Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aac8b4b-1a6d-3e8d-a1c8-2155f3ea1b72.roa
File: 2aac8b4b-1a6d-3e8d-a1c8-2155f3ea1b72.roa (raw, json)
Hash identifier: OCgpXiAFbGU4YU6yR+THyTOuRn2/0Ssmz6FoJyTYSJU=
Subject key identifier: A9:6F:AC:CC:A0:D6:64:FB:BA:1B:15:93:8B:BE:8B:95:45:31:33:55
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB01E2C8E83AE8256A2B9A260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aac8b4b-1a6d-3e8d-a1c8-2155f3ea1b72.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 167.243.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b0:1e:2c:8e:83:ae:82:56:a2:b9:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=246bb500-29fb-419a-8b2c-bdfb89f1adbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:af:d0:06:c2:ed:d7:39:e4:a3:cd:74:eb:
49:05:98:eb:54:b7:20:5a:c8:9d:44:3a:6c:b5:c1:
74:cb:67:86:1a:d4:b1:9f:c2:af:53:b4:85:91:ff:
a4:cc:c2:74:70:cf:6c:b5:3d:54:91:ba:b2:65:c3:
a7:89:41:2b:48:28:ec:82:f8:3c:7b:ff:74:c7:0e:
45:ec:c5:84:a9:cd:cf:7e:29:6c:04:66:bc:a5:94:
7f:29:fd:e3:bd:2f:93:13:67:11:30:3f:af:54:5c:
43:52:89:00:b8:8b:82:a5:34:06:8f:c0:fc:4f:84:
80:49:d5:4c:04:e2:92:31:ab:b2:5f:b3:06:05:3a:
c5:3a:7e:41:de:59:4b:4a:dc:80:68:c7:29:5e:66:
40:bc:ae:3d:80:71:e7:6a:60:cb:e8:65:e1:9b:39:
78:04:e7:14:1f:74:ab:fb:52:02:27:ef:b0:f3:b8:
b4:b1:07:11:4e:1d:b0:f2:8d:e2:8e:b0:ff:61:12:
6c:72:09:a4:dc:17:1a:c3:ca:16:3e:89:06:f8:5e:
b9:f0:44:87:ed:1b:db:c1:89:60:66:d2:83:fb:8c:
94:7e:fc:e3:84:09:14:52:8b:5f:64:8f:a1:85:71:
52:b3:97:c8:01:84:5c:fc:6d:ac:78:d6:25:57:58:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:AC:CC:A0:D6:64:FB:BA:1B:15:93:8B:BE:8B:95:45:31:33:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aac8b4b-1a6d-3e8d-a1c8-2155f3ea1b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.243.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:4c:9c:e1:1f:20:bc:96:0a:81:28:b0:40:71:2f:08:3a:f2:
02:5a:e0:96:07:af:e1:4b:48:c0:00:f7:c7:0f:1a:f5:d3:e8:
30:ca:da:2f:2f:99:95:3c:c4:b1:85:ad:84:c7:9f:a1:42:ab:
72:36:3b:07:31:54:e1:fb:f2:9d:31:bd:78:2b:fb:83:a2:c2:
b9:93:7f:db:29:cc:53:dc:b6:d1:cf:4d:23:55:0b:45:8e:3e:
32:4b:ef:47:e7:6a:54:16:d2:16:a7:ae:86:ab:d4:ea:ea:a9:
6c:6b:ff:10:17:b1:41:af:ef:2c:d6:61:42:c5:42:b0:4b:e7:
76:70:ce:ef:63:7a:9e:75:3b:31:e2:bc:bc:09:77:22:52:6c:
23:9d:ef:c0:4f:ad:99:fb:2c:c4:bd:a2:d4:59:28:f5:65:2e:
f7:f7:a4:54:74:67:07:d1:1e:7e:0d:30:d9:3e:24:78:81:3f:
27:fa:89:56:10:5d:be:ed:99:99:6e:6e:3e:f4:13:fd:87:f9:
de:2f:de:cd:f3:36:3c:f5:c4:8d:af:9b:0a:e2:62:21:bd:3d:
fb:75:2f:4c:d8:05:a8:88:db:a3:75:19:06:0c:f9:87:dc:b2:
62:c4:35:31:5b:b5:7e:2b:36:7c:b8:84:1a:15:da:2f:07:80:
8c:f1:46:9e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+wHiyOg66CVqK5omAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
MjQ2YmI1MDAtMjlmYi00MTlhLThiMmMtYmRmYjg5ZjFhZGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG6v0AbC7dc55KPNdOtJBZjrVLcgWsidRDps
tcF0y2eGGtSxn8KvU7SFkf+kzMJ0cM9stT1UkbqyZcOniUErSCjsgvg8e/90xw5F
7MWEqc3PfilsBGa8pZR/Kf3jvS+TE2cRMD+vVFxDUokAuIuCpTQGj8D8T4SASdVM
BOKSMauyX7MGBTrFOn5B3llLStyAaMcpXmZAvK49gHHnamDL6GXhmzl4BOcUH3Sr
+1ICJ++w87i0sQcRTh2w8o3ijrD/YRJscgmk3Bcaw8oWPokG+F658ESH7RvbwYlg
ZtKD+4yUfvzjhAkUUotfZI+hhXFSs5fIAYRc/G2seNYlV1j5xwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKlvrMyg1mT7uhsVk4u+i5VFMTNVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmFhYzhiNGItMWE2ZC0z
ZThkLWExYzgtMjE1NWYzZWExYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgEyc4R8gvJYKgSiwQHEvCDryAlrglgev4UtIwAD3xw8a9dPoMMraLy+Z
lTzEsYWthMefoUKrcjY7BzFU4fvynTG9eCv7g6LCuZN/2ynMU9y20c9NI1ULRY4+
MkvvR+dqVBbSFqeuhqvU6uqpbGv/EBexQa/vLNZhQsVCsEvndnDO72N6nnU7MeK8
vAl3IlJsI53vwE+tmfssxL2i1Fko9WUu9/ekVHRnB9Eefg0w2T4keIE/J/qJVhBd
vu2ZmW5uPvQT/Yf53i/ezfM2PPXEja+bCuJiIb09+3UvTNgFqIjbo3UZBgz5h9yy
YsQ1MVu1fis2fLiEGhXaLweAjPFGng==
-----END CERTIFICATE-----
Generated at Tue Apr 15 12:28:34 2025 by rpki-client