Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41f87fef-004f-34cf-9430-522665299e0d.roa
File: 41f87fef-004f-34cf-9430-522665299e0d.roa (raw, json)
Hash identifier: AgaaDlYiTlAlNzmEtkw7dCyXOHndxrs50VL5e+c3pSw=
Subject key identifier: D3:A8:4F:B8:D6:B1:CA:7F:86:FC:62:10:AD:94:CD:54:80:1D:A0:46
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EA01579AAD4389A3F833D2080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41f87fef-004f-34cf-9430-522665299e0d.roa
Signing time: Tue 19 Jul 2022 12:00:00 +0000
ROA not before: Tue 19 Jul 2022 12:00:00 +0000
ROA not after: Wed 24 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a0:15:79:aa:d4:38:9a:3f:83:3d:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 19 12:00:00 2022 GMT
Not After : Aug 24 04:00:00 2022 GMT
Subject: CN=b86bd9b9-4c7f-43ad-8237-05f68567d633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:83:02:5c:da:2f:92:83:38:2d:78:35:05:
66:ef:50:ff:d2:8e:b3:c3:d4:cd:49:77:1d:c7:24:
9a:6f:de:44:23:db:99:1f:bc:9c:bc:c0:f7:e3:3c:
26:fb:0c:c2:0c:40:27:1d:d3:2a:e3:d8:99:8e:af:
71:07:29:c7:54:ac:9d:2a:40:52:85:4d:56:ba:54:
ca:3e:2f:0f:6e:37:ab:b5:f6:a2:d6:66:a1:45:44:
e7:31:c0:49:8a:c7:2b:1f:94:ba:08:71:1a:ed:95:
4e:bb:91:73:ac:49:f3:90:5f:ab:7f:d3:93:e0:db:
0b:be:88:fe:fd:88:10:fc:01:fe:b2:f8:f7:c5:d8:
80:98:61:d4:5a:6f:0e:3a:d1:d6:cf:85:54:a3:f6:
7d:47:21:90:3e:46:de:fe:92:9e:17:08:1f:df:6c:
57:ae:45:6a:8f:85:0d:b5:97:66:72:2e:5e:aa:e2:
a1:10:e1:bf:68:55:b0:93:af:cd:f8:35:b6:ed:35:
6f:bc:6e:ea:17:78:7b:27:d7:86:a4:13:b0:60:a9:
d2:71:42:4d:e7:aa:25:9f:7c:e1:05:be:0b:51:d9:
ee:4c:65:f4:5c:78:67:c5:de:bc:52:fa:9f:19:29:
dd:42:66:68:cf:ea:b8:39:1f:f7:78:8b:e4:de:b5:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:4F:B8:D6:B1:CA:7F:86:FC:62:10:AD:94:CD:54:80:1D:A0:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41f87fef-004f-34cf-9430-522665299e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:d3:52:ce:06:e5:50:56:aa:68:1d:32:af:48:4a:47:92:15:
f1:40:53:b7:99:33:ff:54:e3:3d:36:bd:60:cb:44:b0:07:f5:
da:69:ea:a8:d1:30:31:c2:dd:9b:c1:0a:84:e9:cb:cd:bd:76:
8b:33:e9:e5:c4:ff:94:51:d0:03:05:53:f8:25:cd:57:73:e9:
c6:12:e9:cb:7d:35:ca:fd:84:21:20:f1:25:18:30:a5:e8:2b:
d8:c6:24:72:80:1e:58:0f:df:60:d1:cf:d4:3f:f1:c6:c9:e1:
fd:32:95:b5:b3:45:a2:5f:6e:fe:62:33:65:8d:b3:97:91:d5:
62:ff:b7:b7:69:ee:23:7c:ae:dc:df:7c:cb:96:45:bc:25:ab:
fd:c7:8c:a3:3b:dc:c8:5e:fe:d7:97:40:3d:04:4e:a6:73:d8:
70:7e:93:27:eb:4c:fc:56:a8:35:9b:bc:f0:a5:0f:5f:b3:22:
fd:71:a4:2f:a5:be:af:d7:62:1d:28:20:f3:08:9f:fa:58:dc:
04:e1:46:03:cf:fb:7a:04:f8:dd:f7:b7:49:23:f2:a0:25:24:
ec:83:30:40:6a:43:9b:9f:43:e3:3f:cf:2f:2e:cd:98:e3:00:
52:07:e9:e2:58:dc:f1:35:f1:50:25:74:a4:8c:2c:2c:17:69:
cd:97:59:28
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6gFXmq1DiaP4M9IIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxOTEyMDAwMFoXDTIyMDgyNDA0MDAwMFowLzEtMCsGA1UEAxMk
Yjg2YmQ5YjktNGM3Zi00M2FkLTgyMzctMDVmNjg1NjdkNjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUqDAlzaL5KDOC14NQVm71D/0o6zw9TNSXcd
xySab95EI9uZH7ycvMD34zwm+wzCDEAnHdMq49iZjq9xBynHVKydKkBShU1WulTK
Pi8Pbjertfai1mahRUTnMcBJiscrH5S6CHEa7ZVOu5FzrEnzkF+rf9OT4NsLvoj+
/YgQ/AH+svj3xdiAmGHUWm8OOtHWz4VUo/Z9RyGQPkbe/pKeFwgf32xXrkVqj4UN
tZdmci5equKhEOG/aFWwk6/N+DW27TVvvG7qF3h7J9eGpBOwYKnScUJN56oln3zh
Bb4LUdnuTGX0XHhnxd68UvqfGSndQmZoz+q4OR/3eIvk3rUs6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNOoT7jWscp/hvxiEK2UzVSAHaBGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDFmODdmZWYtMDA0Zi0z
NGNmLTk0MzAtNTIyNjY1Mjk5ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnwswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqNNSzgblUFaqaB0yr0hKR5IV8UBTt5kz/1TjPTa9YMtEsAf12mnqqNEw
McLdm8EKhOnLzb12izPp5cT/lFHQAwVT+CXNV3PpxhLpy301yv2EISDxJRgwpegr
2MYkcoAeWA/fYNHP1D/xxsnh/TKVtbNFol9u/mIzZY2zl5HVYv+3t2nuI3yu3N98
y5ZFvCWr/ceMozvcyF7+15dAPQROpnPYcH6TJ+tM/FaoNZu88KUPX7Mi/XGkL6W+
r9diHSgg8wif+ljcBOFGA8/7egT43fe3SSPyoCUk7IMwQGpDm59D4z/PLy7NmOMA
Ugfp4ljc8TXxUCV0pIwsLBdpzZdZKA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:31 2025 by rpki-client