Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb6f194b-3429-3a64-9ddb-c62b3a7bf6e3.roa
File: bb6f194b-3429-3a64-9ddb-c62b3a7bf6e3.roa (raw, json)
Hash identifier: xvG4z4hn4r8KAWeVr6upmDlNnUen5nm61574i03GbCg=
Subject key identifier: CA:91:16:BA:6F:C9:70:AE:17:9A:3A:27:7D:92:B1:5A:03:E6:8E:C4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584041892912EDA605937BE09960
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb6f194b-3429-3a64-9ddb-c62b3a7bf6e3.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.211.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:89:29:12:ed:a6:05:93:7b:e0:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=bc728073-76c3-4033-9777-dd0ffe0d5bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:d1:a4:60:08:10:87:64:54:5b:5e:da:e2:
73:a9:b7:39:d2:e5:75:89:a7:5a:96:1b:d3:77:b9:
17:9b:81:13:6f:0d:fb:8d:08:dc:bf:72:fd:5c:ab:
ee:22:84:62:ea:f9:0a:34:cc:ba:20:8e:b4:a6:2e:
27:db:07:0a:fe:6e:87:49:ba:5f:50:c6:7e:00:46:
9e:18:79:c3:b6:ff:13:a8:d2:3a:db:50:38:bd:ec:
10:f4:71:c8:79:b4:5c:77:7f:17:32:65:f1:18:e9:
0b:28:96:d0:43:16:37:37:9f:8e:32:da:3a:14:4f:
74:f2:d0:57:40:9e:69:bc:53:2b:2b:be:8b:79:70:
8e:98:73:22:7c:b7:15:21:59:75:bd:69:cb:e4:da:
4e:b9:13:16:ee:59:cb:50:b1:ab:35:d2:53:b6:8d:
7f:9e:2a:30:9d:bd:36:3d:cc:b7:07:5c:db:f7:b0:
3f:d4:b8:3f:86:03:bb:ff:f4:92:28:54:b0:b4:01:
53:16:6a:f6:6f:4d:9c:fc:c7:b5:fa:45:0f:4d:4f:
d4:98:5b:5d:e5:92:e0:05:20:22:d1:b8:d4:46:3a:
10:b3:7f:f0:8c:0e:b0:c1:91:40:af:24:0a:89:51:
89:05:50:74:80:c9:2d:3c:a4:6b:37:1a:9a:05:9d:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:16:BA:6F:C9:70:AE:17:9A:3A:27:7D:92:B1:5A:03:E6:8E:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb6f194b-3429-3a64-9ddb-c62b3a7bf6e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.211.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d9:9f:96:06:c1:33:c2:c9:44:7a:b1:5e:51:75:b8:d1:fd:
df:02:e3:af:35:14:68:6f:64:42:5c:d5:72:16:34:e9:e9:06:
ed:d2:b6:51:e4:e8:b8:c1:12:60:5e:ad:0e:5e:b9:33:db:bb:
ed:97:bb:7d:25:ee:05:0e:74:91:eb:03:fb:39:0e:6d:b0:bc:
3f:9e:f0:23:20:96:32:34:15:be:29:25:46:80:fe:d2:d6:2c:
28:d7:73:ec:99:fc:63:fa:ab:9a:19:79:2e:4f:9a:12:b8:c2:
c6:e7:6b:19:31:93:81:05:03:f0:fd:c1:26:66:ac:d0:01:ee:
16:94:58:ad:52:79:fe:7d:39:78:15:67:c4:22:ca:23:8d:7e:
a4:aa:03:e0:e5:90:4a:bb:fd:46:c4:9c:6e:2b:d4:44:7c:4b:
02:24:7e:3b:99:0d:8b:08:69:0b:11:99:79:48:77:30:0a:75:
ea:ab:46:af:44:5a:9e:bf:f5:1c:31:61:50:7f:d1:3c:33:09:
04:3c:4c:b8:ed:4b:0d:0c:0e:9c:a0:a9:57:3f:da:99:ba:86:
50:30:bb:cd:76:91:f6:ad:1a:40:16:63:03:f0:5d:24:ce:ea:
65:0d:f8:ed:4c:75:7e:a3:6f:c6:5d:1e:50:38:16:56:85:8c:
35:84:e5:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBBiSkS7aYFk3vgmWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
YmM3MjgwNzMtNzZjMy00MDMzLTk3NzctZGQwZmZlMGQ1YmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLbRpGAIEIdkVFte2uJzqbc50uV1iadalhvT
d7kXm4ETbw37jQjcv3L9XKvuIoRi6vkKNMy6II60pi4n2wcK/m6HSbpfUMZ+AEae
GHnDtv8TqNI621A4vewQ9HHIebRcd38XMmXxGOkLKJbQQxY3N5+OMto6FE908tBX
QJ5pvFMrK76LeXCOmHMifLcVIVl1vWnL5NpOuRMW7lnLULGrNdJTto1/niownb02
Pcy3B1zb97A/1Lg/hgO7//SSKFSwtAFTFmr2b02c/Me1+kUPTU/UmFtd5ZLgBSAi
0bjURjoQs3/wjA6wwZFAryQKiVGJBVB0gMktPKRrNxqaBZ3OiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqRFrpvyXCuF5o6J32SsVoD5o7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmI2ZjE5NGItMzQyOS0z
YTY0LTlkZGItYzYyYjNhN2JmNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTNMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXZn5YGwTPCyUR6sV5RdbjR/d8C4681FGhvZEJc1XIWNOnpBu3StlHk
6LjBEmBerQ5euTPbu+2Xu30l7gUOdJHrA/s5Dm2wvD+e8CMgljI0Fb4pJUaA/tLW
LCjXc+yZ/GP6q5oZeS5PmhK4wsbnaxkxk4EFA/D9wSZmrNAB7haUWK1Sef59OXgV
Z8QiyiONfqSqA+DlkEq7/UbEnG4r1ER8SwIkfjuZDYsIaQsRmXlIdzAKdeqrRq9E
Wp6/9RwxYVB/0TwzCQQ8TLjtSw0MDpygqVc/2pm6hlAwu812kfatGkAWYwPwXSTO
6mUN+O1MdX6jb8ZdHlA4FlaFjDWE5Vs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:53 2025 by rpki-client