Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5be301-d4dc-3e9e-a825-8be4d19de812.roa
File: bc5be301-d4dc-3e9e-a825-8be4d19de812.roa (raw, json)
Hash identifier: i4eHlOOeCESSA8BI0v/9Bw2JahfIKUtrHJo2WZLj0oQ=
Subject key identifier: CB:9B:86:AB:83:73:30:C9:11:EB:E5:25:43:D2:C1:8E:F0:91:10:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408C2F610FEDA749F452695CA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5be301-d4dc-3e9e-a825-8be4d19de812.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:2f:61:0f:ed:a7:49:f4:52:69:5c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=a2c785d3-6485-43b5-8f93-ee363290061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:16:cb:9b:d5:c4:be:51:5c:fb:91:11:cf:
67:96:3c:b2:45:0e:ba:ae:78:39:3a:6b:fd:6a:d2:
2d:30:8a:8b:f3:98:49:9f:51:09:6e:42:bc:46:53:
a1:69:d7:6e:47:1e:2c:c1:20:dd:00:58:bf:4f:e9:
92:7f:f1:3a:5c:a6:d4:9a:40:bd:dd:12:2c:a9:71:
a3:99:6a:19:38:1c:44:af:7e:a3:71:00:c0:a4:1f:
59:71:e8:82:1d:87:6d:e1:e2:fd:f7:8b:e8:79:9e:
0d:71:cf:ab:45:4e:57:ea:c3:b6:3f:fe:46:17:f5:
11:30:db:dd:8c:f0:b2:0a:1a:a7:9c:e3:dd:84:a0:
cf:72:6f:ae:6e:8f:2e:9f:b6:3b:b8:4d:77:b1:ee:
59:8d:5f:d6:dc:44:77:b8:fe:89:cd:11:8a:1a:3e:
56:e3:3a:1c:94:97:40:40:1f:cc:db:05:80:95:e3:
b3:6e:1d:96:74:7f:0e:7f:42:5d:10:8d:3f:ff:fa:
e7:25:01:48:23:05:22:9f:5c:98:fd:02:a9:0b:92:
c7:cd:eb:57:17:c4:ec:59:7d:9e:4b:e9:8f:f6:a8:
2e:13:10:95:d6:66:38:e2:53:16:3c:ec:b1:0b:63:
cb:25:15:b7:c3:70:96:6b:f8:48:a8:41:31:d7:61:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:86:AB:83:73:30:C9:11:EB:E5:25:43:D2:C1:8E:F0:91:10:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5be301-d4dc-3e9e-a825-8be4d19de812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:88:c6:e7:aa:93:f7:ed:91:11:3b:2f:c6:f1:4a:29:19:38:
64:5b:b8:84:01:fd:90:69:09:ef:46:92:39:d6:da:23:0f:be:
3a:30:1e:4a:fe:b6:07:ec:95:4d:f5:c4:c7:3e:a7:78:36:75:
bf:ec:cd:63:63:7c:bc:7f:27:98:75:3a:7d:9b:19:67:cf:4e:
8b:0f:f0:bc:fc:d5:cd:69:e1:8f:fb:04:3e:53:39:29:c3:bc:
ce:02:12:c5:d4:0d:48:ae:d3:1d:44:ef:74:73:72:77:6e:a8:
88:17:bd:b6:42:22:b8:56:19:87:7e:51:63:6d:8a:51:f2:29:
51:11:59:3a:48:a3:61:bc:9e:69:f1:36:16:a5:d3:cb:fb:ab:
1c:30:c8:52:2d:28:2a:7b:22:57:da:46:84:72:9f:c0:93:ab:
45:69:98:c7:92:8c:52:9f:44:86:81:63:d9:07:f9:d9:bb:92:
f9:00:45:35:52:f1:b4:a6:70:71:43:b8:10:95:c6:93:90:a9:
b8:e2:2b:40:11:3b:9a:77:3f:5e:0e:74:d3:8c:22:3c:0c:c4:
ed:9d:a4:f4:0c:ae:ab:0f:78:42:fd:39:35:41:ab:6d:f0:20:
4c:11:e9:c3:ec:90:fd:dc:1a:9a:c5:60:8c:75:a6:27:ab:51:
5d:ef:77:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECML2EP7adJ9FJpXKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMTEyMDAwMFoXDTIzMDIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
YTJjNzg1ZDMtNjQ4NS00M2I1LThmOTMtZWUzNjMyOTAwNjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHoWy5vVxL5RXPuREc9nljyyRQ66rng5Omv9
atItMIqL85hJn1EJbkK8RlOhadduRx4swSDdAFi/T+mSf/E6XKbUmkC93RIsqXGj
mWoZOBxEr36jcQDApB9ZceiCHYdt4eL994voeZ4Ncc+rRU5X6sO2P/5GF/URMNvd
jPCyChqnnOPdhKDPcm+ubo8un7Y7uE13se5ZjV/W3ER3uP6JzRGKGj5W4zoclJdA
QB/M2wWAleOzbh2WdH8Of0JdEI0///rnJQFIIwUin1yY/QKpC5LHzetXF8TsWX2e
S+mP9qguExCV1mY44lMWPOyxC2PLJRW3w3CWa/hIqEEx12FUTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMubhquDczDJEevlJUPSwY7wkRADMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmM1YmUzMDEtZDRkYy0z
ZTllLWE4MjUtOGJlNGQxOWRlODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmIjG56qT9+2RETsvxvFKKRk4ZFu4hAH9kGkJ70aSOdbaIw++OjAeSv62
B+yVTfXExz6neDZ1v+zNY2N8vH8nmHU6fZsZZ89Oiw/wvPzVzWnhj/sEPlM5KcO8
zgISxdQNSK7THUTvdHNyd26oiBe9tkIiuFYZh35RY22KUfIpURFZOkijYbyeafE2
FqXTy/urHDDIUi0oKnsiV9pGhHKfwJOrRWmYx5KMUp9EhoFj2Qf52buS+QBFNVLx
tKZwcUO4EJXGk5CpuOIrQBE7mnc/Xg5004wiPAzE7Z2k9Ayuqw94Qv05NUGrbfAg
TBHpw+yQ/dwamsVgjHWmJ6tRXe93XA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:15 2025 by rpki-client