Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89de923c-dede-3305-b5c0-bef02be5d945.roa
File: 89de923c-dede-3305-b5c0-bef02be5d945.roa (raw, json)
Hash identifier: PAZ+VZl/tI/lBp7krDIRCKoMEi1+VTVUsA3XLUAEKYw=
Subject key identifier: 88:85:D5:9D:F4:53:EF:08:DF:05:CB:FD:1C:FA:74:E1:23:39:06:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CCD57486CF088490669971500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89de923c-dede-3305-b5c0-bef02be5d945.roa
Signing time: Wed 02 Feb 2022 05:00:00 +0000
ROA not before: Wed 02 Feb 2022 05:00:00 +0000
ROA not after: Wed 09 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.192.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:cd:57:48:6c:f0:88:49:06:69:97:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 05:00:00 2022 GMT
Not After : Mar 9 05:00:00 2022 GMT
Subject: CN=db736c63-b56e-4bc6-b1b0-76ee14bf995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:2d:21:58:ea:d3:8f:2f:43:8c:56:b3:33:
d4:fd:96:4a:0b:5f:eb:29:da:29:82:fe:f1:b8:a7:
18:20:9d:79:99:82:4a:a8:f7:37:4f:b0:d6:69:35:
c0:a1:23:68:16:52:86:84:ea:e6:44:00:0e:81:fc:
97:7d:77:9e:be:d3:73:97:a4:39:6c:b3:f2:6a:84:
12:72:55:91:11:07:20:65:d3:25:bb:69:db:20:e0:
5a:9e:35:75:d9:79:fe:7a:a9:d5:e5:0b:aa:0a:07:
49:6f:40:98:fa:52:68:25:bf:e8:57:57:10:bf:59:
ea:e6:54:2c:c4:a3:14:9d:b6:5a:9e:fc:82:ee:29:
ca:b7:3f:ed:1c:b3:66:b9:d8:aa:89:84:8f:19:d5:
9f:e5:2d:11:76:69:58:dc:40:3e:cf:95:d8:1f:79:
f8:83:a1:c8:64:93:bd:46:43:75:30:94:47:f0:dd:
43:25:d7:c5:09:79:9c:4b:f7:a7:13:0a:51:59:41:
cc:7b:ef:c2:09:e5:68:37:0d:cd:3d:1b:69:6b:c9:
67:ca:27:a7:af:d9:e3:2f:d9:99:c3:87:71:c1:cc:
5b:5d:7a:1f:34:d9:c1:9c:a7:c8:2a:33:d3:b4:a0:
ad:73:7b:13:2e:1f:89:13:20:f8:c0:f6:59:37:7e:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:D5:9D:F4:53:EF:08:DF:05:CB:FD:1C:FA:74:E1:23:39:06:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89de923c-dede-3305-b5c0-bef02be5d945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
13.192.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4a:e6:b9:5d:ba:85:ff:aa:40:91:86:f2:f9:62:f1:19:d1:
3a:fe:23:e9:ff:7e:1d:69:70:ad:f5:cf:b2:0f:d6:57:04:6d:
95:89:a9:fa:8f:84:21:ab:b5:75:d3:0c:75:c3:5d:56:20:4d:
ea:dc:e8:80:c6:2d:b2:89:3d:b6:ee:22:a4:e5:38:0c:db:a7:
d5:39:9f:7f:79:92:66:57:42:91:f6:47:54:0e:17:22:4d:84:
30:10:89:db:dc:d1:47:93:e9:60:1b:4d:2e:3a:5a:85:a7:75:
9e:e8:ed:dd:4b:f6:65:1c:d5:0c:06:4a:6a:df:54:f3:70:e6:
41:e8:fc:6b:9e:e3:6f:97:0c:4e:bc:0f:56:40:a8:39:32:e1:
39:e4:35:65:4c:7b:4f:45:2e:ad:ac:31:09:b3:45:f7:9d:12:
50:95:ce:0f:cb:c2:94:8c:fe:1d:6b:1b:c6:a4:aa:34:cc:da:
a3:49:06:49:bf:9f:83:75:38:96:c2:a6:dc:84:ff:ec:90:b1:
bb:78:fd:b7:eb:4f:91:dc:50:7c:d7:6c:9b:0a:21:83:2f:29:
72:36:2c:7f:d9:16:bc:0b:a6:05:88:cb:87:c6:36:48:fa:40:
be:86:d2:f2:5f:c3:bd:d5:ff:41:63:d9:18:e1:59:37:94:1a:
ce:8f:97:9d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzNV0hs8IhJBmmXFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwMjA1MDAwMFoXDTIyMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGI3MzZjNjMtYjU2ZS00YmM2LWIxYjAtNzZlZTE0YmY5OTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoUtIVjq048vQ4xWszPU/ZZKC1/rKdopgv7x
uKcYIJ15mYJKqPc3T7DWaTXAoSNoFlKGhOrmRAAOgfyXfXeevtNzl6Q5bLPyaoQS
clWREQcgZdMlu2nbIOBanjV12Xn+eqnV5QuqCgdJb0CY+lJoJb/oV1cQv1nq5lQs
xKMUnbZanvyC7inKtz/tHLNmudiqiYSPGdWf5S0RdmlY3EA+z5XYH3n4g6HIZJO9
RkN1MJRH8N1DJdfFCXmcS/enEwpRWUHMe+/CCeVoNw3NPRtpa8lnyienr9njL9mZ
w4dxwcxbXXofNNnBnKfIKjPTtKCtc3sTLh+JEyD4wPZZN35wcQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIiF1Z30U+8I3wXL/Rz6dOEjOQZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODlkZTkyM2MtZGVkZS0z
MzA1LWI1YzAtYmVmMDJiZTVkOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDcAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPkrmuV26hf+qQJGG8vli8RnROv4j6f9+HWlwrfXPsg/WVwRtlYmp+o+E
Iau1ddMMdcNdViBN6tzogMYtsok9tu4ipOU4DNun1Tmff3mSZldCkfZHVA4XIk2E
MBCJ29zRR5PpYBtNLjpahad1nujt3Uv2ZRzVDAZKat9U83DmQej8a57jb5cMTrwP
VkCoOTLhOeQ1ZUx7T0UurawxCbNF950SUJXOD8vClIz+HWsbxqSqNMzao0kGSb+f
g3U4lsKm3IT/7JCxu3j9t+tPkdxQfNdsmwohgy8pcjYsf9kWvAumBYjLh8Y2SPpA
vobS8l/DvdX/QWPZGOFZN5Qazo+XnQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:30 2025 by rpki-client