Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e23165f-3939-33fc-a299-491a8db19b85.roa
File: 3e23165f-3939-33fc-a299-491a8db19b85.roa (raw, json)
Hash identifier: DUV87LbdAOr33NYSm6mqVVog1P4ahd+WzO8YJnEnh0s=
Subject key identifier: B4:33:CB:A8:B6:B0:E4:F9:7E:64:D3:72:D3:59:45:A5:3B:DD:09:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F62A95BDB4E6F2CD533ABEE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e23165f-3939-33fc-a299-491a8db19b85.roa
Signing time: Tue 27 Sep 2022 17:27:07 +0000
ROA not before: Tue 27 Sep 2022 17:27:07 +0000
ROA not after: Tue 01 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 166.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:62:a9:5b:db:4e:6f:2c:d5:33:ab:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 27 17:27:07 2022 GMT
Not After : Nov 1 04:00:00 2022 GMT
Subject: CN=e0b0468a-1cf7-499d-a86e-80f915e35d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:c9:a5:0c:bc:2d:82:4d:21:4f:3c:dc:94:
bb:c8:ea:05:66:53:56:7a:bf:0e:4d:39:8d:1b:2f:
a3:84:b0:0c:94:bf:08:7f:63:a2:ed:2e:42:04:2b:
aa:e3:e1:1e:2a:5b:87:10:61:83:55:08:b3:c4:85:
e2:f9:1d:df:66:1a:48:21:cb:29:2a:d9:a7:ec:51:
e6:93:cd:dc:21:87:08:1a:d9:b7:7b:f8:07:7e:0b:
f3:d9:49:f0:16:90:d3:3a:54:66:5d:e4:53:2c:d7:
3a:bf:00:e7:ee:8d:b3:3a:ef:f3:50:b8:42:e3:bc:
eb:16:f2:ff:1c:b2:e5:56:33:45:1e:c8:26:83:83:
98:f3:28:19:87:b5:25:65:63:95:62:75:ec:11:f4:
3c:eb:46:06:ba:08:36:bc:2d:7d:f8:ff:2b:3d:53:
7d:bc:09:83:bf:85:cf:d2:c7:9c:28:ca:a3:22:01:
35:9c:d4:5b:b7:c4:87:0c:54:e1:6e:53:fa:12:94:
4d:47:80:ea:6c:c5:82:b0:4f:70:77:26:05:5f:f6:
8c:88:1f:86:cc:00:6a:e1:0d:de:41:83:d9:b8:64:
51:b3:5a:7d:99:91:8b:3a:ef:da:db:05:f6:a3:16:
f8:79:fc:78:9f:8b:21:84:88:e5:7a:26:11:89:42:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:33:CB:A8:B6:B0:E4:F9:7E:64:D3:72:D3:59:45:A5:3B:DD:09:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e23165f-3939-33fc-a299-491a8db19b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
166.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a6:b3:0f:6c:3b:8c:a5:96:a1:94:0a:96:48:cf:e8:78:3b:
b6:36:d7:9c:71:48:57:57:bc:d0:3a:5e:41:70:ac:a7:52:67:
8f:28:f7:a7:b2:d1:81:89:ca:22:0f:a8:ff:c6:47:b0:cc:2c:
6f:5d:de:77:ee:0a:7a:63:aa:f5:23:e4:65:aa:92:00:79:1d:
3c:67:e7:ba:2a:23:67:94:97:62:e5:79:6b:c5:d8:27:af:b0:
15:01:b6:0e:e9:a8:00:22:08:df:b1:2d:84:ea:20:23:d0:cd:
72:8c:27:f4:4e:02:05:f2:44:3f:c8:4c:35:e6:2c:ff:fe:cc:
14:1a:ee:3f:27:79:1c:30:37:f8:89:3f:93:f2:04:c8:ec:31:
ca:93:14:14:26:93:ba:7c:0d:3e:c0:2f:b2:c8:ec:14:af:57:
4b:0a:00:2e:16:ee:2a:df:86:ae:d7:05:83:05:dd:cd:f8:f0:
9d:c1:7d:81:61:35:d4:99:6a:e4:10:8a:3a:fb:10:48:5a:bd:
15:40:f8:0c:65:2e:82:2a:dc:c7:f6:d9:fd:7f:8e:24:ad:50:
c9:2d:d6:13:0b:ee:cd:64:e7:e8:9b:df:d9:f7:fc:1f:65:66:
de:8e:7f:20:07:f3:e4:28:c1:40:d5:1e:29:07:44:fa:99:a4:
3c:85:13:a0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9iqVvbTm8s1TOr7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyNzE3MjcwN1oXDTIyMTEwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTBiMDQ2OGEtMWNmNy00OTlkLWE4NmUtODBmOTE1ZTM1ZDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWjJpQy8LYJNIU883JS7yOoFZlNWer8OTTmN
Gy+jhLAMlL8If2Oi7S5CBCuq4+EeKluHEGGDVQizxIXi+R3fZhpIIcspKtmn7FHm
k83cIYcIGtm3e/gHfgvz2UnwFpDTOlRmXeRTLNc6vwDn7o2zOu/zULhC47zrFvL/
HLLlVjNFHsgmg4OY8ygZh7UlZWOVYnXsEfQ860YGugg2vC19+P8rPVN9vAmDv4XP
0secKMqjIgE1nNRbt8SHDFThblP6EpRNR4DqbMWCsE9wdyYFX/aMiB+GzABq4Q3e
QYPZuGRRs1p9mZGLOu/a2wX2oxb4efx4n4shhIjleiYRiULCSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLQzy6i2sOT5fmTTctNZRaU73Ql9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2UyMzE2NWYtMzkzOS0z
M2ZjLWEyOTktNDkxYThkYjE5Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApnUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnqazD2w7jKWWoZQKlkjP6Hg7tjbXnHFIV1e80DpeQXCsp1Jnjyj3p7LR
gYnKIg+o/8ZHsMwsb13ed+4KemOq9SPkZaqSAHkdPGfnuiojZ5SXYuV5a8XYJ6+w
FQG2DumoACII37EthOogI9DNcown9E4CBfJEP8hMNeYs//7MFBruPyd5HDA3+Ik/
k/IEyOwxypMUFCaTunwNPsAvssjsFK9XSwoALhbuKt+GrtcFgwXdzfjwncF9gWE1
1Jlq5BCKOvsQSFq9FUD4DGUugircx/bZ/X+OJK1QyS3WEwvuzWTn6Jvf2ff8H2Vm
3o5/IAfz5CjBQNUeKQdE+pmkPIUToA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:48 2025 by rpki-client