Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c849fe29-6c59-325d-9e32-14e50e404cb7.roa
File: c849fe29-6c59-325d-9e32-14e50e404cb7.roa (raw, json)
Hash identifier: Jtn5GsJWB/xN4X494I4Bkm9lOkN1sLa+6zmvtGpKgrQ=
Subject key identifier: 27:6E:13:72:89:50:D7:50:4A:7A:34:55:6C:CE:33:A2:10:61:CD:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584024D53FE43234B9F4FFE223E8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c849fe29-6c59-325d-9e32-14e50e404cb7.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:d5:3f:e4:32:34:b9:f4:ff:e2:23:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=04ff9fb9-ecce-42db-b034-f8e6ce5f8954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:c3:c4:ce:a5:26:46:94:e4:5a:ae:5e:d5:
f9:18:3d:30:ff:17:7f:96:22:93:f4:a0:52:ec:71:
37:31:90:be:5b:31:b5:a8:1c:6c:b0:d9:9f:c2:65:
62:8c:49:39:46:82:bc:54:0b:c1:b7:de:72:71:9f:
e7:df:66:a8:65:c8:8e:4c:35:83:c3:8c:c4:0a:dc:
74:2b:b0:0f:c2:ba:f5:74:98:a8:93:d8:50:1a:1a:
22:21:1b:33:0c:66:fb:2a:36:93:05:10:57:e2:5c:
98:f9:4d:7f:0d:a8:08:82:db:bb:29:1f:6f:d9:11:
64:2f:5e:4b:7b:d4:79:68:07:58:ce:2a:d3:b6:86:
27:91:92:c8:28:9e:3e:8d:bc:cf:32:67:76:18:3f:
46:c7:b0:d2:e7:28:e7:b2:57:ff:f6:45:ec:63:78:
4b:37:9a:d6:fd:0e:bd:97:1c:20:c9:39:bd:f9:b7:
91:b0:7c:48:62:87:31:db:08:ac:6a:db:ee:cb:be:
14:50:fd:8e:6a:65:81:55:67:7f:3a:44:8c:30:e7:
b0:e6:87:9d:d3:b3:e4:37:ee:7f:98:0d:07:22:b7:
c2:1d:70:37:c2:fa:19:0d:fa:ed:0f:72:c4:a8:10:
b1:d5:b6:57:eb:8f:ed:41:66:ba:bc:ca:df:15:4e:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6E:13:72:89:50:D7:50:4A:7A:34:55:6C:CE:33:A2:10:61:CD:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c849fe29-6c59-325d-9e32-14e50e404cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ed:f3:f1:9a:94:9d:10:8c:cd:98:f0:66:1d:76:bf:c3:4a:
bd:b3:7a:2a:d8:17:85:5f:80:2e:01:21:a1:19:97:92:ec:7e:
dc:54:e7:a4:d2:75:de:a5:f5:ea:3a:b0:a7:c4:f1:cb:0d:3e:
de:07:40:12:97:37:4c:a1:fe:30:6b:d4:40:b5:4e:03:13:56:
e1:43:5b:be:76:64:95:03:cb:e9:59:57:05:b3:ae:08:33:12:
f6:40:07:44:c4:e5:25:dc:c6:ff:4b:22:c8:bc:db:29:a9:86:
cf:d8:f3:c6:f8:42:15:9e:a5:26:b9:b7:2d:d1:3f:2d:b5:0f:
36:33:e7:3c:3a:cb:a9:35:17:a6:fb:a3:2b:af:7d:d1:f5:aa:
78:a1:a6:16:70:3c:d6:db:1b:59:5d:4a:3f:be:c2:fd:6e:c2:
bd:f4:c0:2c:da:e7:71:57:dc:7b:9d:64:c7:12:30:3a:8c:a6:
86:d2:7b:16:21:97:c8:ac:cf:67:77:4a:a5:54:fe:3a:d5:42:
0b:ae:d8:a1:cb:b8:be:e7:f7:56:48:59:36:9a:2d:70:ba:e6:
8b:69:bb:b2:fc:12:12:1b:c9:18:00:da:05:7d:92:81:c8:2a:
e1:8b:c6:ad:da:ff:5c:c9:6f:3c:ac:26:05:5a:a8:61:65:8f:
4b:e2:15:9a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAk1T/kMjS59P/iI+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
MDRmZjlmYjktZWNjZS00MmRiLWIwMzQtZjhlNmNlNWY4OTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXbDxM6lJkaU5FquXtX5GD0w/xd/liKT9KBS
7HE3MZC+WzG1qBxssNmfwmVijEk5RoK8VAvBt95ycZ/n32aoZciOTDWDw4zECtx0
K7APwrr1dJiok9hQGhoiIRszDGb7KjaTBRBX4lyY+U1/DagIgtu7KR9v2RFkL15L
e9R5aAdYzirTtoYnkZLIKJ4+jbzPMmd2GD9Gx7DS5yjnslf/9kXsY3hLN5rW/Q69
lxwgyTm9+beRsHxIYocx2wisatvuy74UUP2OamWBVWd/OkSMMOew5oed07PkN+5/
mA0HIrfCHXA3wvoZDfrtD3LEqBCx1bZX64/tQWa6vMrfFU6G3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCduE3KJUNdQSno0VWzOM6IQYc36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzg0OWZlMjktNmM1OS0z
MjVkLTllMzItMTRlNTBlNDA0Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKu3z8ZqUnRCMzZjwZh12v8NKvbN6KtgXhV+ALgEhoRmXkux+3FTnpNJ1
3qX16jqwp8Txyw0+3gdAEpc3TKH+MGvUQLVOAxNW4UNbvnZklQPL6VlXBbOuCDMS
9kAHRMTlJdzG/0siyLzbKamGz9jzxvhCFZ6lJrm3LdE/LbUPNjPnPDrLqTUXpvuj
K6990fWqeKGmFnA81tsbWV1KP77C/W7CvfTALNrncVfce51kxxIwOoymhtJ7FiGX
yKzPZ3dKpVT+OtVCC67Yocu4vuf3VkhZNpotcLrmi2m7svwSEhvJGADaBX2Sgcgq
4YvGrdr/XMlvPKwmBVqoYWWPS+IVmg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:36 2025 by rpki-client