Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/857d828a-22de-30df-ba7b-3106df80542b.roa
File: 857d828a-22de-30df-ba7b-3106df80542b.roa (raw, json)
Hash identifier: KRh8gQWVzQut6k79G1KlC/wyxfxpesotZGca8RbsxHc=
Subject key identifier: EA:A0:81:28:81:23:16:CE:64:1A:95:83:00:7B:D6:09:60:AC:1A:3C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EC5BEADEAC12BCD1C989B60E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/857d828a-22de-30df-ba7b-3106df80542b.roa
Signing time: Mon 01 Aug 2022 20:39:08 +0000
ROA not before: Mon 01 Aug 2022 20:39:08 +0000
ROA not after: Tue 06 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c5:be:ad:ea:c1:2b:cd:1c:98:9b:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 1 20:39:08 2022 GMT
Not After : Sep 6 04:00:00 2022 GMT
Subject: CN=2a2a98c1-2111-4916-9495-4b29cf12f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:e5:8c:52:f3:e7:a9:f7:d3:b7:41:dd:12:
b8:c7:88:bf:54:f5:90:a6:40:92:b4:f4:9c:41:5f:
86:f6:34:40:bc:54:41:88:c9:e6:32:48:0c:36:96:
63:a7:6c:1b:de:0b:2d:f9:38:cf:b1:cd:df:7c:e7:
6e:f6:2f:13:f9:56:39:fb:62:4e:60:21:d6:1e:bf:
3d:93:82:12:af:d8:08:0e:e7:71:09:8f:e2:a4:ba:
1b:24:34:7b:9e:78:13:ea:9e:4b:53:49:cd:74:0d:
33:f6:51:58:e8:93:cb:65:90:65:6f:7e:20:be:62:
42:a3:4b:60:20:24:e9:6a:78:29:28:4b:32:27:84:
60:ab:d2:cc:c1:a3:af:c0:58:0b:47:c0:25:6f:5c:
56:7a:e3:9e:79:9e:61:24:52:db:b4:4b:b8:4c:e6:
bd:f8:69:37:18:13:28:a7:28:bc:45:23:ea:70:5d:
24:fd:fd:8e:37:98:16:16:44:71:6c:0c:83:99:07:
58:ce:c0:17:c4:b5:ec:92:58:18:24:a7:1c:d1:be:
81:fd:e2:85:0b:d2:77:60:b0:83:8c:c4:a8:ab:c1:
c7:d5:74:17:c5:ec:26:27:e2:49:5d:cf:4c:04:fe:
af:71:e2:0e:91:f5:55:0c:26:31:bb:b5:18:a6:c1:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:81:28:81:23:16:CE:64:1A:95:83:00:7B:D6:09:60:AC:1A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/857d828a-22de-30df-ba7b-3106df80542b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c0:8c:8c:d9:19:b1:19:d4:f5:81:2c:e6:31:f8:c2:3a:a1:
59:0f:ad:47:86:b4:09:7c:58:02:05:20:fd:21:96:ae:97:ff:
6f:ad:8c:3d:1c:ca:26:04:8e:59:91:8d:87:36:a4:fd:0e:9b:
61:d7:16:97:b4:1e:65:41:9d:4d:f5:3a:3e:d2:90:c4:7f:d7:
62:f2:2f:a9:4a:10:fd:d7:94:35:8b:49:a4:ce:87:70:70:8f:
34:27:49:bf:c1:a5:11:5f:78:fd:ae:31:e7:aa:e9:07:d8:e3:
95:31:6c:e1:b9:77:64:de:a3:ef:95:e2:6d:ca:29:98:47:24:
40:09:d6:87:f3:28:14:33:7d:89:e2:1e:30:41:2d:3d:e4:25:
29:71:f6:98:23:36:0f:41:9b:03:9f:f9:62:e6:e1:20:b6:a4:
20:b9:c6:ca:67:71:1d:42:e0:5a:c7:3d:ed:58:df:cc:d2:52:
79:5d:92:ea:3c:d0:d9:5d:76:a7:3f:28:8f:01:73:15:b9:b6:
82:d9:75:1c:f9:4a:7e:d0:d5:90:8d:13:f6:b1:82:6e:9b:11:
a4:a8:9d:07:81:46:8a:ce:78:f8:a7:41:82:a7:3c:40:f2:83:
6c:fc:1a:97:0d:21:94:39:e0:e1:bc:41:a6:c0:70:58:c3:60:
6d:6b:e9:69
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7Fvq3qwSvNHJibYOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgwMTIwMzkwOFoXDTIyMDkwNjA0MDAwMFowLzEtMCsGA1UEAxMk
MmEyYTk4YzEtMjExMS00OTE2LTk0OTUtNGIyOWNmMTJmOTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqknljFLz56n307dB3RK4x4i/VPWQpkCStPSc
QV+G9jRAvFRBiMnmMkgMNpZjp2wb3gst+TjPsc3ffOdu9i8T+VY5+2JOYCHWHr89
k4ISr9gIDudxCY/ipLobJDR7nngT6p5LU0nNdA0z9lFY6JPLZZBlb34gvmJCo0tg
ICTpangpKEsyJ4Rgq9LMwaOvwFgLR8Alb1xWeuOeeZ5hJFLbtEu4TOa9+Gk3GBMo
pyi8RSPqcF0k/f2ON5gWFkRxbAyDmQdYzsAXxLXsklgYJKcc0b6B/eKFC9J3YLCD
jMSoq8HH1XQXxewmJ+JJXc9MBP6vceIOkfVVDCYxu7UYpsGAoQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOqggSiBIxbOZBqVgwB71glgrBo8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODU3ZDgyOGEtMjJkZS0z
MGRmLWJhN2ItMzEwNmRmODA1NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAasCMjNkZsRnU9YEs5jH4wjqhWQ+tR4a0CXxYAgUg/SGWrpf/b62MPRzK
JgSOWZGNhzak/Q6bYdcWl7QeZUGdTfU6PtKQxH/XYvIvqUoQ/deUNYtJpM6HcHCP
NCdJv8GlEV94/a4x56rpB9jjlTFs4bl3ZN6j75XibcopmEckQAnWh/MoFDN9ieIe
MEEtPeQlKXH2mCM2D0GbA5/5YubhILakILnGymdxHULgWsc97VjfzNJSeV2S6jzQ
2V12pz8ojwFzFbm2gtl1HPlKftDVkI0T9rGCbpsRpKidB4FGis54+KdBgqc8QPKD
bPwalw0hlDng4bxBpsBwWMNgbWvpaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:30 2025 by rpki-client