Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7838cfbd-99fc-3e3c-8b83-148505f5a9a3.roa
File: 7838cfbd-99fc-3e3c-8b83-148505f5a9a3.roa (raw, json)
Hash identifier: DZpAQySlZCcbMmSAmEK/61Q5S+Qee6strHR0q9ujJlo=
Subject key identifier: FE:2A:14:09:11:5D:FD:13:C5:32:98:EE:6E:0F:8A:AD:84:12:A2:DB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBDD816448557208681A90D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7838cfbd-99fc-3e3c-8b83-148505f5a9a3.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:d8:16:44:85:57:20:86:81:a9:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=f0a12baa-fc99-42e0-a1db-77acaabf8954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:66:94:d5:f0:9a:79:11:dd:4e:ac:25:9e:
bf:26:5d:d0:7c:4c:ae:a1:64:bf:bb:d6:29:56:86:
ab:5d:59:7c:6d:f2:ff:19:4c:08:47:d4:b7:16:96:
08:bf:d5:cb:8c:f8:05:df:c0:41:3a:09:ee:7b:a1:
b6:f0:78:49:f6:b0:aa:ca:70:4d:c6:6e:01:6c:c7:
3c:65:2e:b7:be:dc:7a:52:6a:b8:85:9d:62:a5:fd:
d3:9c:53:34:aa:de:18:be:ca:97:2a:22:91:7d:f9:
09:e2:06:c6:c4:45:8e:da:60:69:1f:88:44:c9:de:
1c:e5:93:83:09:b0:cf:5a:73:5c:86:ba:cc:dd:76:
99:3e:e7:a6:aa:f2:b7:a3:f7:99:25:09:2f:c3:c8:
f5:70:8e:50:a2:e8:c7:db:82:03:df:f8:69:8d:f9:
2a:c0:59:44:22:02:e4:b0:4a:bc:bd:77:b2:04:36:
ef:c5:a9:ce:c5:be:d4:23:46:0c:67:34:fe:25:31:
c8:51:57:d0:fc:61:04:99:10:b8:94:ec:0c:75:95:
5e:7c:5d:dc:80:bb:28:0d:4c:80:56:76:25:21:ca:
2f:34:f1:16:7f:19:e6:86:23:e6:7f:5d:30:4d:fe:
fd:5a:6c:15:ac:1e:d2:43:cc:7d:a8:67:8e:26:79:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:14:09:11:5D:FD:13:C5:32:98:EE:6E:0F:8A:AD:84:12:A2:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7838cfbd-99fc-3e3c-8b83-148505f5a9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:0f:de:08:a6:da:64:da:4b:8f:00:5c:ce:79:52:f4:c1:50:
9e:a8:b8:c8:6d:c7:56:83:a0:f8:37:27:55:19:c5:1a:56:3d:
e5:73:1e:33:91:9b:f3:49:9c:7d:7c:e6:45:aa:ea:b8:32:b4:
6c:42:9d:c5:04:15:9d:bc:e6:05:79:25:fa:be:8c:f0:54:3e:
ee:9a:c9:04:8d:54:77:5f:9e:0b:16:2e:bc:96:8f:94:23:0d:
33:13:a9:77:56:b9:a1:1f:85:8d:40:e9:65:7a:0e:89:a6:20:
59:e1:bf:5a:f6:3d:4d:a7:13:b0:42:12:b3:85:4e:fb:84:9b:
a6:d2:09:ee:4c:38:fe:21:f5:76:4d:19:4e:d6:1a:2a:ee:3e:
ad:3f:bd:0c:77:1e:5f:d8:47:87:4f:49:f1:3f:87:ad:3f:ca:
f9:ac:5d:e6:df:c5:04:8b:86:50:5b:a2:78:91:0b:22:59:5c:
b0:c9:a4:bc:0b:b6:ab:5f:1a:26:61:93:30:3d:0e:58:a1:88:
b1:d7:e1:25:b1:26:a7:89:61:ce:c1:77:78:bb:29:a7:b9:6e:
2b:5e:e9:26:1e:59:ce:a7:a5:9b:a6:ea:7a:af:4b:f2:45:93:
19:a7:5f:3e:f6:03:82:87:8f:7b:84:98:61:bf:66:66:cd:6e:
8f:dd:2d:27
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy92BZEhVcghoGpDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZjBhMTJiYWEtZmM5OS00MmUwLWExZGItNzdhY2FhYmY4OTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvRmlNXwmnkR3U6sJZ6/Jl3QfEyuoWS/u9Yp
VoarXVl8bfL/GUwIR9S3FpYIv9XLjPgF38BBOgnue6G28HhJ9rCqynBNxm4BbMc8
ZS63vtx6Umq4hZ1ipf3TnFM0qt4YvsqXKiKRffkJ4gbGxEWO2mBpH4hEyd4c5ZOD
CbDPWnNchrrM3XaZPuemqvK3o/eZJQkvw8j1cI5QoujH24ID3/hpjfkqwFlEIgLk
sEq8vXeyBDbvxanOxb7UI0YMZzT+JTHIUVfQ/GEEmRC4lOwMdZVefF3cgLsoDUyA
VnYlIcovNPEWfxnmhiPmf10wTf79WmwVrB7SQ8x9qGeOJnnsnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP4qFAkRXf0TxTKY7m4Piq2EEqLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzgzOGNmYmQtOTlmYy0z
ZTNjLThiODMtMTQ4NTA1ZjVhOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgqswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsg/eCKbaZNpLjwBcznlS9MFQnqi4yG3HVoOg+DcnVRnFGlY95XMeM5Gb
80mcfXzmRarquDK0bEKdxQQVnbzmBXkl+r6M8FQ+7prJBI1Ud1+eCxYuvJaPlCMN
MxOpd1a5oR+FjUDpZXoOiaYgWeG/WvY9TacTsEISs4VO+4SbptIJ7kw4/iH1dk0Z
TtYaKu4+rT+9DHceX9hHh09J8T+HrT/K+axd5t/FBIuGUFuieJELIllcsMmkvAu2
q18aJmGTMD0OWKGIsdfhJbEmp4lhzsF3eLspp7luK17pJh5Zzqelm6bqeq9L8kWT
GadfPvYDgoePe4SYYb9mZs1uj90tJw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:46 2025 by rpki-client