ed:cc:db:e3:3a:
47:a0:a2:bb:f2:2e:8e:62:03:af:d5:92:d5:b3:10:6e:1e:a0:
d0:84:a0:1b:17:d0:b0:ab:c6:7e:ed:3c:ff:53:f5:29:b3:38:
77:be:0e:a9:04:77:c6:01:c4:b2:c6:9d:52:5d:68:c1:4b:6a:
4c:6c:3d:80:35:49:c5:09:1b:f0:e1:7a:4c:c3:7e:b8:71:6a:
6a:03:5e:f7:42:d3:70:8d:10:9c:e9:9e:41:41:5e:7b:c0:03:
07:8c:04:58:37:1d:f5:e8:54:a9:cc:0b:fa:b7:ea:89:5f:a5:
5f:0e:77:84
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD34sjofOskhqYaZ2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NjA5OTc3YjAtNjk1OC00ZTlkLWI2ZWQtNGFhMGRjODU4NGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBNSypxXf8whpkwcYVTCgz0RwK+9llhTnAuj
cYhYNzeZu/ap1bfV5lX7FYEsY8yWZ6wp9d+mn4pWEL/iucEPllAiV8OaX/58Y7Gs
QccxyveiwPcPsQynrdjmXQqPWzD9ARNFV3i7oHSXHjL5NOwGMlkbMyf/Xuy4aT4X
IU9smNBfHY0rkCsyHzkj/P7wLqWQFWex+w+kPqCL7R3yNUDX8ICeJUJcrWFWEswd
NTffmaqw9IqstSCYGx9n8YcDZ78eQfQ0IDDlQqI5lJZSKO4PmHfG7AOWYDkU3mDU
eqE5GQVmcP2v//FYudY1QszzM95+aI4XSL1cdG6+Ef15023eswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHAFSerumz+LAV0z/Av0Z01AkunbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjZiOTIwMTctZmRlNC0z
MWRkLTkzODYtNDdiNmYwYzBhZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDbIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa/rWywiPE8qdLoEE+s6lNh9z3+qVROEfg+ZaleP5RGbgZA4CfUv4JFS1
Itd7yiJF/O3/SqExNG86F8bsQ0vKvs4cmaly9NL3jxdXyuY+m+U94SwXoS2yRDcw
JaowpV63c8kuCG41O6xVQVuuF01h4evvUDuanQguyUmZSR9gUBSfbVsMSRVr9Ctn
ce3M2+M6R6Ciu/IujmIDr9WS1bMQbh6g0ISgGxfQsKvGfu08/1P1KbM4d74OqQR3
xgHEssadUl1owUtqTGw9gDVJxQkb8OF6TMN+uHFqagNe90LTcI0QnOmeQUFee8AD
B4wEWDcd9ehUqcwL+rfqiV+lXw53hA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:26 2025 by rpki-client