Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8d2c07fb-29d7-3f98-af97-e7ef572467b1.roa
File: 8d2c07fb-29d7-3f98-af97-e7ef572467b1.roa (raw, json)
Hash identifier: oZtw4oO6zwQafa2LSbD8Zqyb/ArdqxaM4kn6Tys1cNg=
Subject key identifier: 4F:2F:44:45:F8:C5:34:51:88:30:94:6D:0C:97:25:76:25:DA:E9:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403AC9BF7CB880DDC0AC2C5600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8d2c07fb-29d7-3f98-af97-e7ef572467b1.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 207.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:c9:bf:7c:b8:80:dd:c0:ac:2c:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=0597a80b-6035-4436-a0f6-d27c12a093f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:08:0e:a8:b4:0a:ff:f3:1b:4a:d1:3c:e1:
e3:69:a3:2e:c2:5c:04:05:1f:13:0a:8c:08:69:49:
37:ce:0f:0e:f2:af:7c:e9:bc:d1:f0:78:b2:e0:c0:
46:c3:ee:0c:9f:b1:14:3b:70:e3:0e:57:38:94:57:
f0:f8:1d:94:f9:ee:6f:75:6b:11:db:d8:b2:15:e4:
4e:17:0c:d3:f5:cc:89:f1:42:25:0a:b4:80:cb:b9:
62:b4:d8:47:5f:aa:9e:fb:a0:e0:2f:97:61:a1:e5:
01:b1:38:6d:42:6a:ff:9f:6d:16:5e:77:d5:04:10:
84:35:3e:61:4f:69:8c:20:96:26:38:7c:5e:af:15:
de:9d:7d:92:b5:13:d1:7b:b1:b2:57:22:be:a9:00:
ad:93:2e:2d:e5:06:f0:94:18:70:2e:bd:e0:5f:7b:
02:c1:55:21:68:0f:de:71:a0:b3:49:8b:e7:22:cf:
42:50:c2:7d:55:53:48:88:b6:d5:7f:e1:f1:f2:35:
de:b8:3d:4f:48:2a:e8:8c:2b:cd:33:ca:9a:ae:93:
ae:b3:7b:32:1e:63:47:aa:d8:03:d9:3c:eb:29:9f:
c3:fa:70:44:b6:5d:14:7a:98:0a:91:cb:35:7a:8b:
b8:33:24:24:aa:9f:39:98:09:a3:d4:f2:85:4a:8b:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:44:45:F8:C5:34:51:88:30:94:6D:0C:97:25:76:25:DA:E9:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8d2c07fb-29d7-3f98-af97-e7ef572467b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:7e:62:e4:60:3f:1a:30:7b:9e:e7:5f:bb:84:10:36:7a:ae:
3d:a0:57:91:84:3c:99:0c:27:19:c0:cf:f9:33:d4:d2:c2:aa:
19:4c:4b:98:a3:5b:b8:7c:26:3b:10:5d:09:d1:42:87:97:58:
d1:9b:7c:8d:82:7b:0f:34:c4:c6:69:f5:63:a1:b8:4a:27:af:
28:8c:ac:99:b9:5c:e9:b7:ab:2a:b8:39:17:04:f0:29:af:95:
3e:77:c1:f3:dd:60:11:b5:bc:ee:d5:e9:f0:5d:4c:4b:f2:55:
08:95:81:8c:23:43:84:60:5d:69:60:df:cb:b4:16:ed:b3:04:
a5:b3:f4:29:a3:f8:77:d3:35:7b:a8:c5:31:1e:9c:8a:f4:07:
97:e2:9c:52:2a:73:ae:f6:4b:e3:23:38:70:ee:e2:77:6d:15:
91:97:89:16:e9:ff:50:b5:ed:e1:06:db:2d:68:3d:00:f4:f1:
75:bd:ba:9b:cf:61:2c:c5:84:bc:7b:78:f7:9a:fa:45:0b:f2:
71:ef:e3:82:64:97:8c:ae:b0:17:43:d7:b2:cb:33:47:a9:ab:
51:14:5b:37:56:b3:e2:1f:27:f8:4b:a8:88:87:a6:3f:9c:9a:
be:5e:41:76:8c:46:98:e0:d2:23:5b:f6:b3:7d:98:f2:e8:ac:
68:e8:37:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA6yb98uIDdwKwsVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMzEyMDAwMFoXDTIzMDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MDU5N2E4MGItNjAzNS00NDM2LWEwZjYtZDI3YzEyYTA5M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtckIDqi0Cv/zG0rRPOHjaaMuwlwEBR8TCowI
aUk3zg8O8q986bzR8Hiy4MBGw+4Mn7EUO3DjDlc4lFfw+B2U+e5vdWsR29iyFeRO
FwzT9cyJ8UIlCrSAy7litNhHX6qe+6DgL5dhoeUBsThtQmr/n20WXnfVBBCENT5h
T2mMIJYmOHxerxXenX2StRPRe7GyVyK+qQCtky4t5QbwlBhwLr3gX3sCwVUhaA/e
caCzSYvnIs9CUMJ9VVNIiLbVf+Hx8jXeuD1PSCrojCvNM8qarpOus3syHmNHqtgD
2TzrKZ/D+nBEtl0UepgKkcs1eou4MyQkqp85mAmj1PKFSoubRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE8vREX4xTRRiDCUbQyXJXYl2ukcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGQyYzA3ZmItMjlkNy0z
Zjk4LWFmOTctZTdlZjU3MjQ2N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz/AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg35i5GA/GjB7nudfu4QQNnquPaBXkYQ8mQwnGcDP+TPU0sKqGUxLmKNb
uHwmOxBdCdFCh5dY0Zt8jYJ7DzTExmn1Y6G4SievKIysmblc6berKrg5FwTwKa+V
PnfB891gEbW87tXp8F1MS/JVCJWBjCNDhGBdaWDfy7QW7bMEpbP0KaP4d9M1e6jF
MR6civQHl+KcUipzrvZL4yM4cO7id20VkZeJFun/ULXt4QbbLWg9APTxdb26m89h
LMWEvHt495r6RQvyce/jgmSXjK6wF0PXssszR6mrURRbN1az4h8n+EuoiIemP5ya
vl5BdoxGmODSI1v2s32Y8uisaOg3Dg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:07 2025 by rpki-client