Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7d23f67-892c-31cf-aa7f-ce2323d9261e.roa
File: c7d23f67-892c-31cf-aa7f-ce2323d9261e.roa (raw, json)
Hash identifier: THEBDIxt81UmGC6UsN82gZgTYz7eTP4Q1dlo1aCGunw=
Subject key identifier: 6E:CB:75:D9:55:6F:2A:64:4C:E4:CB:10:2B:89:CF:DE:9A:B4:FD:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840419F76878210A48C531D2D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7d23f67-892c-31cf-aa7f-ce2323d9261e.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:9f:76:87:82:10:a4:8c:53:1d:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=971e6242-6eb8-4f5e-94ae-5ed9029708d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:12:8b:c6:e1:c2:03:50:9f:5e:68:18:e4:
b2:c0:64:1f:12:4f:cd:2d:a0:66:7f:56:0a:a7:cc:
2c:69:c2:e0:f7:25:10:df:00:b4:4a:32:52:07:3c:
fb:69:6c:8b:6d:0e:51:6b:d3:fa:9d:3a:5c:71:6d:
bb:c7:49:c7:d3:97:38:70:f9:87:cb:08:fa:c3:87:
e2:59:fd:23:62:58:ee:32:f2:54:76:e5:ef:b7:07:
6d:14:55:bc:56:18:26:5b:b9:c9:4a:29:ee:52:e2:
66:7e:0f:9e:7b:f1:32:a9:79:31:59:68:0d:cf:65:
06:76:b1:1e:87:9e:b9:18:95:4d:98:ac:89:bd:77:
07:a0:0a:54:b1:d1:cc:e7:b9:54:22:95:4f:65:bb:
5c:7f:84:13:0e:77:73:28:06:cf:ad:37:82:c5:d1:
e0:66:e2:4a:bd:eb:3b:6c:6d:60:e3:ce:dd:92:20:
96:1c:0a:32:3d:1e:b6:5c:70:7c:45:c3:71:88:44:
ca:9e:ac:b5:ff:03:f3:b6:d1:e4:d0:07:1a:11:e3:
fd:5c:3b:f1:aa:dc:fc:9a:86:c3:8c:aa:06:7e:e1:
f8:f1:3e:f1:1d:71:13:7c:c4:88:b3:9f:af:9a:82:
fc:fd:74:03:ae:77:7b:83:ee:b7:47:81:81:d8:8b:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:75:D9:55:6F:2A:64:4C:E4:CB:10:2B:89:CF:DE:9A:B4:FD:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7d23f67-892c-31cf-aa7f-ce2323d9261e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:65:94:af:7e:4f:e5:0e:3c:0f:fb:82:17:9a:5e:e4:6c:41:
7d:d0:44:b9:11:ea:a5:21:95:da:e2:35:37:7e:87:56:c0:d3:
70:b2:0a:2a:50:87:f8:fd:ed:89:06:b6:25:35:ec:cc:ab:47:
01:e5:0f:16:80:cc:ef:ae:19:7a:df:cd:cf:3d:4f:e5:c9:a6:
35:fa:d4:da:9e:a2:e7:10:c9:84:81:11:11:2b:91:a4:27:35:
3f:69:c6:40:e1:eb:4d:ed:63:4d:f1:ca:ec:a4:9f:ec:0f:a4:
bf:14:da:17:cc:b8:8b:f2:66:8b:45:2e:04:1b:98:24:e0:bb:
8d:2a:ab:74:8d:10:b1:91:47:e8:10:df:d4:9e:35:76:64:30:
c7:e8:8c:fe:e7:cd:6b:ae:0d:cc:15:74:c2:15:5a:2c:cf:19:
f4:02:fa:85:44:dd:f0:c6:23:30:80:92:13:9d:53:9d:31:b7:
aa:3b:d8:11:8b:a6:d7:90:15:e7:39:ed:7f:98:4b:73:4b:fa:
c0:29:a7:87:00:d0:4c:fa:1b:68:d6:81:91:72:56:17:58:3e:
7b:a1:56:dd:a0:09:4e:02:5b:93:73:a1:bd:ec:ce:c9:fd:90:
b7:18:9b:15:55:5d:10:cc:33:32:95:23:f5:fe:59:32:2c:f5:
4a:da:e4:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBBn3aHghCkjFMdLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
OTcxZTYyNDItNmViOC00ZjVlLTk0YWUtNWVkOTAyOTcwOGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZUSi8bhwgNQn15oGOSywGQfEk/NLaBmf1YK
p8wsacLg9yUQ3wC0SjJSBzz7aWyLbQ5Ra9P6nTpccW27x0nH05c4cPmHywj6w4fi
Wf0jYljuMvJUduXvtwdtFFW8VhgmW7nJSinuUuJmfg+ee/EyqXkxWWgNz2UGdrEe
h565GJVNmKyJvXcHoApUsdHM57lUIpVPZbtcf4QTDndzKAbPrTeCxdHgZuJKves7
bG1g487dkiCWHAoyPR62XHB8RcNxiETKnqy1/wPzttHk0AcaEeP9XDvxqtz8mobD
jKoGfuH48T7xHXETfMSIs5+vmoL8/XQDrnd7g+63R4GB2ItdzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG7LddlVbypkTOTLECuJz96atP05MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzdkMjNmNjctODkyYy0z
MWNmLWFhN2YtY2UyMzIzZDkyNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAY1YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmmWUr35P5Q48D/uCF5pe5GxBfdBEuRHqpSGV2uI1N36HVsDTcLIKKlCH
+P3tiQa2JTXszKtHAeUPFoDM764Zet/Nzz1P5cmmNfrU2p6i5xDJhIERESuRpCc1
P2nGQOHrTe1jTfHK7KSf7A+kvxTaF8y4i/Jmi0UuBBuYJOC7jSqrdI0QsZFH6BDf
1J41dmQwx+iM/ufNa64NzBV0whVaLM8Z9AL6hUTd8MYjMICSE51TnTG3qjvYEYum
15AV5zntf5hLc0v6wCmnhwDQTPobaNaBkXJWF1g+e6FW3aAJTgJbk3OhvezOyf2Q
txibFVVdEMwzMpUj9f5ZMiz1Strkzg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:36 2025 by rpki-client