Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/635464d3-34c4-3b36-8d64-c6f87c46f1d5.roa
File: 635464d3-34c4-3b36-8d64-c6f87c46f1d5.roa (raw, json)
Hash identifier: WfVL6R4v8JTUnXKDEU7dhV61JCD4HpOuWEoZSfBGLuo=
Subject key identifier: 97:07:0E:49:D3:AA:BF:B9:1D:06:82:E9:DD:3E:41:4F:9A:A7:F9:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406FCDA6109D99027737D1AA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/635464d3-34c4-3b36-8d64-c6f87c46f1d5.roa
Signing time: Sun 01 Jan 2023 12:00:00 +0000
ROA not before: Sun 01 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 207.127.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6f:cd:a6:10:9d:99:02:77:37:d1:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 1 12:00:00 2023 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=627b7e7a-d0ae-4875-8179-163e96539408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:3b:2c:98:f0:c7:61:c8:79:93:b9:58:17:
79:08:c9:96:00:c0:8d:6e:98:17:f3:a8:18:8d:88:
31:3b:48:68:ed:33:e9:13:40:2e:3a:c5:49:25:71:
3d:22:35:d6:c3:4a:08:e9:3b:fb:ee:39:95:c3:ff:
96:8c:b3:d0:ca:d1:74:84:d2:cc:f7:b4:b6:c8:7c:
53:22:6e:bf:55:be:78:ef:2c:2a:de:4f:67:74:8a:
a5:bc:ec:85:47:5f:22:05:4d:74:86:38:1e:fc:11:
43:b4:25:d5:d1:5c:8b:e9:f6:30:e7:31:67:39:62:
45:11:40:91:f9:8e:1c:15:f8:58:6e:3e:d2:e6:5a:
65:4d:fc:93:80:a4:a7:a3:28:bb:9c:38:cc:b0:18:
c4:20:fe:6e:59:1a:0d:b6:9a:bc:7b:c2:c2:01:06:
e8:6d:2d:9b:88:8f:ec:81:5a:de:39:70:7d:6a:d2:
58:b9:63:01:ba:c7:cb:72:d4:aa:bc:ca:32:da:bc:
07:f6:18:b7:46:03:bc:4f:a0:2a:e0:7c:9d:32:5e:
c4:58:6c:f1:a2:03:94:04:55:f2:49:7c:45:77:53:
dc:39:7e:27:4b:25:67:96:3f:36:0b:7d:d0:9e:4d:
89:86:1d:2a:48:a5:68:8a:ad:ff:51:e4:ca:a8:23:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:0E:49:D3:AA:BF:B9:1D:06:82:E9:DD:3E:41:4F:9A:A7:F9:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/635464d3-34c4-3b36-8d64-c6f87c46f1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.127.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:15:b9:e6:a1:35:de:de:29:d7:af:96:ce:66:93:f5:84:2a:
c6:d2:bc:fd:25:f8:a5:f1:b0:53:a3:43:a6:45:bc:3c:40:65:
fd:f8:fc:56:77:aa:5e:13:30:3a:61:77:ef:5b:4a:1b:7b:ba:
ee:e9:f1:fb:43:3f:13:3a:8e:a0:c6:7e:09:ed:82:33:f2:e7:
c4:07:5c:57:e1:ae:6e:4f:91:41:51:16:0a:9d:72:65:bb:8b:
21:63:52:cc:77:0b:ec:34:38:ee:e1:b5:8f:7f:15:b4:53:4f:
4c:78:f9:ce:46:8f:27:b8:9d:29:0e:c0:1a:a3:43:e2:8d:58:
e9:7e:06:c2:70:f6:7a:5c:e4:97:8f:03:e8:1c:56:f1:c4:da:
76:a4:85:c3:2d:54:68:ac:3a:c7:e5:6d:22:e3:c0:3c:01:77:
76:4c:d2:13:4d:08:ed:98:39:d5:25:92:4c:e5:b6:98:3f:06:
0c:85:b3:40:4e:c4:30:a9:a1:f9:5f:48:d3:92:14:50:b4:3e:
7f:a4:1c:92:b6:15:72:41:4c:90:c7:40:c2:4f:75:86:2e:76:
ab:7f:1c:62:7f:b9:a8:31:64:d6:9a:0b:59:80:db:39:59:07:
76:31:fc:04:05:32:2c:05:4d:6e:1c:5c:f8:76:52:e8:d7:0d:
04:1d:03:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBvzaYQnZkCdzfRqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMTEyMDAwMFoXDTIzMDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NjI3YjdlN2EtZDBhZS00ODc1LTgxNzktMTYzZTk2NTM5NDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRY7LJjwx2HIeZO5WBd5CMmWAMCNbpgX86gY
jYgxO0ho7TPpE0AuOsVJJXE9IjXWw0oI6Tv77jmVw/+WjLPQytF0hNLM97S2yHxT
Im6/Vb547ywq3k9ndIqlvOyFR18iBU10hjge/BFDtCXV0VyL6fYw5zFnOWJFEUCR
+Y4cFfhYbj7S5lplTfyTgKSnoyi7nDjMsBjEIP5uWRoNtpq8e8LCAQbobS2biI/s
gVreOXB9atJYuWMBusfLctSqvMoy2rwH9hi3RgO8T6Aq4HydMl7EWGzxogOUBFXy
SXxFd1PcOX4nSyVnlj82C33Qnk2Jhh0qSKVoiq3/UeTKqCOK6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJcHDknTqr+5HQaC6d0+QU+ap/nxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjM1NDY0ZDMtMzRjNC0z
YjM2LThkNjQtYzZmODdjNDZmMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz3+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEVueahNd7eKdevls5mk/WEKsbSvP0l+KXxsFOjQ6ZFvDxAZf34/FZ3
ql4TMDphd+9bSht7uu7p8ftDPxM6jqDGfgntgjPy58QHXFfhrm5PkUFRFgqdcmW7
iyFjUsx3C+w0OO7htY9/FbRTT0x4+c5Gjye4nSkOwBqjQ+KNWOl+BsJw9npc5JeP
A+gcVvHE2nakhcMtVGisOsflbSLjwDwBd3ZM0hNNCO2YOdUlkkzltpg/BgyFs0BO
xDCpoflfSNOSFFC0Pn+kHJK2FXJBTJDHQMJPdYYudqt/HGJ/uagxZNaaC1mA2zlZ
B3Yx/AQFMiwFTW4cXPh2UujXDQQdA10=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:48 2025 by rpki-client