Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6dc773f1-7e50-3fab-bed3-3da1308bd2fd.roa
File: 6dc773f1-7e50-3fab-bed3-3da1308bd2fd.roa (raw, json)
Hash identifier: QCVGlgc0bd3BDhuT4XZ/Ilvg3x0j51VCjID8zZ/+F2s=
Subject key identifier: D5:44:16:B7:09:1D:8E:18:5D:BF:1D:C4:8A:47:96:D2:FA:CA:2F:3A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DFA00F91387C1ACE10CD19BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6dc773f1-7e50-3fab-bed3-3da1308bd2fd.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:fa:00:f9:13:87:c1:ac:e1:0c:d1:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=7981582b-93ee-44aa-8f11-bd63658384e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:a3:c2:5f:29:89:99:0d:d2:dd:fb:ea:11:
df:0b:b6:0b:c0:bb:b8:83:0a:df:e4:0c:80:af:d2:
e0:09:72:9c:f7:7f:be:6e:eb:7c:8b:ca:f9:37:08:
10:e0:44:a4:1c:47:a4:70:19:54:e1:a2:2d:d3:fd:
aa:2a:6e:16:27:fe:b2:6d:a2:9d:9f:a0:8b:ca:0e:
fb:d2:13:49:8f:b9:48:bf:dd:3b:62:92:8a:ad:47:
a7:b9:b6:5c:28:d1:8b:4a:78:35:9a:93:0d:df:0a:
0f:d8:43:4f:ff:5b:9a:6e:74:cb:b6:67:50:58:28:
17:6e:46:bc:a7:b2:d1:61:20:2f:fa:08:f2:42:97:
37:75:a7:c5:48:1c:c7:21:4a:f0:b5:97:ee:57:e0:
6e:ed:5d:57:e1:5e:eb:af:67:29:d9:91:4d:ff:3d:
5c:d3:ff:2b:a8:09:94:70:29:52:24:3f:7b:bf:c2:
7a:fb:de:e0:e2:c7:de:4f:b9:77:23:ce:b1:d7:1f:
66:e2:bf:4b:b5:ee:57:ce:22:ee:1a:1b:d0:1b:5b:
ff:e7:1f:5f:8f:56:83:93:8f:dd:d6:ac:31:e5:17:
40:9e:6b:22:7d:01:04:97:26:d4:c8:b8:52:72:67:
90:4b:ea:fd:ef:f3:55:ba:51:7c:dc:92:df:06:67:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:16:B7:09:1D:8E:18:5D:BF:1D:C4:8A:47:96:D2:FA:CA:2F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6dc773f1-7e50-3fab-bed3-3da1308bd2fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:55:4b:27:82:c5:85:3b:ec:b2:dd:1d:e2:5c:93:2c:4c:85:
bd:c5:19:18:3a:76:1d:94:cd:fb:43:47:02:77:8b:f9:fe:83:
fe:a0:e7:3c:75:90:bd:cf:4a:9b:29:ef:f7:6c:90:dd:3d:16:
1e:b5:90:18:8b:02:b4:84:56:fe:e2:1c:4f:c9:80:e0:f2:4b:
30:f5:32:59:0e:a7:a2:e7:db:87:17:7c:2b:73:d0:bb:dc:e9:
8a:c6:bc:a0:df:0a:a3:de:8a:30:43:ac:91:69:2f:00:df:ab:
39:a1:97:6f:0a:4e:5c:94:9e:90:75:01:17:ea:84:d1:5a:23:
6c:71:7f:e5:75:f1:b7:ff:c2:49:c9:6d:16:81:cf:fe:0e:97:
06:dd:4b:a7:1d:e0:1d:5f:5c:d3:36:17:d2:8a:bc:ba:62:68:
e1:c2:5b:8e:77:e1:01:79:8a:3b:b1:7d:16:64:fc:f3:f5:2d:
69:fa:5d:ef:30:98:d4:db:71:2e:07:fb:c7:9c:4f:c4:59:a3:
f7:0e:19:16:35:02:e3:9e:ab:95:82:50:6d:4f:d2:66:ec:71:
3b:88:da:48:01:13:b6:3b:23:dd:80:66:6b:ec:8f:4c:66:5e:
e6:6d:9d:7f:e2:66:d0:11:dd:74:42:aa:95:37:f5:08:9f:13:
6f:51:00:0f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD36APkTh8Gs4QzRm8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Nzk4MTU4MmItOTNlZS00NGFhLThmMTEtYmQ2MzY1ODM4NGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh6jwl8piZkN0t376hHfC7YLwLu4gwrf5AyA
r9LgCXKc93++but8i8r5NwgQ4ESkHEekcBlU4aIt0/2qKm4WJ/6ybaKdn6CLyg77
0hNJj7lIv907YpKKrUenubZcKNGLSng1mpMN3woP2ENP/1uabnTLtmdQWCgXbka8
p7LRYSAv+gjyQpc3dafFSBzHIUrwtZfuV+Bu7V1X4V7rr2cp2ZFN/z1c0/8rqAmU
cClSJD97v8J6+97g4sfeT7l3I86x1x9m4r9Lte5XziLuGhvQG1v/5x9fj1aDk4/d
1qwx5RdAnmsifQEElybUyLhScmeQS+r97/NVulF83JLfBmfM1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNVEFrcJHY4YXb8dxIpHltL6yi86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNmRjNzczZjEtN2U1MC0z
ZmFiLWJlZDMtM2RhMTMwOGJkMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCFxQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKVVLJ4LFhTvsst0d4lyTLEyFvcUZGDp2HZTN+0NHAneL+f6D/qDnPHWQ
vc9Kmynv92yQ3T0WHrWQGIsCtIRW/uIcT8mA4PJLMPUyWQ6noufbhxd8K3PQu9zp
isa8oN8Ko96KMEOskWkvAN+rOaGXbwpOXJSekHUBF+qE0VojbHF/5XXxt//CSclt
FoHP/g6XBt1Lpx3gHV9c0zYX0oq8umJo4cJbjnfhAXmKO7F9FmT88/Utafpd7zCY
1NtxLgf7x5xPxFmj9w4ZFjUC456rlYJQbU/SZuxxO4jaSAETtjsj3YBma+yPTGZe
5m2df+Jm0BHddEKqlTf1CJ8Tb1EADw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:02 2025 by rpki-client