Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7cde3c3-f383-39f2-946b-a31e39b2483a.roa
File: a7cde3c3-f383-39f2-946b-a31e39b2483a.roa (raw, json)
Hash identifier: Ca3SzrRDHJX08ryoYcOG4yj5mFGomtFSosg0ZXHqA+s=
Subject key identifier: 9A:01:24:62:9F:E5:8B:86:42:17:64:E9:38:FF:9B:65:D1:92:4A:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F48AC94AEFC2C54901B2500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7cde3c3-f383-39f2-946b-a31e39b2483a.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 143.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:48:ac:94:ae:fc:2c:54:90:1b:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=1cdb3217-ef1c-4aa2-9b75-d45143f3a2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:2d:9d:e4:43:45:63:cc:c0:51:48:03:fb:
5e:98:48:6c:7d:7d:11:9e:07:1e:a8:dc:73:9a:fa:
f3:d7:88:a0:15:93:29:7d:90:9f:68:5f:61:5a:11:
de:4d:14:4a:e0:35:67:db:bb:5c:9c:19:76:62:be:
59:1b:16:e2:48:b2:7f:77:f7:f1:1a:ed:ec:22:a5:
52:e5:14:89:db:33:b6:ee:a7:0c:bc:53:7b:9e:f6:
4e:bd:9a:ba:81:23:55:9c:fc:dc:8a:d6:38:99:af:
98:5e:e5:7d:28:62:29:9b:3d:59:90:eb:b4:9f:ae:
59:4f:e3:74:74:97:86:88:50:39:34:5f:ea:eb:27:
10:ba:f5:04:b9:1a:72:a2:9e:e3:f5:27:f9:86:ff:
74:0f:1d:30:d6:be:a1:b8:08:4b:d8:a2:52:c2:9b:
4b:ca:be:91:6d:ee:5b:29:50:f9:1a:e8:b1:1a:e8:
78:d5:fe:df:50:28:41:50:69:97:e1:36:af:18:79:
39:54:a2:ac:9f:47:b2:be:fe:b1:27:62:08:0d:09:
91:63:ad:4c:7c:ce:2e:f8:b9:b1:4c:a4:5f:f4:a0:
34:68:2c:d4:f8:ed:13:19:e7:15:4b:54:51:6b:66:
54:9b:ab:8f:90:05:06:c9:3d:6e:ef:f6:81:46:57:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:01:24:62:9F:E5:8B:86:42:17:64:E9:38:FF:9B:65:D1:92:4A:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7cde3c3-f383-39f2-946b-a31e39b2483a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:56:64:fa:43:97:51:f1:cf:ce:a8:33:c0:47:16:49:59:10:
a1:8a:f4:db:d4:83:cf:ca:04:d1:b2:b8:d9:78:8e:2d:5b:22:
dd:04:a3:cc:d8:59:54:10:d5:52:de:32:0a:1d:8b:19:74:2d:
b8:9f:8f:42:ab:aa:17:09:8e:e5:69:ff:42:cc:11:e9:4a:ec:
3a:4d:5c:9c:10:99:4c:0a:ff:fd:f4:48:0e:1e:11:4a:57:39:
29:27:b4:9f:d8:de:2f:c0:23:5f:e7:03:e6:ce:b8:bf:dc:dd:
f8:3c:6c:96:66:3d:47:6c:20:ab:6a:ad:38:53:0a:9b:5c:0a:
eb:75:55:96:9c:d9:de:68:a9:9b:bb:90:c0:f8:fb:c8:04:c0:
d0:05:6b:47:eb:a5:1b:d0:76:74:14:31:c5:a4:4a:78:ad:03:
14:8e:87:ea:73:89:f8:72:00:c6:dd:12:e1:c7:0a:11:85:4c:
66:7e:6a:09:44:2a:c3:4e:b8:cf:63:9c:47:be:60:1e:39:9b:
f3:93:15:dd:43:a1:81:86:ea:19:f0:1d:48:62:62:fa:97:6d:
25:6c:cd:a0:f5:02:5d:fa:bf:a3:56:45:e7:20:dc:bc:30:14:
7d:94:6d:27:31:98:92:d5:c1:07:70:a1:80:bf:0f:b2:56:d3:
6e:16:d9:f6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBfSKyUrvwsVJAbJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MWNkYjMyMTctZWYxYy00YWEyLTliNzUtZDQ1MTQzZjNhMmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky0tneRDRWPMwFFIA/temEhsfX0RngceqNxz
mvrz14igFZMpfZCfaF9hWhHeTRRK4DVn27tcnBl2Yr5ZGxbiSLJ/d/fxGu3sIqVS
5RSJ2zO27qcMvFN7nvZOvZq6gSNVnPzcitY4ma+YXuV9KGIpmz1ZkOu0n65ZT+N0
dJeGiFA5NF/q6ycQuvUEuRpyop7j9Sf5hv90Dx0w1r6huAhL2KJSwptLyr6Rbe5b
KVD5GuixGuh41f7fUChBUGmX4TavGHk5VKKsn0eyvv6xJ2IIDQmRY61MfM4u+Lmx
TKRf9KA0aCzU+O0TGecVS1RRa2ZUm6uPkAUGyT1u7/aBRlcRGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJoBJGKf5YuGQhdk6Tj/m2XRkkrmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTdjZGUzYzMtZjM4My0z
OWYyLTk0NmItYTMxZTM5YjI0ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj+MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArlZk+kOXUfHPzqgzwEcWSVkQoYr029SDz8oE0bK42XiOLVsi3QSjzNhZ
VBDVUt4yCh2LGXQtuJ+PQquqFwmO5Wn/QswR6UrsOk1cnBCZTAr//fRIDh4RSlc5
KSe0n9jeL8AjX+cD5s64v9zd+DxslmY9R2wgq2qtOFMKm1wK63VVlpzZ3mipm7uQ
wPj7yATA0AVrR+ulG9B2dBQxxaRKeK0DFI6H6nOJ+HIAxt0S4ccKEYVMZn5qCUQq
w064z2OcR75gHjmb85MV3UOhgYbqGfAdSGJi+pdtJWzNoPUCXfq/o1ZF5yDcvDAU
fZRtJzGYktXBB3ChgL8PslbTbhbZ9g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:56 2023 by rpki-client on console-fra.rpki-client.org