Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72b52498-cc4c-328e-b931-f7955eb95864.roa
File: 72b52498-cc4c-328e-b931-f7955eb95864.roa (raw, json)
Hash identifier: z/XAUbAhaes68/STNP5aOVu8IiISM5N3hM14rujm8pk=
Subject key identifier: 52:7E:C2:D3:02:2B:F7:19:06:08:FC:4D:9E:29:5D:1B:87:1A:7E:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C970CCF4AA06C63FB2A6B4080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72b52498-cc4c-328e-b931-f7955eb95864.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:0c:cf:4a:a0:6c:63:fb:2a:6b:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=41bacd29-b34a-4309-b29d-276164b964c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:5c:e8:3a:eb:3a:ee:42:a9:a1:6c:12:2a:
fd:41:dd:88:bb:67:10:5a:d3:6b:86:bc:89:b5:38:
b5:7e:d4:ee:48:7b:76:36:42:a4:36:c2:51:4e:23:
99:d8:f6:be:67:bf:0d:d4:72:da:61:1b:9f:d4:a8:
78:1f:df:96:36:95:61:ab:a5:3e:33:9c:bb:d0:7a:
62:54:f9:61:1b:bb:ad:30:c5:91:54:de:dc:e9:19:
ff:6f:4a:d2:7d:97:82:02:a8:84:d1:5e:64:de:93:
16:17:ef:58:f6:3e:bc:f2:6c:09:39:2e:c6:4b:d5:
69:89:b7:3b:d6:de:75:d2:77:09:d2:ac:a6:68:59:
ef:08:ea:bb:0e:d9:7a:bd:61:1c:6f:34:6c:8a:4c:
21:57:84:72:7d:62:fc:fd:9a:31:78:bc:d4:0b:a4:
2e:4f:0b:8b:00:44:e8:fa:ee:06:26:26:9d:33:99:
a5:58:09:c5:0c:c6:a7:df:e2:16:a2:0b:7c:54:6e:
ed:66:8d:15:97:84:d0:5b:0d:cb:7d:97:6d:d3:c3:
25:4b:ac:65:9a:18:e6:c3:4d:63:22:fe:54:17:c9:
1c:f5:9d:d4:d1:ea:e6:b0:ae:9f:65:3b:08:11:9f:
a9:c4:86:7b:67:34:ac:e8:d6:01:4a:bb:cc:b3:d3:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7E:C2:D3:02:2B:F7:19:06:08:FC:4D:9E:29:5D:1B:87:1A:7E:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72b52498-cc4c-328e-b931-f7955eb95864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b3:b1:da:0b:30:ab:0d:ac:4b:ee:9e:4c:39:95:31:ea:82:
78:62:0e:cc:2b:a2:32:75:1b:87:67:c6:27:9a:ee:dd:d9:7e:
4c:17:f2:84:48:f9:c6:f1:f1:a4:ec:1b:24:28:4e:76:f5:77:
44:64:ef:e6:89:a0:51:72:a7:fd:a9:f9:4c:e3:b4:5b:0f:a4:
b0:96:87:2f:80:1f:d9:98:53:e3:d1:fb:d6:c2:f1:54:8a:c7:
44:ed:46:e1:3a:6e:ca:8f:db:64:ed:cd:d3:47:6d:ce:1a:de:
59:92:7d:cd:d3:4f:80:f3:22:ff:20:83:cb:1c:43:f0:db:d9:
2c:fc:a4:e5:6e:27:2c:35:53:ea:95:99:14:d8:f1:df:f2:9c:
70:f0:41:8f:32:ef:73:b9:e6:c3:fd:40:14:67:b7:34:88:96:
8d:2f:7b:83:00:51:40:38:1c:68:bb:87:61:23:7c:89:01:10:
9a:ef:00:4e:21:b7:ec:12:85:4f:aa:d5:cb:d3:3f:69:1b:89:
3a:8a:6a:50:a6:8d:28:13:48:2f:bc:c7:ee:2a:9e:f6:a2:f9:
22:75:4b:c0:f4:d9:5d:76:54:01:98:80:c0:e3:f8:a9:3b:4a:
13:e0:19:12:50:d5:bf:e3:c3:10:ce:78:7b:f5:3f:e5:e4:9f:
97:82:ab:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyXDM9KoGxj+yprQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NDFiYWNkMjktYjM0YS00MzA5LWIyOWQtMjc2MTY0Yjk2NGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSxc6DrrOu5CqaFsEir9Qd2Iu2cQWtNrhryJ
tTi1ftTuSHt2NkKkNsJRTiOZ2Pa+Z78N1HLaYRuf1Kh4H9+WNpVhq6U+M5y70Hpi
VPlhG7utMMWRVN7c6Rn/b0rSfZeCAqiE0V5k3pMWF+9Y9j688mwJOS7GS9Vpibc7
1t510ncJ0qymaFnvCOq7Dtl6vWEcbzRsikwhV4RyfWL8/ZoxeLzUC6QuTwuLAETo
+u4GJiadM5mlWAnFDMan3+IWogt8VG7tZo0Vl4TQWw3LfZdt08MlS6xlmhjmw01j
Iv5UF8kc9Z3U0ermsK6fZTsIEZ+pxIZ7ZzSs6NYBSrvMs9P1MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJ+wtMCK/cZBgj8TZ4pXRuHGn6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzJiNTI0OTgtY2M0Yy0z
MjhlLWI5MzEtZjc5NTVlYjk1ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+zsdoLMKsNrEvunkw5lTHqgnhiDswrojJ1G4dnxiea7t3ZfkwX8oRI
+cbx8aTsGyQoTnb1d0Rk7+aJoFFyp/2p+UzjtFsPpLCWhy+AH9mYU+PR+9bC8VSK
x0TtRuE6bsqP22TtzdNHbc4a3lmSfc3TT4DzIv8gg8scQ/Db2Sz8pOVuJyw1U+qV
mRTY8d/ynHDwQY8y73O55sP9QBRntzSIlo0ve4MAUUA4HGi7h2EjfIkBEJrvAE4h
t+wShU+q1cvTP2kbiTqKalCmjSgTSC+8x+4qnvai+SJ1S8D02V12VAGYgMDj+Kk7
ShPgGRJQ1b/jwxDOeHv1P+Xkn5eCq+E=
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:49:43 2025 by rpki-client