Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e883b1c-6765-323d-993c-61c659ffb898.roa
File: 4e883b1c-6765-323d-993c-61c659ffb898.roa (raw, json)
Hash identifier: Qq/pxxfWdX/cLn+lhl2fQYPLP4Tk4Tpym/WfkAuyO0o=
Subject key identifier: 1E:20:25:E2:D8:BE:90:97:1C:17:9B:BB:B4:EF:AE:EC:76:4C:9A:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406A03F080C3A83D44BAC94F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e883b1c-6765-323d-993c-61c659ffb898.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:03:f0:80:c3:a8:3d:44:ba:c9:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=cda16d9a-1de5-4a13-bfcf-71ec0c86fb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:05:dc:41:9c:42:4e:bf:66:0b:3e:fe:7e:
c4:d2:22:a2:84:63:eb:33:73:d6:f0:c1:ff:c3:69:
2e:eb:4b:4e:eb:7c:2a:1e:dc:86:f6:a1:b4:c6:91:
93:f4:e3:ab:23:fb:e0:1f:e0:49:2e:17:d9:63:41:
2b:be:df:00:3b:28:bc:c3:88:ed:21:68:c1:ae:cb:
23:43:4e:88:c7:64:38:8d:61:6b:f8:37:c2:ce:f3:
1e:14:b7:33:cf:fa:2d:1f:3f:e9:50:4c:a6:bc:6d:
f3:9c:45:64:94:87:bd:4e:e4:bc:6f:13:39:6f:a8:
ec:82:75:06:59:81:cb:8c:ba:9f:1f:88:2c:30:a3:
4b:3e:66:a7:cc:4d:eb:7c:b5:6a:c8:2a:9e:ae:d0:
ef:34:11:67:ed:71:f8:ce:83:23:5f:7e:3e:7d:21:
ba:39:3d:e1:28:cc:b3:46:32:9d:1b:65:74:ce:d1:
ca:7b:68:76:6d:b4:bc:3e:5f:dd:43:b9:5f:f0:68:
e5:ea:e0:2c:70:ef:7f:6e:b7:73:80:e9:f1:e9:12:
fb:77:cf:1f:0a:f8:7d:6b:8c:26:02:01:25:a2:22:
67:90:dd:bd:e7:07:65:8f:74:e3:42:86:0a:bd:c6:
90:47:f2:58:7b:50:eb:27:48:49:8f:12:e2:18:e2:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:25:E2:D8:BE:90:97:1C:17:9B:BB:B4:EF:AE:EC:76:4C:9A:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e883b1c-6765-323d-993c-61c659ffb898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:11:58:86:4b:11:fd:e9:ca:75:42:7e:63:92:22:fb:59:9f:
a6:4e:b1:2a:c9:cd:ab:59:09:eb:9f:09:5e:20:b8:8f:e5:1f:
30:16:6d:cd:24:0f:4c:17:cb:6b:e7:d3:e6:f9:d4:0e:46:4c:
ef:4e:de:97:00:2f:1b:b0:32:f3:75:21:20:96:fa:5f:95:c3:
92:30:5f:a2:bf:08:ec:67:2f:87:de:b5:32:69:6a:28:96:f3:
a4:6a:46:7b:b6:ab:f2:97:71:c2:38:3c:1d:ee:85:f4:c3:1b:
80:80:a7:78:6e:3a:ed:ff:3b:3b:30:16:a1:78:89:fd:e8:ac:
5c:f8:bd:5a:08:6c:38:75:3b:a4:27:1b:7d:21:c2:ae:4a:49:
04:df:e0:da:45:af:f0:e0:06:a5:96:35:10:20:03:0c:67:85:
c1:b0:e1:bd:af:f2:e9:ee:56:b5:da:4e:c7:33:db:7a:89:90:
29:53:1a:b2:f4:33:1a:27:54:de:50:3e:80:e7:ba:c2:0f:7b:
f2:f3:18:12:cb:65:21:9c:c0:29:91:c1:b8:d0:b6:9b:58:fc:
ca:2b:39:8e:03:aa:ed:e3:2e:ac:3e:5e:15:8a:59:35:72:ff:
eb:c1:f5:b4:b8:36:d6:45:b7:19:95:86:dd:30:f7:fa:3b:02:
88:56:ca:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBqA/CAw6g9RLrJTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMDE5NTQwOFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Y2RhMTZkOWEtMWRlNS00YTEzLWJmY2YtNzFlYzBjODZmYjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIIF3EGcQk6/Zgs+/n7E0iKihGPrM3PW8MH/
w2ku60tO63wqHtyG9qG0xpGT9OOrI/vgH+BJLhfZY0Ervt8AOyi8w4jtIWjBrssj
Q06Ix2Q4jWFr+DfCzvMeFLczz/otHz/pUEymvG3znEVklIe9TuS8bxM5b6jsgnUG
WYHLjLqfH4gsMKNLPmanzE3rfLVqyCqertDvNBFn7XH4zoMjX34+fSG6OT3hKMyz
RjKdG2V0ztHKe2h2bbS8Pl/dQ7lf8Gjl6uAscO9/brdzgOnx6RL7d88fCvh9a4wm
AgEloiJnkN295wdlj3TjQoYKvcaQR/JYe1DrJ0hJjxLiGOKCpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4gJeLYvpCXHBebu7Tvrux2TJojMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGU4ODNiMWMtNjc2NS0z
MjNkLTk5M2MtNjFjNjU5ZmZiODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR5gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsRWIZLEf3pynVCfmOSIvtZn6ZOsSrJzatZCeufCV4guI/lHzAWbc0k
D0wXy2vn0+b51A5GTO9O3pcALxuwMvN1ISCW+l+Vw5IwX6K/COxnL4fetTJpaiiW
86RqRnu2q/KXccI4PB3uhfTDG4CAp3huOu3/OzswFqF4if3orFz4vVoIbDh1O6Qn
G30hwq5KSQTf4NpFr/DgBqWWNRAgAwxnhcGw4b2v8unuVrXaTscz23qJkClTGrL0
MxonVN5QPoDnusIPe/LzGBLLZSGcwCmRwbjQtptY/MorOY4Dqu3jLqw+XhWKWTVy
/+vB9bS4NtZFtxmVht0w9/o7AohWypg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:57 2025 by rpki-client