Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a947db1-cc30-3385-82d7-417e69f2ac84.roa
File: 5a947db1-cc30-3385-82d7-417e69f2ac84.roa (raw, json)
Hash identifier: Mv13Yvj6ToKJnfxzPCcB2fxxGXk9NkzSdKDf+i1/B4k=
Subject key identifier: 40:A9:94:5D:63:57:E6:86:38:F4:08:59:41:7F:61:6A:7D:57:7D:5C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840354AC2DBA3CF1D4E26AE65E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a947db1-cc30-3385-82d7-417e69f2ac84.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 156.4.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:4a:c2:db:a3:cf:1d:4e:26:ae:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=e5170e66-c0ed-48ef-b3a8-f96daac34c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:80:7c:b8:44:4e:bc:b5:39:96:66:22:33:
1c:65:7d:e9:09:d9:cb:89:47:87:67:00:b8:2b:c0:
6e:48:54:c5:bc:e4:cf:fc:ba:83:ff:00:40:9d:f8:
45:23:a5:a0:fa:d8:4b:ff:53:ae:54:de:05:28:89:
be:00:09:34:f9:10:82:6f:62:a0:a5:a8:a7:71:5c:
c6:51:55:71:1c:a8:47:4f:9a:67:cb:6d:92:8f:e7:
e6:d0:db:bc:a5:2c:29:35:42:bb:cb:24:19:d6:07:
d0:66:c7:6c:46:49:1a:36:35:43:1a:10:f2:ca:17:
51:46:73:fc:55:5a:60:97:22:a7:3d:4e:c5:0c:62:
13:d8:bd:8c:e4:28:86:6b:25:69:a0:23:1f:41:cd:
60:65:15:8b:48:5f:01:b1:94:13:f8:a9:df:21:20:
f7:79:a5:2a:cc:70:90:34:93:a8:d8:17:ed:b1:20:
9e:5e:5f:83:c6:dc:a4:88:b9:84:7f:24:34:cc:49:
ce:62:13:c0:05:c0:cb:53:1e:cb:8c:49:89:ca:a7:
c3:4d:df:29:40:5a:b1:3b:9a:00:98:28:fb:05:d0:
dd:ad:d6:07:bc:f4:80:85:a3:b3:d7:63:a9:32:ef:
b6:62:31:9d:4d:c5:f5:35:2b:66:35:2f:6b:bc:ca:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:94:5D:63:57:E6:86:38:F4:08:59:41:7F:61:6A:7D:57:7D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a947db1-cc30-3385-82d7-417e69f2ac84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:88:70:07:2f:04:74:04:b8:db:ae:66:dc:d1:c4:cc:27:72:
b6:43:6b:06:c6:c2:e4:e6:f1:d8:6b:f7:0c:32:50:6e:dc:e2:
3c:c2:f8:21:20:27:ae:84:06:52:af:08:f2:01:16:8e:8e:80:
9b:b0:42:58:aa:59:7c:0f:05:98:a0:21:5b:f0:ba:e4:a6:a6:
04:de:7e:c9:df:0b:93:65:a4:92:91:ea:9f:17:a1:29:eb:45:
64:ac:80:99:d9:93:a4:ee:09:10:72:f5:ea:a4:4a:63:c4:f8:
ed:b5:c5:e9:10:c8:81:29:45:75:ac:1d:02:be:1b:84:1c:11:
80:92:70:49:e3:5a:b3:a8:03:96:d4:5a:33:0e:61:d6:01:8b:
9f:0c:b1:76:b4:d0:7f:fa:b2:49:03:56:68:09:8d:be:b5:26:
2e:55:8d:31:98:d2:15:20:7e:eb:75:0e:92:e3:51:6b:29:15:
b7:7d:f4:9f:fd:f4:0a:04:30:1d:ca:19:8d:83:d1:5f:5c:63:
c5:70:03:0f:91:b1:18:a6:c2:0e:eb:e6:3e:60:5f:6a:6e:53:
fd:50:89:9c:d0:93:59:8b:6c:2a:9d:50:af:9d:f0:89:fc:25:
5d:08:cc:9c:bb:df:a9:17:c0:55:35:4b:fd:43:20:2a:0a:d7:
6a:29:09:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA1SsLbo88dTiauZeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTUxNzBlNjYtYzBlZC00OGVmLWIzYTgtZjk2ZGFhYzM0YzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5beAfLhETry1OZZmIjMcZX3pCdnLiUeHZwC4
K8BuSFTFvOTP/LqD/wBAnfhFI6Wg+thL/1OuVN4FKIm+AAk0+RCCb2KgpaincVzG
UVVxHKhHT5pny22Sj+fm0Nu8pSwpNUK7yyQZ1gfQZsdsRkkaNjVDGhDyyhdRRnP8
VVpglyKnPU7FDGIT2L2M5CiGayVpoCMfQc1gZRWLSF8BsZQT+KnfISD3eaUqzHCQ
NJOo2BftsSCeXl+DxtykiLmEfyQ0zEnOYhPABcDLUx7LjEmJyqfDTd8pQFqxO5oA
mCj7BdDdrdYHvPSAhaOz12OpMu+2YjGdTcX1NStmNS9rvMq6HQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFECplF1jV+aGOPQIWUF/YWp9V31cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWE5NDdkYjEtY2MzMC0z
Mzg1LTgyZDctNDE3ZTY5ZjJhYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBnAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAYhwBy8EdAS4265m3NHEzCdytkNrBsbC5Obx2Gv3DDJQbtziPML4ISAn
roQGUq8I8gEWjo6Am7BCWKpZfA8FmKAhW/C65KamBN5+yd8Lk2WkkpHqnxehKetF
ZKyAmdmTpO4JEHL16qRKY8T47bXF6RDIgSlFdawdAr4bhBwRgJJwSeNas6gDltRa
Mw5h1gGLnwyxdrTQf/qySQNWaAmNvrUmLlWNMZjSFSB+63UOkuNRaykVt330n/30
CgQwHcoZjYPRX1xjxXADD5GxGKbCDuvmPmBfam5T/VCJnNCTWYtsKp1Qr53wifwl
XQjMnLvfqRfAVTVL/UMgKgrXaikJ+g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:20 2025 by rpki-client