Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a86bf580-1a03-3891-afe3-5bf820dc8172.roa
File: a86bf580-1a03-3891-afe3-5bf820dc8172.roa (raw, json)
Hash identifier: Y2xFWPWnEMrveFZXIVzmbYqh2RQyhGJhZgqmISN9Y6I=
Subject key identifier: EB:1B:42:F5:21:0E:B2:5E:AE:A8:43:1A:3E:70:4C:67:20:50:BE:01
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE15E778097611D7FA18DEF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a86bf580-1a03-3891-afe3-5bf820dc8172.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.141.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e1:5e:77:80:97:61:1d:7f:a1:8d:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=66d15e56-5b52-4ea6-a439-f90b0106b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:87:1c:52:7e:e2:1b:7e:4c:d6:58:ab:64:
2a:4d:23:cd:63:8e:22:30:b3:cd:85:82:55:71:5f:
f1:d5:f3:4d:d1:1b:87:0e:b0:58:5c:71:51:25:7e:
7e:e6:7c:70:55:c2:0f:31:19:f9:f7:9f:53:12:02:
b8:bd:1a:28:01:da:49:cc:5c:2d:87:e8:2f:c5:c9:
f5:a2:34:78:1b:a2:d2:17:75:79:d3:82:11:0c:ab:
01:b4:6f:3c:f3:3b:42:70:7c:ac:e1:23:11:78:76:
9d:ba:09:7d:69:0e:ed:2b:ec:8b:6d:df:e7:e1:ff:
69:6c:f7:9b:04:9a:cd:6d:d7:1f:15:bf:21:80:fd:
d1:46:d6:4b:47:14:8f:e4:10:d8:60:f3:b0:99:cd:
62:3b:6a:6e:87:42:5d:d4:6c:dc:62:fa:f9:b0:7c:
be:27:e6:30:f1:b7:6d:18:92:7a:93:92:3c:1f:70:
8a:85:35:03:10:11:20:7d:bb:d2:0f:bc:fa:ea:00:
22:1c:81:73:b5:c6:a8:80:4d:7b:aa:94:a2:d4:1f:
9a:87:dd:0e:5a:e0:d6:1e:0b:18:6b:1c:52:c2:a0:
dd:bb:36:57:9d:3e:1e:71:34:a2:34:b0:fd:6d:d5:
d1:bc:64:22:2e:e3:a7:73:4a:ba:11:5b:f1:4a:41:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:42:F5:21:0E:B2:5E:AE:A8:43:1A:3E:70:4C:67:20:50:BE:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a86bf580-1a03-3891-afe3-5bf820dc8172.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.141.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:44:f0:c8:34:12:af:f4:a1:d7:5c:77:cd:ed:0a:27:3f:03:
35:53:33:6f:f3:62:2a:a2:bf:92:53:a0:0a:cd:f8:fb:29:ce:
37:d1:86:aa:21:9e:a4:8e:90:6a:d3:a3:99:18:a9:d3:5b:2f:
d5:d8:9f:a7:35:08:4c:35:02:f4:fa:c2:c1:37:c7:d5:f4:93:
28:f4:30:ac:d7:61:4c:ab:16:42:f5:e3:2c:ed:73:3c:f2:4e:
bb:1a:ca:81:bb:7f:43:0a:35:6d:a6:97:cf:dd:fe:31:8e:80:
61:17:45:73:66:b1:4f:f9:93:73:a8:4a:23:20:40:71:fd:23:
a3:73:05:ed:03:99:81:98:19:8b:9a:8f:74:da:6f:3b:f9:ac:
f0:30:91:ad:ce:e9:74:88:db:4d:b6:b2:ad:96:ea:48:56:69:
4f:0a:f1:cf:2c:18:89:0e:1f:4d:d1:9e:dd:2c:6d:08:ab:d8:
71:25:e0:c1:b4:80:9c:04:b2:e1:85:37:eb:7c:80:51:d6:78:
ee:9a:c8:8e:8f:e1:28:2d:33:80:78:7d:a4:41:d4:54:7c:86:
c2:52:93:70:e5:5b:0a:01:8d:78:58:70:0d:e3:09:08:32:15:
cf:28:8b:b2:ea:b9:44:4e:aa:b1:b4:57:e4:1c:6e:38:f5:55:
66:fd:69:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7hXneAl2Edf6GN74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMTEyMDAwMFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjZkMTVlNTYtNWI1Mi00ZWE2LWE0MzktZjkwYjAxMDZiOWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQaHHFJ+4ht+TNZYq2QqTSPNY44iMLPNhYJV
cV/x1fNN0RuHDrBYXHFRJX5+5nxwVcIPMRn5959TEgK4vRooAdpJzFwth+gvxcn1
ojR4G6LSF3V504IRDKsBtG888ztCcHys4SMReHadugl9aQ7tK+yLbd/n4f9pbPeb
BJrNbdcfFb8hgP3RRtZLRxSP5BDYYPOwmc1iO2puh0Jd1GzcYvr5sHy+J+Yw8bdt
GJJ6k5I8H3CKhTUDEBEgfbvSD7z66gAiHIFztcaogE17qpSi1B+ah90OWuDWHgsY
axxSwqDduzZXnT4ecTSiNLD9bdXRvGQiLuOnc0q6EVvxSkFCLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsbQvUhDrJerqhDGj5wTGcgUL4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTg2YmY1ODAtMWEwMy0z
ODkxLWFmZTMtNWJmODIwZGM4MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY40AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpE8Mg0Eq/0oddcd83tCic/AzVTM2/zYiqiv5JToArN+PspzjfRhqoh
nqSOkGrTo5kYqdNbL9XYn6c1CEw1AvT6wsE3x9X0kyj0MKzXYUyrFkL14yztczzy
TrsayoG7f0MKNW2ml8/d/jGOgGEXRXNmsU/5k3OoSiMgQHH9I6NzBe0DmYGYGYua
j3Tabzv5rPAwka3O6XSI2022sq2W6khWaU8K8c8sGIkOH03Rnt0sbQir2HEl4MG0
gJwEsuGFN+t8gFHWeO6ayI6P4SgtM4B4faRB1FR8hsJSk3DlWwoBjXhYcA3jCQgy
Fc8oi7LquUROqrG0V+Qcbjj1VWb9aco=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:31 2025 by rpki-client