Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/803df7d9-ed77-3afa-a497-b95f3c6566d3.roa
File: 803df7d9-ed77-3afa-a497-b95f3c6566d3.roa (raw, json)
Hash identifier: yoVePJtCCRix0bss3sWiU9qjtltT29LcP5xKAz9Jj80=
Subject key identifier: 4B:89:9D:A0:53:5A:37:D7:97:8E:96:D1:16:36:E6:B7:7C:0C:98:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAAB19CABBCF8760130C1AC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/803df7d9-ed77-3afa-a497-b95f3c6566d3.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:b1:9c:ab:bc:f8:76:01:30:c1:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=d911692e-3798-4965-ad53-3808c8a847ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:0e:37:d9:67:dc:4d:70:af:e8:5d:c9:48:
95:22:4d:f4:92:44:c6:a8:10:6d:98:9a:48:99:76:
77:09:e1:b8:1e:47:99:c7:6d:22:24:40:64:37:a4:
4d:f3:d3:59:12:5d:dd:6b:b1:b0:16:39:2e:33:a5:
58:6a:85:8d:41:07:04:99:a5:44:f7:dc:9e:7b:1c:
64:2f:85:57:9f:d0:5b:ff:a6:ea:ba:d7:86:ec:0d:
50:ff:8c:0e:44:54:19:a0:65:ac:34:b1:0a:ff:65:
46:7e:16:a5:fe:d5:1c:f6:b4:75:1f:50:29:36:bb:
17:05:dc:2b:fe:c2:76:20:49:df:92:1d:2e:d5:2c:
11:2c:2f:ad:c4:93:40:c9:61:7f:ea:72:38:44:e1:
5b:7c:e5:06:7e:d9:15:3e:4d:ba:6a:da:3a:25:79:
c6:ce:c2:f2:bb:96:1c:c1:0a:23:d0:28:d8:91:bd:
a5:42:23:30:55:7c:65:bd:63:6a:0f:3f:09:80:e1:
cf:e8:c0:95:43:d7:5d:26:44:3c:d6:c7:8a:2e:be:
de:05:3c:c3:73:d7:62:2d:06:cc:38:0b:30:34:94:
e1:90:97:1d:05:67:3a:e6:a0:0f:1f:43:bf:2e:e5:
73:29:04:77:70:49:87:e0:b1:43:e4:b1:75:30:cf:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:9D:A0:53:5A:37:D7:97:8E:96:D1:16:36:E6:B7:7C:0C:98:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/803df7d9-ed77-3afa-a497-b95f3c6566d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:9c:65:91:d4:a4:ce:28:81:ca:22:21:53:8a:ac:48:7c:b9:
b3:17:b7:26:8e:13:a4:2f:db:60:34:17:f6:da:6c:4b:b0:ef:
87:98:98:8e:24:ef:7a:e3:2f:bc:4c:54:6b:a7:cd:71:49:69:
e3:d2:5c:e9:64:47:c2:3a:b1:1d:78:2b:bc:ec:86:4b:2a:6b:
a8:3c:bb:29:c6:dd:c4:5b:58:26:e8:0a:15:6c:4f:c8:bb:0e:
eb:77:f6:00:8d:81:b2:62:80:25:b4:66:1b:3d:69:3c:0f:01:
61:fb:18:59:14:52:b6:c8:cf:2b:37:0a:a8:3d:ae:72:07:0e:
d0:cc:da:3f:fa:82:98:4d:00:9d:e6:dd:d0:a2:21:f6:8c:47:
3e:fa:a8:91:14:3c:a2:fd:7a:55:68:ca:76:d5:45:da:72:10:
81:51:d2:e6:b2:90:f4:a6:2c:df:52:3d:db:22:79:3d:8c:c8:
e1:9f:fd:51:82:48:62:3d:05:d4:b2:b8:3c:7b:24:33:fb:e4:
0a:ce:fc:6d:13:2e:92:bb:59:85:f4:72:ee:7c:b7:2c:be:5c:
a9:55:8f:ea:75:78:e6:4f:59:d1:ac:a1:15:cf:95:b5:0e:da:
b8:37:28:68:02:71:03:b6:20:1a:c8:94:4c:21:39:15:7d:0e:
78:77:fd:43
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+qsZyrvPh2ATDBrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZDkxMTY5MmUtMzc5OC00OTY1LWFkNTMtMzgwOGM4YTg0N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3QON9ln3E1wr+hdyUiVIk30kkTGqBBtmJpI
mXZ3CeG4HkeZx20iJEBkN6RN89NZEl3da7GwFjkuM6VYaoWNQQcEmaVE99yeexxk
L4VXn9Bb/6bquteG7A1Q/4wORFQZoGWsNLEK/2VGfhal/tUc9rR1H1ApNrsXBdwr
/sJ2IEnfkh0u1SwRLC+txJNAyWF/6nI4ROFbfOUGftkVPk26ato6JXnGzsLyu5Yc
wQoj0CjYkb2lQiMwVXxlvWNqDz8JgOHP6MCVQ9ddJkQ81seKLr7eBTzDc9diLQbM
OAswNJThkJcdBWc65qAPH0O/LuVzKQR3cEmH4LFD5LF1MM+gqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEuJnaBTWjfXl46W0RY25rd8DJhqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODAzZGY3ZDktZWQ3Ny0z
YWZhLWE0OTctYjk1ZjNjNjU2NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAP5xlkdSkziiByiIhU4qsSHy5sxe3Jo4TpC/bYDQX9tpsS7Dvh5iYjiTv
euMvvExUa6fNcUlp49Jc6WRHwjqxHXgrvOyGSyprqDy7KcbdxFtYJugKFWxPyLsO
63f2AI2BsmKAJbRmGz1pPA8BYfsYWRRStsjPKzcKqD2ucgcO0MzaP/qCmE0Anebd
0KIh9oxHPvqokRQ8ov16VWjKdtVF2nIQgVHS5rKQ9KYs31I92yJ5PYzI4Z/9UYJI
Yj0F1LK4PHskM/vkCs78bRMukrtZhfRy7ny3LL5cqVWP6nV45k9Z0ayhFc+VtQ7a
uDcoaAJxA7YgGsiUTCE5FX0OeHf9Qw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:39 2025 by rpki-client