Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28f985ea-03e5-3efa-a7e4-37892dd9bba1.roa
File: 28f985ea-03e5-3efa-a7e4-37892dd9bba1.roa (raw, json)
Hash identifier: iazYR3YTQD1IHJMnvcbUipgYpYvLqp/okfND/D8Ykrc=
Subject key identifier: A5:5B:4C:78:ED:F4:34:77:B5:CC:52:94:18:99:88:08:11:CC:0E:EE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE1320436C7964D745D300D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28f985ea-03e5-3efa-a7e4-37892dd9bba1.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 70.131.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e1:32:04:36:c7:96:4d:74:5d:30:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=4572ec8c-66f8-489b-83cd-283f6eeae137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:77:ce:11:ce:fa:85:27:df:5b:e5:e8:8e:
56:b1:90:5a:77:62:ba:41:9f:5b:14:81:f2:98:2b:
44:74:59:76:cc:2a:67:c8:84:60:2f:c3:21:60:cb:
87:ca:71:dc:43:e0:bf:e8:47:9a:7e:63:a1:81:75:
f6:cb:45:16:9a:bd:1a:cd:1a:95:85:76:a7:28:39:
22:40:a4:8c:d3:bb:89:88:b9:3d:29:41:f6:10:e1:
8d:70:9d:82:bf:a3:72:e9:fb:ae:0a:14:fe:4e:db:
88:66:06:aa:83:cd:fb:12:af:a2:09:88:17:90:7d:
85:50:70:d2:89:8b:7f:a1:fe:81:48:a1:08:46:77:
d2:11:a1:c4:8a:c6:bb:67:3a:41:be:1e:de:8a:37:
9a:21:2e:70:20:bb:6d:38:75:30:ef:10:e6:b0:5d:
e2:a3:28:44:4d:87:33:7a:0e:d5:c9:0c:5b:ba:87:
5e:16:52:d9:ed:f6:38:37:65:29:ec:c9:a4:5c:a2:
04:4a:4f:c7:54:24:da:08:9d:06:70:f0:b1:e1:db:
d5:a6:1c:27:a8:fd:b6:de:01:60:51:d4:80:06:4c:
42:cd:ae:1f:1f:1d:a7:a5:f1:93:eb:88:34:d5:7a:
63:ea:87:4a:88:b9:86:f7:40:70:3e:25:06:9f:c9:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:4C:78:ED:F4:34:77:B5:CC:52:94:18:99:88:08:11:CC:0E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28f985ea-03e5-3efa-a7e4-37892dd9bba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.131.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:fa:86:7f:37:52:f4:10:43:ca:c9:c9:af:c3:2b:95:4e:41:
fe:04:55:37:2e:83:fd:2c:c9:0f:c3:6d:14:d1:15:66:04:04:
80:90:ff:6b:87:08:ee:5d:a8:d7:cf:b6:d7:54:d5:27:5a:81:
f2:b5:ad:b4:fd:72:21:d5:71:db:5e:f5:f9:59:ca:c8:46:04:
f6:19:53:30:ee:db:c7:2e:a9:57:3f:4d:ab:ec:a2:55:ac:5e:
31:92:48:7b:a2:7d:4a:b3:b7:72:02:e4:c4:7b:d7:ff:2d:44:
74:69:c3:62:f5:dd:95:37:0a:b9:e0:63:f3:25:c9:42:90:9d:
e0:5e:d4:61:1c:91:b1:f6:3d:58:09:93:eb:d4:8f:c7:d5:48:
62:42:5a:cb:c5:0f:57:df:f8:47:39:1e:29:ec:96:0c:75:ae:
01:88:86:37:15:42:ff:45:ac:a1:22:50:9d:d3:60:06:0a:67:
7d:a1:3b:14:d7:6a:11:73:3e:38:91:da:5d:d8:cf:db:4b:8c:
f8:59:e4:31:a6:ec:55:d1:cf:35:55:20:81:d2:c6:8b:af:39:
f3:6a:9b:89:2e:6d:b7:6c:1f:b1:77:e8:c0:1f:96:17:82:f1:
b5:4d:34:25:28:e9:24:e7:b5:29:bc:7c:ff:23:fb:e5:65:76:
a6:23:00:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7hMgQ2x5ZNdF0wDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMTEyMDAwMFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDU3MmVjOGMtNjZmOC00ODliLTgzY2QtMjgzZjZlZWFlMTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A13zhHO+oUn31vl6I5WsZBad2K6QZ9bFIHy
mCtEdFl2zCpnyIRgL8MhYMuHynHcQ+C/6EeafmOhgXX2y0UWmr0azRqVhXanKDki
QKSM07uJiLk9KUH2EOGNcJ2Cv6Ny6fuuChT+TtuIZgaqg837Eq+iCYgXkH2FUHDS
iYt/of6BSKEIRnfSEaHEisa7ZzpBvh7eijeaIS5wILttOHUw7xDmsF3ioyhETYcz
eg7VyQxbuodeFlLZ7fY4N2Up7MmkXKIESk/HVCTaCJ0GcPCx4dvVphwnqP223gFg
UdSABkxCza4fHx2npfGT64g01Xpj6odKiLmG90BwPiUGn8kX7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVbTHjt9DR3tcxSlBiZiAgRzA7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjhmOTg1ZWEtMDNlNS0z
ZWZhLWE3ZTQtMzc4OTJkZDliYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRoPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEj6hn83UvQQQ8rJya/DK5VOQf4EVTcug/0syQ/DbRTRFWYEBICQ/2uH
CO5dqNfPttdU1SdagfK1rbT9ciHVcdte9flZyshGBPYZUzDu28cuqVc/TavsolWs
XjGSSHuifUqzt3IC5MR71/8tRHRpw2L13ZU3CrngY/MlyUKQneBe1GEckbH2PVgJ
k+vUj8fVSGJCWsvFD1ff+Ec5Hinslgx1rgGIhjcVQv9FrKEiUJ3TYAYKZ32hOxTX
ahFzPjiR2l3Yz9tLjPhZ5DGm7FXRzzVVIIHSxouvOfNqm4kubbdsH7F36MAflheC
8bVNNCUo6STntSm8fP8j++VldqYjAHw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:10 2025 by rpki-client