Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973ee98e-595d-36d9-a82d-8c79fea7cf29.roa
File: 973ee98e-595d-36d9-a82d-8c79fea7cf29.roa (raw, json)
Hash identifier: WLmEp45Fzus+TURBAtYK6JO5UR9NyH7CMoX6LX1S1hQ=
Subject key identifier: AD:19:7C:E6:2D:09:0A:0C:2F:7B:6C:EB:50:2E:9F:64:CC:35:46:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840391F2CD94840328A778DA800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973ee98e-595d-36d9-a82d-8c79fea7cf29.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 32.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:1f:2c:d9:48:40:32:8a:77:8d:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=0bad36ba-fe2d-48d7-b641-d61a031e4d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:55:0a:28:50:7b:7b:b7:8f:9d:52:91:34:
c4:21:d1:70:8c:b9:3d:d4:95:18:fb:9a:24:52:72:
d2:8d:e6:47:da:bc:08:76:aa:69:e0:81:65:41:48:
97:31:c1:a8:5d:cf:be:50:a3:f1:5e:8e:bb:0e:e9:
88:e0:70:6f:5e:42:71:23:73:8b:43:5c:9d:6c:54:
2b:c4:ed:fc:48:81:31:02:d7:73:bc:02:11:f0:10:
50:c9:ff:d1:bb:04:13:f6:d3:89:b0:ef:94:e8:17:
af:f8:8a:16:6a:e7:fd:6a:83:53:0d:6f:d4:d3:97:
2a:8d:69:c1:ef:6c:db:e2:e2:bc:ad:77:dd:f0:5c:
11:d5:36:4e:42:8f:80:32:24:e9:88:e6:6d:43:83:
d7:2e:2c:32:4e:08:be:d2:0d:b6:92:35:a7:07:98:
0e:43:b1:bc:43:23:33:ac:e1:6e:6b:be:54:37:68:
77:90:ad:32:6d:29:22:32:61:67:79:d4:d8:57:40:
6f:7a:5b:65:6e:60:0f:4b:71:95:25:92:0e:6c:9a:
b4:a9:26:88:7d:12:c9:cf:6d:7d:47:45:dc:69:3e:
d5:8a:ab:2d:43:d3:7f:c6:7f:44:25:d1:06:3e:c9:
a3:2c:b0:ed:84:67:c5:a5:e0:bb:5e:34:e4:f7:b9:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:7C:E6:2D:09:0A:0C:2F:7B:6C:EB:50:2E:9F:64:CC:35:46:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973ee98e-595d-36d9-a82d-8c79fea7cf29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:74:ec:6a:6c:0b:33:d6:7e:88:2f:36:f5:93:c1:53:f4:09:
da:63:da:75:39:24:ff:6f:18:06:30:ba:dd:83:ec:5d:2a:cf:
83:4d:89:22:0c:39:5e:d9:36:1f:ed:31:7f:43:b6:ac:05:2a:
dc:ed:79:e6:27:54:04:79:a8:59:23:c5:53:18:0d:6e:4f:df:
55:d2:7f:57:72:58:e5:95:91:d5:a8:85:02:81:9c:66:75:73:
a2:ef:de:f9:36:48:aa:58:05:cc:09:61:c2:72:28:e5:88:c9:
f3:da:59:3b:5a:ea:65:c3:a3:87:29:dc:1b:ae:3c:2c:9c:82:
d4:22:f3:83:a2:22:dc:1a:e6:ee:21:7e:97:97:41:f1:4d:d0:
82:97:ef:e4:d2:6a:51:1a:ce:7e:51:92:8f:a4:3c:e2:1c:bb:
4f:12:18:b6:7c:9b:56:ce:cd:65:e8:2a:17:83:9c:93:75:09:
39:74:10:47:32:67:d7:16:52:35:fd:c0:1e:29:3c:d7:3e:c6:
96:5d:aa:42:67:ea:61:a6:19:c0:3e:2f:d0:7d:ee:25:40:28:
3a:88:03:d9:64:d7:e3:6c:82:6a:fc:5e:15:b4:62:e0:7b:dd:
ba:1d:c1:83:5d:f0:20:63:b0:22:65:ee:1c:ba:3a:30:08:fd:
65:bd:ca:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA5HyzZSEAyineNqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMjEyMDAwMFoXDTIzMDExNzA1MDAwMFowLzEtMCsGA1UEAxMk
MGJhZDM2YmEtZmUyZC00OGQ3LWI2NDEtZDYxYTAzMWU0ZDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzBVCihQe3u3j51SkTTEIdFwjLk91JUY+5ok
UnLSjeZH2rwIdqpp4IFlQUiXMcGoXc++UKPxXo67DumI4HBvXkJxI3OLQ1ydbFQr
xO38SIExAtdzvAIR8BBQyf/RuwQT9tOJsO+U6Bev+IoWauf9aoNTDW/U05cqjWnB
72zb4uK8rXfd8FwR1TZOQo+AMiTpiOZtQ4PXLiwyTgi+0g22kjWnB5gOQ7G8QyMz
rOFua75UN2h3kK0ybSkiMmFnedTYV0BveltlbmAPS3GVJZIObJq0qSaIfRLJz219
R0XcaT7ViqstQ9N/xn9EJdEGPsmjLLDthGfFpeC7XjTk97nMtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK0ZfOYtCQoML3ts61Aun2TMNUZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTczZWU5OGUtNTk1ZC0z
NmQ5LWE4MmQtOGM3OWZlYTdjZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfXTsamwLM9Z+iC829ZPBU/QJ2mPadTkk/28YBjC63YPsXSrPg02JIgw5
Xtk2H+0xf0O2rAUq3O155idUBHmoWSPFUxgNbk/fVdJ/V3JY5ZWR1aiFAoGcZnVz
ou/e+TZIqlgFzAlhwnIo5YjJ89pZO1rqZcOjhyncG648LJyC1CLzg6Ii3Brm7iF+
l5dB8U3Qgpfv5NJqURrOflGSj6Q84hy7TxIYtnybVs7NZegqF4Ock3UJOXQQRzJn
1xZSNf3AHik81z7Gll2qQmfqYaYZwD4v0H3uJUAoOogD2WTX42yCavxeFbRi4Hvd
uh3Bg13wIGOwImXuHLo6MAj9Zb3Khg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:20 2025 by rpki-client