Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40e7b876-efd1-3c56-9032-9c38b56912be.roa
File: 40e7b876-efd1-3c56-9032-9c38b56912be.roa (raw, json)
Hash identifier: 32XUvC1CZbvFeeB7OF4VnvNNgqtfrXxVx/5wor+J9x8=
Subject key identifier: 49:89:E1:7D:48:1D:07:17:15:4F:5F:A1:93:A1:7C:A9:19:B1:FA:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAAEF536773550686661DDA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40e7b876-efd1-3c56-9032-9c38b56912be.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 72.44.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:ef:53:67:73:55:06:86:66:1d:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=f0ec98cc-7de3-4866-b7da-77c4d04b70b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:8a:df:9a:f1:5e:f8:74:f8:4e:5e:d1:ae:
c3:3d:76:a3:bc:58:a5:ee:38:eb:66:76:6e:b8:b9:
86:98:14:55:5e:2b:49:e7:2c:2f:f3:e2:56:75:35:
21:e0:41:22:c4:de:57:ae:4a:0f:2b:5e:ce:ec:a5:
c7:f4:5a:c8:d2:28:ab:50:04:01:0e:86:d8:2a:a2:
a3:cb:65:07:c5:90:f5:5f:20:5a:be:0d:f2:7b:1b:
23:a6:5e:63:63:c9:79:9f:48:39:a7:cc:98:13:62:
4c:f7:20:c9:37:de:41:d5:66:04:be:e6:87:e6:b0:
54:7c:da:68:d9:c9:17:77:88:2c:f0:6c:9d:64:b0:
11:c0:dd:61:af:22:96:52:9c:86:03:ac:a8:f6:49:
8a:7d:25:96:0d:75:fa:d2:1e:65:e8:91:6a:0e:19:
3d:3d:a1:de:fb:11:a9:9a:b7:3c:f3:a1:8c:69:3c:
51:10:bf:50:71:c4:f9:45:f4:0d:63:6e:16:af:03:
f9:70:dc:e0:33:3c:ff:37:6e:fd:d5:a9:16:7a:56:
e3:b0:67:12:5a:42:a8:80:34:0f:24:ed:c0:03:51:
6f:73:2b:68:8b:c2:47:79:38:85:c5:22:24:b5:a2:
a4:23:78:ab:92:63:f0:30:14:b2:79:b4:63:64:aa:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:E1:7D:48:1D:07:17:15:4F:5F:A1:93:A1:7C:A9:19:B1:FA:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40e7b876-efd1-3c56-9032-9c38b56912be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3a:9b:18:70:c6:5e:43:2c:9c:83:a0:a8:9f:0b:06:80:da:
84:d0:a7:4a:a9:84:91:32:60:78:1b:61:19:f4:aa:aa:58:83:
f3:24:40:0e:15:f8:07:a6:04:ff:9e:30:6b:0e:74:b5:5a:4e:
f1:2e:a6:2c:17:57:2f:dc:66:65:cc:cf:7c:32:69:e4:4c:68:
c9:37:d3:ed:19:04:1c:79:bf:7f:e9:0b:dc:03:26:be:19:4e:
b7:84:05:91:89:ca:43:d8:08:e4:0d:c6:45:6c:6c:6d:3c:a8:
7f:fb:8c:6a:f2:a0:b4:1b:9a:db:8a:9a:28:41:ac:d3:12:1d:
68:dd:3a:d7:c5:0b:4e:57:18:5f:fd:c9:41:02:54:66:fa:04:
2b:b2:85:b8:33:0d:ec:8a:39:54:0a:57:6a:11:f6:73:77:0d:
59:b4:31:ca:ba:0e:6a:82:21:d4:fd:b1:a2:76:22:dd:1b:93:
8f:c0:25:2a:0f:62:d5:3e:47:06:08:0b:c4:42:83:35:a0:ce:
3a:1c:86:b1:bb:9f:3b:7f:91:fb:51:31:37:4b:1f:a9:b9:3d:
e9:8c:0a:44:51:55:3c:05:5f:f3:90:bb:09:35:af:e1:6a:10:
1a:0a:c8:24:6c:27:03:59:df:bd:b1:82:ba:2c:9a:a9:6a:17:
5d:b2:3b:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2q71Nnc1UGhmYd2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMjEyMDAwMFoXDTIyMDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZjBlYzk4Y2MtN2RlMy00ODY2LWI3ZGEtNzdjNGQwNGI3MGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHuK35rxXvh0+E5e0a7DPXajvFil7jjrZnZu
uLmGmBRVXitJ5ywv8+JWdTUh4EEixN5XrkoPK17O7KXH9FrI0iirUAQBDobYKqKj
y2UHxZD1XyBavg3yexsjpl5jY8l5n0g5p8yYE2JM9yDJN95B1WYEvuaH5rBUfNpo
2ckXd4gs8GydZLARwN1hryKWUpyGA6yo9kmKfSWWDXX60h5l6JFqDhk9PaHe+xGp
mrc886GMaTxREL9QccT5RfQNY24WrwP5cNzgMzz/N2791akWelbjsGcSWkKogDQP
JO3AA1Fvcytoi8JHeTiFxSIktaKkI3irkmPwMBSyebRjZKoVWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmJ4X1IHQcXFU9foZOhfKkZsfqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDBlN2I4NzYtZWZkMS0z
YzU2LTkwMzItOWMzOGI1NjkxMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSCwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGs6mxhwxl5DLJyDoKifCwaA2oTQp0qphJEyYHgbYRn0qqpYg/MkQA4V
+AemBP+eMGsOdLVaTvEupiwXVy/cZmXMz3wyaeRMaMk30+0ZBBx5v3/pC9wDJr4Z
TreEBZGJykPYCOQNxkVsbG08qH/7jGryoLQbmtuKmihBrNMSHWjdOtfFC05XGF/9
yUECVGb6BCuyhbgzDeyKOVQKV2oR9nN3DVm0Mcq6DmqCIdT9saJ2It0bk4/AJSoP
YtU+RwYIC8RCgzWgzjochrG7nzt/kftRMTdLH6m5PemMCkRRVTwFX/OQuwk1r+Fq
EBoKyCRsJwNZ372xgrosmqlqF12yOz8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:31 2025 by rpki-client