Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dc7b7f5-d81c-3420-9c84-c1c4c609933a.roa
File: 8dc7b7f5-d81c-3420-9c84-c1c4c609933a.roa (raw, json)
Hash identifier: SZ4loGkMYSWiM2M17ZelDbLgNtc9R7I4egMQtJK5LPM=
Subject key identifier: 26:82:9F:C3:D6:49:A6:52:B9:9B:60:D3:D6:DB:E4:97:11:4E:0A:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA394D906265AF2BC42803680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dc7b7f5-d81c-3420-9c84-c1c4c609933a.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a3:94:d9:06:26:5a:f2:bc:42:80:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2022 GMT
Subject: CN=af53e4d0-1a63-486e-88ff-70021b68d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:71:b5:0a:3f:a5:30:04:11:ba:16:3d:10:
4b:b3:6f:20:ab:e1:74:89:4f:4c:1e:b3:7b:33:40:
c6:a5:4c:ec:c5:45:66:d3:3a:15:e5:de:77:ed:66:
0a:24:a8:12:79:1e:18:9c:cb:11:4a:b9:e4:b5:87:
d1:7b:41:ae:86:05:6a:1e:c9:96:1b:d7:5a:93:63:
bf:71:0e:00:d6:65:56:35:b7:29:a7:d9:7d:3a:a5:
8d:f1:88:0c:d3:b9:99:21:8c:43:3b:a8:b0:7a:fc:
5f:da:28:1f:9e:66:5c:52:89:d9:ed:ab:de:85:15:
71:0b:e5:aa:62:6d:b5:a0:e0:bf:fa:35:be:29:47:
3a:05:24:fe:3a:fb:8e:cb:3b:48:da:fa:91:4e:0d:
7e:f5:bf:8a:0f:19:8d:af:57:1b:a6:9d:df:ce:4c:
56:fd:9e:37:19:da:51:5a:08:17:03:fe:f0:a7:6c:
d0:8c:4d:32:09:84:34:3a:76:f0:aa:6f:f4:aa:5b:
71:ae:bd:1f:46:de:ca:b2:ba:43:78:32:df:38:fd:
6a:d5:69:fb:e6:93:8b:71:98:bc:98:41:de:1e:2b:
b8:25:08:f4:36:f4:d8:32:42:c5:ff:72:df:c7:cc:
cb:2e:5d:77:e1:05:c0:eb:bf:df:39:04:96:94:14:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:9F:C3:D6:49:A6:52:B9:9B:60:D3:D6:DB:E4:97:11:4E:0A:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dc7b7f5-d81c-3420-9c84-c1c4c609933a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:90:51:84:09:90:80:51:07:88:bf:d3:7f:7a:71:21:a5:b7:
08:77:13:ce:c0:7f:70:c3:9a:e8:3d:56:be:d8:32:b8:16:98:
82:1e:37:3d:62:20:6b:59:a5:b3:f2:dd:64:0f:62:31:06:60:
d5:c5:38:da:15:c6:32:3a:94:cd:82:f4:28:44:0f:d1:92:da:
b7:50:a6:8f:f4:f3:ce:c5:db:9c:90:c6:5c:d6:61:be:69:81:
48:fa:25:99:e7:67:1b:81:fc:1d:c3:0e:fd:77:d0:25:20:15:
f6:ab:27:c5:1e:20:10:2e:82:0c:59:d1:a5:d9:b4:8a:72:c4:
9b:6f:64:1c:72:34:13:09:f8:5f:15:9f:0f:08:18:1e:fe:38:
ae:0c:b6:35:ab:d1:ad:fd:52:5e:43:09:ad:24:19:fd:37:31:
f8:54:81:7f:4b:0c:ae:ce:45:a4:2b:aa:ef:ad:73:32:3d:0c:
2a:47:80:32:88:19:fa:05:11:12:4e:8d:61:eb:ce:b5:d3:8f:
32:a6:f2:93:89:49:30:6e:90:b8:5d:cb:d3:56:2d:db:e2:2a:
3f:19:cc:5a:e8:9e:0e:c5:e1:6d:b9:38:11:1a:bb:99:63:9b:
f0:6f:57:64:db:bc:c4:ac:ce:9c:ee:2a:17:d4:9f:bc:9e:b3:
cb:ed:61:3a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyjlNkGJlryvEKANoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExOTA1MDAwMFoXDTIyMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
YWY1M2U0ZDAtMWE2My00ODZlLTg4ZmYtNzAwMjFiNjhkOGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x5xtQo/pTAEEboWPRBLs28gq+F0iU9MHrN7
M0DGpUzsxUVm0zoV5d537WYKJKgSeR4YnMsRSrnktYfRe0GuhgVqHsmWG9dak2O/
cQ4A1mVWNbcpp9l9OqWN8YgM07mZIYxDO6iwevxf2igfnmZcUonZ7avehRVxC+Wq
Ym21oOC/+jW+KUc6BST+OvuOyztI2vqRTg1+9b+KDxmNr1cbpp3fzkxW/Z43GdpR
WggXA/7wp2zQjE0yCYQ0Onbwqm/0qltxrr0fRt7KsrpDeDLfOP1q1Wn75pOLcZi8
mEHeHiu4JQj0NvTYMkLF/3Lfx8zLLl134QXA67/fOQSWlBS5XwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCaCn8PWSaZSuZtg09bb5JcRTgoxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGRjN2I3ZjUtZDgxYy0z
NDIwLTljODQtYzFjNGM2MDk5MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnwswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIJBRhAmQgFEHiL/Tf3pxIaW3CHcTzsB/cMOa6D1WvtgyuBaYgh43PWIg
a1mls/LdZA9iMQZg1cU42hXGMjqUzYL0KEQP0ZLat1Cmj/TzzsXbnJDGXNZhvmmB
SPolmednG4H8HcMO/XfQJSAV9qsnxR4gEC6CDFnRpdm0inLEm29kHHI0Ewn4XxWf
DwgYHv44rgy2NavRrf1SXkMJrSQZ/Tcx+FSBf0sMrs5FpCuq761zMj0MKkeAMogZ
+gUREk6NYevOtdOPMqbyk4lJMG6QuF3L01Yt2+IqPxnMWuieDsXhbbk4ERq7mWOb
8G9XZNu8xKzOnO4qF9SfvJ6zy+1hOg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:38 2025 by rpki-client