Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42031395-ad0d-3902-bf57-d31f8839fcdd.roa
File: 42031395-ad0d-3902-bf57-d31f8839fcdd.roa (raw, json)
Hash identifier: 4vNSEbzvcXFAJzTE3cwLH6F5VjJFCJsd/wiltvMjjBI=
Subject key identifier: FD:DC:E1:D6:A4:DA:A2:74:D9:C7:AB:6B:5B:3A:96:E4:CC:C3:19:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DCCE4AEF5675E3F83504F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42031395-ad0d-3902-bf57-d31f8839fcdd.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:cc:e4:ae:f5:67:5e:3f:83:50:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=abd6a213-acb3-4dde-8dcf-a12653ae5c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:be:22:7f:75:68:83:7a:9c:5e:df:9e:2f:
27:27:95:05:e1:45:60:66:8c:cd:e6:61:bb:c2:fc:
0b:be:ed:c2:12:fb:fe:c4:58:82:63:5c:06:35:19:
1d:0e:3e:d3:b3:d9:bd:56:30:66:0c:96:9b:c9:76:
fa:2c:bd:e5:c0:4f:c3:2c:a5:9f:96:44:d1:57:aa:
9b:60:de:91:d3:e9:ee:60:49:b7:75:21:b4:c8:96:
8e:46:01:75:a6:a2:df:72:25:37:b6:b5:3f:85:64:
27:ad:e1:c1:c6:79:1b:c6:63:64:83:9d:76:fd:7a:
85:78:bc:3b:1e:8f:95:79:39:9e:dd:30:0e:5e:da:
95:9e:7a:db:9d:30:31:72:72:b2:bc:cf:2f:d6:7f:
80:a8:93:de:81:c7:b0:a1:fb:02:ba:a3:ab:17:0b:
e0:31:a6:c8:d1:94:1e:8f:60:13:37:60:8e:b6:3f:
ae:35:1b:3f:ce:6a:1a:5e:aa:58:fc:f2:30:a9:a8:
c9:0b:82:21:e6:4b:68:96:07:16:44:9f:33:45:cb:
e6:5f:4b:ce:7c:72:da:1a:6c:c8:f2:fb:c0:ef:a5:
b1:66:00:b2:4f:b9:55:4f:10:ca:77:e3:6e:b4:db:
f4:3d:db:32:b2:59:86:f0:01:18:4d:98:56:88:16:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:E1:D6:A4:DA:A2:74:D9:C7:AB:6B:5B:3A:96:E4:CC:C3:19:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42031395-ad0d-3902-bf57-d31f8839fcdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ed:58:f0:a5:d2:1a:83:09:40:3d:68:1c:8d:ab:80:8a:e6:
d6:58:67:cc:c9:e6:0e:74:fd:38:3d:bb:06:85:8c:7c:91:17:
fa:f5:00:76:12:43:a0:38:d1:48:de:62:39:8a:f6:9a:63:77:
9f:67:aa:e4:84:bc:54:48:38:4f:80:9e:91:75:98:46:2f:8b:
d9:96:4f:1c:ca:45:78:de:85:2b:87:0d:c8:69:35:d7:37:a5:
8c:22:8f:61:85:fa:24:12:1a:b0:3c:80:b8:7f:e6:c2:50:8a:
ac:08:40:83:b8:bb:95:8b:2a:cb:14:d7:87:52:67:80:f8:49:
0c:d4:9d:e5:2f:cf:dd:70:58:0b:1b:d1:54:c2:cd:e0:21:51:
7f:bf:26:a1:fc:7c:fa:06:4d:83:87:09:5f:ec:dc:e7:0c:d4:
39:3b:00:9f:f2:04:6c:cf:18:79:b9:c9:ee:93:9e:3a:12:60:
89:fb:71:c3:5b:4e:1f:42:92:7c:6c:fe:cd:fe:8f:3e:34:b9:
af:e8:49:c1:43:eb:5f:06:d4:12:75:58:68:f6:60:07:98:61:
0d:00:6c:0c:11:47:a4:eb:28:59:f5:20:35:45:af:cc:56:6e:
02:d5:5f:bf:bb:fa:9b:a7:a5:c7:15:c7:01:11:dc:25:3b:6a:
22:ba:5c:51
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEANzOSu9WdeP4NQT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyNzEyMDAwMFoXDTIzMDEwMjA1MDAwMFowLzEtMCsGA1UEAxMk
YWJkNmEyMTMtYWNiMy00ZGRlLThkY2YtYTEyNjUzYWU1YzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HW+In91aIN6nF7fni8nJ5UF4UVgZozN5mG7
wvwLvu3CEvv+xFiCY1wGNRkdDj7Ts9m9VjBmDJabyXb6LL3lwE/DLKWflkTRV6qb
YN6R0+nuYEm3dSG0yJaORgF1pqLfciU3trU/hWQnreHBxnkbxmNkg512/XqFeLw7
Ho+VeTme3TAOXtqVnnrbnTAxcnKyvM8v1n+AqJPegcewofsCuqOrFwvgMabI0ZQe
j2ATN2COtj+uNRs/zmoaXqpY/PIwqajJC4Ih5ktolgcWRJ8zRcvmX0vOfHLaGmzI
8vvA76WxZgCyT7lVTxDKd+NutNv0PdsyslmG8AEYTZhWiBY0MQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP3c4dak2qJ02cera1s6luTMwxkwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDIwMzEzOTUtYWQwZC0z
OTAyLWJmNTctZDMxZjg4MzlmY2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiAgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY+1Y8KXSGoMJQD1oHI2rgIrm1lhnzMnmDnT9OD27BoWMfJEX+vUAdhJD
oDjRSN5iOYr2mmN3n2eq5IS8VEg4T4CekXWYRi+L2ZZPHMpFeN6FK4cNyGk11zel
jCKPYYX6JBIasDyAuH/mwlCKrAhAg7i7lYsqyxTXh1JngPhJDNSd5S/P3XBYCxvR
VMLN4CFRf78mofx8+gZNg4cJX+zc5wzUOTsAn/IEbM8YebnJ7pOeOhJgiftxw1tO
H0KSfGz+zf6PPjS5r+hJwUPrXwbUEnVYaPZgB5hhDQBsDBFHpOsoWfUgNUWvzFZu
AtVfv7v6m6elxxXHARHcJTtqIrpcUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:22 2025 by rpki-client