Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa4d4f4c-69d8-3f55-aeb1-a246932abc6e.roa
File: aa4d4f4c-69d8-3f55-aeb1-a246932abc6e.roa (raw, json)
Hash identifier: RAg8/8Pg8wktWAvzAI19N6tw1GPk28XdgD9WwY9atfA=
Subject key identifier: 83:44:5A:39:E4:AC:63:24:B6:7F:55:29:6D:AB:0E:9E:0E:6C:4C:B4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCED78168FB2558FE76503340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa4d4f4c-69d8-3f55-aeb1-a246932abc6e.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:d7:81:68:fb:25:58:fe:76:50:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=efcb0b3c-cef5-49b8-97ae-27db60d0804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:83:a5:8f:d8:14:11:74:e4:6e:71:3a:7f:64:
2a:97:b9:2c:15:0d:6c:96:7c:0e:e7:63:93:ed:ea:
43:1b:8d:36:b0:8e:7b:50:fc:97:dd:de:a2:71:3a:
62:fe:be:86:5a:7f:aa:90:e3:13:25:4c:6e:93:68:
49:b4:ef:cd:12:61:3e:43:b3:01:e4:8f:36:12:78:
32:44:a9:ee:02:d0:ca:20:98:0a:08:dc:5c:34:52:
c9:91:86:a1:f4:c6:d4:dc:ea:5d:7f:c0:2c:9f:ba:
fe:64:29:19:af:e2:51:02:15:a3:40:b5:23:dc:4b:
4c:75:2e:60:1b:71:70:c4:1e:b0:4e:60:22:83:66:
9d:26:aa:12:c3:5e:2f:f8:df:2f:b0:c6:6d:aa:6c:
ef:0b:43:bc:fe:dd:6c:f8:54:89:91:5a:4a:47:a7:
e8:9f:51:22:83:31:a9:57:ee:44:9f:82:21:fc:10:
9f:84:39:55:6f:d8:d0:8c:32:97:c1:32:d9:53:b9:
7d:bd:cb:67:23:88:c1:50:32:64:09:6c:72:ad:d8:
08:2f:bc:7a:fe:36:75:7d:89:7c:bd:e0:8b:33:44:
83:4e:fa:61:d4:05:d9:bc:10:05:98:9e:dd:2e:4a:
4e:41:46:94:64:c4:fd:e3:9e:fb:6e:0b:b6:ae:c5:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:44:5A:39:E4:AC:63:24:B6:7F:55:29:6D:AB:0E:9E:0E:6C:4C:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa4d4f4c-69d8-3f55-aeb1-a246932abc6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:49:07:65:35:44:11:f2:37:a6:7c:44:8f:9d:1e:56:40:e2:
e1:d3:25:d4:8a:f4:77:94:d5:d7:67:52:16:9a:1c:30:bd:80:
fb:a4:da:7c:a3:23:37:35:41:95:46:eb:62:11:c4:3f:6a:4b:
d7:3b:f1:ff:6f:d6:91:cd:61:21:94:ae:a4:3b:bc:b6:9e:ba:
e5:9e:77:2c:63:01:ca:81:6c:73:12:cf:ee:ee:4f:68:03:42:
8f:84:18:8c:cc:90:ff:34:c8:2b:b9:9d:02:05:02:45:2b:e5:
b8:8c:ea:15:2e:9b:26:2e:6c:8f:dd:45:15:19:a0:31:ca:82:
8c:d1:7b:16:bf:87:d2:3d:c4:a1:b1:c9:f9:96:3b:34:51:4b:
b7:b8:a3:e0:d2:55:4b:8a:e5:49:38:29:04:50:6f:e6:ef:50:
d6:17:1a:a0:94:7d:74:30:9a:83:2c:0f:ac:f7:b6:34:e9:b6:
fc:e3:da:58:17:26:0c:15:0f:4a:80:4e:5d:b7:92:d4:eb:dd:
3c:ed:d9:18:67:90:db:78:16:94:20:7c:b0:90:49:27:9c:7e:
96:18:8e:7f:b0:08:5a:d9:67:28:aa:90:cb:3c:03:7a:6a:a4:
d0:06:72:c5:6e:3f:eb:e5:5c:2e:6c:65:41:3d:da:ac:5b:9c:
a9:26:0e:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/O14Fo+yVY/nZQM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZWZjYjBiM2MtY2VmNS00OWI4LTk3YWUtMjdkYjYwZDA4MDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIOlj9gUEXTkbnE6f2Qql7ksFQ1slnwO52OT
7epDG402sI57UPyX3d6icTpi/r6GWn+qkOMTJUxuk2hJtO/NEmE+Q7MB5I82Engy
RKnuAtDKIJgKCNxcNFLJkYah9MbU3Opdf8Asn7r+ZCkZr+JRAhWjQLUj3EtMdS5g
G3FwxB6wTmAig2adJqoSw14v+N8vsMZtqmzvC0O8/t1s+FSJkVpKR6fon1EigzGp
V+5En4Ih/BCfhDlVb9jQjDKXwTLZU7l9vctnI4jBUDJkCWxyrdgIL7x6/jZ1fYl8
veCLM0SDTvph1AXZvBAFmJ7dLkpOQUaUZMT94577bgu2rsWOfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINEWjnkrGMktn9VKW2rDp4ObEy0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWE0ZDRmNGMtNjlkOC0z
ZjU1LWFlYjEtYTI0NjkzMmFiYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1JB2U1RBHyN6Z8RI+dHlZA4uHTJdSK9HeU1ddnUhaaHDC9gPuk2nyj
Izc1QZVG62IRxD9qS9c78f9v1pHNYSGUrqQ7vLaeuuWedyxjAcqBbHMSz+7uT2gD
Qo+EGIzMkP80yCu5nQIFAkUr5biM6hUumyYubI/dRRUZoDHKgozRexa/h9I9xKGx
yfmWOzRRS7e4o+DSVUuK5Uk4KQRQb+bvUNYXGqCUfXQwmoMsD6z3tjTptvzj2lgX
JgwVD0qATl23ktTr3Tzt2RhnkNt4FpQgfLCQSSecfpYYjn+wCFrZZyiqkMs8A3pq
pNAGcsVuP+vlXC5sZUE92qxbnKkmDps=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:28 2025 by rpki-client