Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aa59d25-e3af-335a-ab1c-e77a4213657a.roa
File: 2aa59d25-e3af-335a-ab1c-e77a4213657a.roa (raw, json)
Hash identifier: diCz/PmyDUIMYNyOr5y5swOQqLcB38d7S5CRkI8Z+lc=
Subject key identifier: 9B:AD:5C:F1:FA:05:2F:B7:E7:1D:9B:3C:5A:8B:0F:C3:2E:9F:EF:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B5F964CA2A02FE5538293180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aa59d25-e3af-335a-ab1c-e77a4213657a.roa
Signing time: Thu 26 Jan 2023 15:12:07 +0000
ROA not before: Thu 26 Jan 2023 15:12:07 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 70.240.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b5:f9:64:ca:2a:02:fe:55:38:29:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 26 15:12:07 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=92d955d4-7712-47e5-8440-417fbab09ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:57:ac:6e:d1:ae:f5:a0:91:d5:23:24:4f:
c7:28:7f:8b:e8:d8:92:71:fd:ea:80:17:ba:54:53:
29:68:6e:0e:0a:0b:34:7b:d8:63:be:4b:03:7b:2c:
78:bf:0e:1c:2c:b1:f2:d5:23:56:d7:8b:00:2c:7c:
64:0a:56:82:0f:4a:31:06:6f:c8:e4:11:2a:1f:38:
dd:cd:48:c0:c0:85:eb:e7:3e:91:84:74:ac:fe:e2:
ba:7f:e3:80:38:cf:60:f5:66:49:dd:ad:32:08:b4:
a8:5a:1a:9c:29:88:13:f7:fb:2f:e2:0a:08:1b:a8:
31:4c:85:86:9d:02:b6:bf:15:7f:40:7f:01:1d:82:
63:36:a4:04:8e:91:22:c3:a1:d7:9a:a0:b7:61:43:
c1:94:44:5f:5e:2e:90:1b:c9:5f:73:50:92:a0:d6:
d6:5f:4b:1f:0f:92:7d:06:ca:aa:e9:80:b2:99:d5:
99:1a:e4:56:a8:32:5d:15:fc:d2:0b:10:88:2e:7e:
a2:33:7c:fd:c6:17:08:93:cd:86:fe:e3:5b:41:73:
21:26:6d:8b:e7:c4:22:b0:0e:10:2b:03:04:16:12:
16:0e:d7:0c:32:bc:4e:3f:26:31:df:89:73:98:ae:
79:da:66:46:4c:45:51:00:88:7b:fe:1b:32:2e:59:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AD:5C:F1:FA:05:2F:B7:E7:1D:9B:3C:5A:8B:0F:C3:2E:9F:EF:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aa59d25-e3af-335a-ab1c-e77a4213657a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.240.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:8a:8b:99:17:40:9a:fb:8f:69:7d:84:ae:a1:29:25:7c:10:
ac:0c:0f:69:01:18:20:84:e4:38:37:68:ce:0e:29:c7:fc:a3:
ee:c1:fd:d4:da:71:1a:7b:14:2d:27:f0:55:77:69:99:7c:71:
40:ad:dd:e4:71:72:59:84:25:7b:ec:f3:fd:7c:64:ef:c6:8a:
f0:07:96:e7:55:f9:61:83:54:35:4d:0d:84:b6:e0:7e:58:c8:
2d:1b:da:7d:35:05:68:82:89:b1:e1:a0:c0:8c:2c:f2:80:fc:
09:23:23:65:94:f4:26:c5:2e:85:c9:d2:4c:78:89:3f:98:66:
db:23:85:10:8a:5c:8d:24:f0:31:78:47:62:5a:ee:d5:2e:38:
1e:f5:89:9d:ca:0a:b7:60:af:b9:a7:21:16:18:66:64:13:7c:
5b:b3:b6:51:26:bb:55:db:86:6d:2e:da:59:85:17:af:34:08:
3d:01:d5:a8:17:fa:a1:a0:69:30:9b:83:3d:4f:5e:83:e9:e0:
79:14:dd:90:0d:c0:c8:56:ae:8f:e9:cf:d6:12:50:10:b3:9b:
4d:94:50:88:5b:61:3c:b4:b7:e0:62:f8:76:2e:1e:d6:96:a3:
5e:52:fb:fc:7c:1c:9c:93:12:42:8d:8f:29:18:2e:5e:5a:83:
ba:a0:2a:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC1+WTKKgL+VTgpMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNjE1MTIwN1oXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
OTJkOTU1ZDQtNzcxMi00N2U1LTg0NDAtNDE3ZmJhYjA5ZWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXZXrG7RrvWgkdUjJE/HKH+L6NiScf3qgBe6
VFMpaG4OCgs0e9hjvksDeyx4vw4cLLHy1SNW14sALHxkClaCD0oxBm/I5BEqHzjd
zUjAwIXr5z6RhHSs/uK6f+OAOM9g9WZJ3a0yCLSoWhqcKYgT9/sv4goIG6gxTIWG
nQK2vxV/QH8BHYJjNqQEjpEiw6HXmqC3YUPBlERfXi6QG8lfc1CSoNbWX0sfD5J9
Bsqq6YCymdWZGuRWqDJdFfzSCxCILn6iM3z9xhcIk82G/uNbQXMhJm2L58QisA4Q
KwMEFhIWDtcMMrxOPyYx34lzmK552mZGTEVRAIh7/hsyLlmo3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJutXPH6BS+35x2bPFqLD8Mun++6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmFhNTlkMjUtZTNhZi0z
MzVhLWFiMWMtZTc3YTQyMTM2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRvBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACKi5kXQJr7j2l9hK6hKSV8EKwMD2kBGCCE5Dg3aM4OKcf8o+7B/dTa
cRp7FC0n8FV3aZl8cUCt3eRxclmEJXvs8/18ZO/GivAHludV+WGDVDVNDYS24H5Y
yC0b2n01BWiCibHhoMCMLPKA/AkjI2WU9CbFLoXJ0kx4iT+YZtsjhRCKXI0k8DF4
R2Ja7tUuOB71iZ3KCrdgr7mnIRYYZmQTfFuztlEmu1Xbhm0u2lmFF680CD0B1agX
+qGgaTCbgz1PXoPp4HkU3ZANwMhWro/pz9YSUBCzm02UUIhbYTy0t+Bi+HYuHtaW
o15S+/x8HJyTEkKNjykYLl5ag7qgKpI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:16 2025 by rpki-client