Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc834729-a13a-3d13-9b34-85fbcde05be3.roa
File: bc834729-a13a-3d13-9b34-85fbcde05be3.roa (raw, json)
Hash identifier: c3bZyT9IaxYCFdiNRcOkcGwnKEMsvFqge4r9vHo0zKA=
Subject key identifier: 8A:CB:FF:21:ED:D3:E4:44:50:25:D6:70:FC:BF:62:55:96:FF:87:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C541CDCC23D6F835AFFB380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc834729-a13a-3d13-9b34-85fbcde05be3.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:54:1c:dc:c2:3d:6f:83:5a:ff:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=94c13d0b-c8e1-403e-943c-10c3b5606cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:1f:5a:4f:13:5f:5c:c5:55:68:f6:84:2f:
07:46:d4:6e:81:4a:07:2f:f5:d4:d1:ee:f1:9c:53:
30:f9:81:10:84:45:75:e1:51:5a:c7:c5:60:eb:98:
59:ce:d3:ed:a2:dc:bc:cb:ea:5c:73:77:2c:a1:04:
99:29:d8:ef:60:2e:1c:af:9f:51:13:d5:22:4b:b0:
ca:af:97:33:5a:fd:1b:3f:d4:80:ac:d8:8a:28:93:
c1:66:f3:b0:c7:44:62:74:65:8b:52:7d:ae:16:59:
f0:ed:a3:1c:0f:48:25:bd:dc:51:6f:35:a9:47:e2:
02:1f:a0:03:ab:2e:8f:ac:d9:a2:9e:cf:7e:15:89:
40:af:e6:ae:db:ca:2e:7b:94:c2:19:da:46:d9:f4:
9d:c2:ae:9b:5a:97:95:11:53:4a:c6:09:1d:7a:63:
16:ab:d3:ea:d2:9d:52:9b:25:b7:3d:6b:91:45:6f:
fe:ab:b2:49:52:c7:29:8a:5d:c2:73:fa:0f:70:52:
ca:e0:7f:19:b0:9e:03:47:19:2f:cd:7c:5e:d7:0c:
9a:d9:d6:18:7e:28:49:c9:bf:8f:ae:d8:47:f3:5f:
75:fe:17:de:88:db:9b:5b:eb:1d:8f:0b:46:22:97:
9a:e7:d5:4f:f2:44:f8:55:8b:86:44:08:54:f9:58:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:FF:21:ED:D3:E4:44:50:25:D6:70:FC:BF:62:55:96:FF:87:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc834729-a13a-3d13-9b34-85fbcde05be3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:06:d1:99:41:3b:37:6f:1c:5d:db:98:de:12:df:68:96:ff:
9f:69:e2:98:0e:28:72:4f:6a:3b:06:9e:5f:59:87:72:6e:dd:
ee:13:b0:bb:12:93:66:d1:dd:72:50:56:47:81:43:2e:10:c2:
bc:fc:47:94:74:95:cf:14:e4:b0:12:9a:61:22:91:94:ab:25:
65:b5:52:c9:3a:5e:6e:23:6f:e2:8f:9a:4b:f4:3c:41:0f:3a:
55:1e:6a:c3:39:c6:79:5b:d8:c1:e6:fb:6c:08:05:50:23:51:
90:d8:db:7b:ae:2a:bc:1f:b2:4b:f0:74:44:b3:62:5b:ed:84:
1c:19:d1:90:91:af:b6:2d:d2:cb:86:54:96:6a:26:0b:f2:9a:
9b:e3:51:75:a4:26:88:c4:f9:60:45:b2:ba:42:34:c8:9c:ff:
61:ca:39:9b:b6:26:9e:9a:a1:e9:19:ae:63:68:e6:14:bb:a4:
e4:1f:fb:bc:38:56:f7:f4:a3:06:f8:1a:47:aa:82:85:bc:be:
56:ea:c5:82:07:3d:9f:94:35:ef:ff:47:b4:4c:2e:e6:79:0a:
58:59:69:b7:52:a3:d5:1f:6a:32:e9:8a:c7:ec:10:3f:7f:1b:
91:75:de:e2:a2:fc:3d:e7:56:0e:a0:ae:06:3e:c5:cf:ce:f9:
99:00:2a:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0MVBzcwj1vg1r/s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
OTRjMTNkMGItYzhlMS00MDNlLTk0M2MtMTBjM2I1NjA2Y2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye8fWk8TX1zFVWj2hC8HRtRugUoHL/XU0e7x
nFMw+YEQhEV14VFax8Vg65hZztPtoty8y+pcc3csoQSZKdjvYC4cr59RE9UiS7DK
r5czWv0bP9SArNiKKJPBZvOwx0RidGWLUn2uFlnw7aMcD0glvdxRbzWpR+ICH6AD
qy6PrNmins9+FYlAr+au28oue5TCGdpG2fSdwq6bWpeVEVNKxgkdemMWq9Pq0p1S
myW3PWuRRW/+q7JJUscpil3Cc/oPcFLK4H8ZsJ4DRxkvzXxe1wya2dYYfihJyb+P
rthH8191/hfeiNubW+sdjwtGIpea59VP8kT4VYuGRAhU+VjWEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrL/yHt0+REUCXWcPy/YlWW/4cCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmM4MzQ3MjktYTEzYS0z
ZDEzLTliMzQtODVmYmNkZTA1YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYG0ZlBOzdvHF3bmN4S32iW/59p4pgOKHJPajsGnl9Zh3Ju3e4TsLsS
k2bR3XJQVkeBQy4Qwrz8R5R0lc8U5LASmmEikZSrJWW1Usk6Xm4jb+KPmkv0PEEP
OlUeasM5xnlb2MHm+2wIBVAjUZDY23uuKrwfskvwdESzYlvthBwZ0ZCRr7Yt0suG
VJZqJgvympvjUXWkJojE+WBFsrpCNMic/2HKOZu2Jp6aoekZrmNo5hS7pOQf+7w4
Vvf0owb4GkeqgoW8vlbqxYIHPZ+UNe//R7RMLuZ5ClhZabdSo9UfajLpisfsED9/
G5F13uKi/D3nVg6grgY+xc/O+ZkAKuw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:46 2025 by rpki-client