Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c9663d9-c1e4-3aa6-a50c-c56647c49fcd.roa
File: 5c9663d9-c1e4-3aa6-a50c-c56647c49fcd.roa (raw, json)
Hash identifier: +JFp0eqOAt8k9aN03Wfbra2m5wur2WFmy78kIKXdzC4=
Subject key identifier: 71:CD:67:79:8D:AF:73:4D:56:0C:8A:1C:0A:D8:AE:FA:F5:43:B6:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584048A18EB41BDB539099B49E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c9663d9-c1e4-3aa6-a50c-c56647c49fcd.roa
Signing time: Sun 18 Dec 2022 12:00:00 +0000
ROA not before: Sun 18 Dec 2022 12:00:00 +0000
ROA not after: Mon 23 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.43.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:48:a1:8e:b4:1b:db:53:90:99:b4:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 18 12:00:00 2022 GMT
Not After : Jan 23 05:00:00 2023 GMT
Subject: CN=e6ef17e5-c836-4c28-8633-57d54a41ea88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:b5:25:42:d0:c1:6a:bd:2a:3a:1c:71:79:
18:3e:40:08:b1:13:1c:50:2d:e7:b0:da:d3:58:dd:
d0:30:56:3e:96:81:37:6d:da:38:7e:45:64:8d:a2:
0c:3e:66:63:27:9f:c5:3f:7f:9f:a7:55:05:fc:ea:
65:53:b1:75:d4:d7:6b:7c:db:fe:de:51:cb:c7:8e:
e7:77:e4:d2:45:25:a5:4f:1e:d6:7f:05:3a:89:0a:
e1:f1:23:3f:11:d7:8e:e6:03:fa:0d:0e:54:54:c9:
df:cf:f4:ca:4a:5d:fc:9c:50:8d:ec:c4:d1:2e:a9:
68:7e:0c:4e:d8:c6:c5:75:33:7d:28:fe:92:ea:0b:
d1:fb:6c:a4:37:07:d8:cc:16:1a:8f:e8:b7:48:dd:
37:96:44:d2:cc:d0:7b:af:a0:8a:38:e5:51:9c:23:
37:65:86:4f:40:03:3d:d0:9b:bb:ce:bb:05:e6:ba:
3c:95:d5:ee:99:dc:26:6e:3c:9c:e0:35:60:bc:51:
d6:10:f0:d4:39:b1:52:29:66:91:fe:5d:72:f4:b9:
62:52:69:e3:bf:42:80:c2:76:91:ff:10:a3:fd:26:
36:f1:1a:ee:22:fe:9d:08:b7:be:ae:67:7d:ca:bc:
95:12:d3:9a:5c:59:9a:09:d2:dd:70:3e:7c:28:96:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:67:79:8D:AF:73:4D:56:0C:8A:1C:0A:D8:AE:FA:F5:43:B6:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c9663d9-c1e4-3aa6-a50c-c56647c49fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:a0:7d:b5:73:cd:7e:cc:3a:98:f2:d5:da:5a:73:a7:e1:f4:
bb:fa:e9:c1:78:8b:53:e8:24:c4:ec:9e:6d:0d:71:76:be:5c:
84:1e:f4:58:3c:10:5b:d4:fa:f1:44:b0:d1:b6:66:9e:aa:48:
c0:f9:3b:db:6e:29:58:9b:ba:f1:c5:d8:d3:a8:01:20:6d:65:
08:a2:0f:76:a6:13:90:a4:59:df:96:0e:c4:24:c8:0c:bb:0e:
ac:65:97:43:96:49:67:55:c5:e0:a4:ea:48:21:8c:38:5d:2f:
89:0f:ad:12:7c:62:83:fb:8b:56:7b:55:97:20:7d:32:b7:95:
bb:0a:02:c2:bb:6b:e2:8f:f6:69:3c:46:2d:1c:7c:0b:fc:eb:
4d:fe:2c:ac:bd:ee:e0:ce:bd:0d:eb:12:5f:0b:a4:1e:49:ca:
5b:b5:ca:eb:e6:e0:ef:9a:e8:5e:2c:90:19:b8:8c:61:7f:c2:
c6:04:34:cb:91:f9:4b:26:38:67:87:f9:dd:db:c4:a3:b7:52:
81:ee:5c:96:e6:82:e3:cb:72:c4:03:46:d6:02:a4:a0:1f:13:
8a:d6:e8:ff:41:0a:c3:10:03:41:49:12:e2:0c:b4:6c:f8:73:
34:02:4f:7d:96:cd:ef:ed:44:a4:f1:44:f7:14:77:1f:9f:86:
76:c8:6d:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBIoY60G9tTkJm0ngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxODEyMDAwMFoXDTIzMDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZTZlZjE3ZTUtYzgzNi00YzI4LTg2MzMtNTdkNTRhNDFlYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+1JULQwWq9KjoccXkYPkAIsRMcUC3nsNrT
WN3QMFY+loE3bdo4fkVkjaIMPmZjJ5/FP3+fp1UF/OplU7F11NdrfNv+3lHLx47n
d+TSRSWlTx7WfwU6iQrh8SM/EdeO5gP6DQ5UVMnfz/TKSl38nFCN7MTRLqlofgxO
2MbFdTN9KP6S6gvR+2ykNwfYzBYaj+i3SN03lkTSzNB7r6CKOOVRnCM3ZYZPQAM9
0Ju7zrsF5ro8ldXumdwmbjyc4DVgvFHWEPDUObFSKWaR/l1y9LliUmnjv0KAwnaR
/xCj/SY28RruIv6dCLe+rmd9yryVEtOaXFmaCdLdcD58KJbL5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHNZ3mNr3NNVgyKHArYrvr1Q7bBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWM5NjYzZDktYzFlNC0z
YWE2LWE1MGMtYzU2NjQ3YzQ5ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWgfbVzzX7MOpjy1dpac6fh9Lv66cF4i1PoJMTsnm0NcXa+XIQe9Fg8
EFvU+vFEsNG2Zp6qSMD5O9tuKVibuvHF2NOoASBtZQiiD3amE5CkWd+WDsQkyAy7
Dqxll0OWSWdVxeCk6kghjDhdL4kPrRJ8YoP7i1Z7VZcgfTK3lbsKAsK7a+KP9mk8
Ri0cfAv8603+LKy97uDOvQ3rEl8LpB5Jylu1yuvm4O+a6F4skBm4jGF/wsYENMuR
+UsmOGeH+d3bxKO3UoHuXJbmguPLcsQDRtYCpKAfE4rW6P9BCsMQA0FJEuIMtGz4
czQCT32Wze/tRKTxRPcUdx+fhnbIbUI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 14:54:55 2025 by rpki-client