Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf73cb1d-1f8b-3de5-86f4-5e483947797f.roa
File: cf73cb1d-1f8b-3de5-86f4-5e483947797f.roa (raw, json)
Hash identifier: /C+EPxfXAytO11sgb8eONdkvaZO0SJnvtj9TuWBon6w=
Subject key identifier: 8E:D0:10:C3:65:71:87:A6:76:4D:4D:C2:76:4A:1F:8C:0A:3F:F3:5E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD1C727D4B6E939A340190400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf73cb1d-1f8b-3de5-86f4-5e483947797f.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:c7:27:d4:b6:e9:39:a3:40:19:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=dfd69b71-55ab-42cc-975e-f3cf4a918714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:65:97:a5:6c:da:27:92:f5:78:13:8c:9d:
b0:3b:d0:c8:09:ac:56:31:28:47:56:92:39:35:31:
78:40:dd:6a:4b:ad:3e:6a:d1:d8:a1:76:e4:c2:05:
42:fb:60:6e:48:62:f6:6a:c9:9f:b7:58:34:60:46:
04:ad:8c:66:93:ce:4e:e6:67:e4:8e:22:9b:3b:ce:
71:92:89:5c:e3:f7:ee:8e:78:df:9a:0e:7d:ee:51:
32:14:d8:29:25:1e:0e:f2:4b:1b:fa:b2:a2:b8:1b:
99:59:dc:d9:68:97:81:04:23:63:66:b6:c1:ae:d3:
58:ec:ce:47:a4:45:05:84:0b:61:fe:18:53:1d:7a:
57:76:cd:ef:6c:11:52:5d:71:97:be:04:b9:a4:1d:
05:15:33:bb:92:bb:89:4e:29:19:7f:bb:c2:7b:9f:
2b:66:f5:b0:ad:c4:d9:91:ac:3b:7c:0c:ca:14:5d:
8c:05:da:49:66:8c:74:3e:0a:b0:b0:52:20:d0:38:
3b:ac:e4:6d:40:28:ee:65:0d:ad:48:94:8f:8d:9b:
4f:e7:e5:00:f9:64:17:e8:f6:b9:ee:47:54:ef:7d:
25:36:3d:4b:27:46:0f:1d:28:0f:10:88:33:9e:19:
7a:cb:fd:17:85:c1:c2:3b:e4:e7:29:94:11:4e:2d:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:10:C3:65:71:87:A6:76:4D:4D:C2:76:4A:1F:8C:0A:3F:F3:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf73cb1d-1f8b-3de5-86f4-5e483947797f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:4f:92:51:73:09:05:76:be:be:40:1b:d4:8b:2d:a7:34:71:
2d:2f:1f:76:5a:0e:74:fb:59:a2:99:22:08:83:b7:c7:66:77:
ed:c8:0d:e7:f6:45:93:bd:2a:fa:62:34:b6:f1:ec:af:24:bd:
12:62:84:e9:59:2e:bf:6b:8e:3a:41:17:40:48:fa:76:22:da:
cc:8b:e9:7f:b5:63:d7:73:0d:8e:b5:e5:62:9d:17:ea:e9:ba:
1b:e1:df:fe:9f:4a:2d:b9:bd:75:4d:63:20:c5:b7:95:2c:5b:
54:3d:ee:06:30:54:2c:27:61:2a:a9:da:41:54:b3:31:40:a8:
c5:2f:5c:f0:f0:6b:22:a4:62:f2:55:5c:50:88:47:69:8c:1c:
80:56:44:11:da:94:e9:74:84:e6:6f:58:21:b3:aa:97:9c:59:
9c:0c:8c:68:fa:6b:a1:81:08:e6:74:a1:ca:e1:1a:7b:22:ab:
3e:69:a3:d6:d7:ec:55:df:be:93:98:3a:b1:14:6c:f6:8d:e4:
38:f8:b1:4e:85:47:61:74:35:6c:32:d3:0a:57:01:11:81:c8:
c3:b4:3e:99:d8:11:31:f3:6a:9a:db:9a:21:d4:ad:2c:72:a1:
f7:e8:d5:c2:47:ed:0a:e5:e5:30:2f:06:a9:44:16:5c:14:94:
9d:77:2c:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/RxyfUtuk5o0AZBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNTEyMDAwMFoXDTIyMTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGZkNjliNzEtNTVhYi00MmNjLTk3NWUtZjNjZjRhOTE4NzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Vll6Vs2ieS9XgTjJ2wO9DICaxWMShHVpI5
NTF4QN1qS60+atHYoXbkwgVC+2BuSGL2asmft1g0YEYErYxmk85O5mfkjiKbO85x
kolc4/fujnjfmg597lEyFNgpJR4O8ksb+rKiuBuZWdzZaJeBBCNjZrbBrtNY7M5H
pEUFhAth/hhTHXpXds3vbBFSXXGXvgS5pB0FFTO7kruJTikZf7vCe58rZvWwrcTZ
kaw7fAzKFF2MBdpJZox0PgqwsFIg0Dg7rORtQCjuZQ2tSJSPjZtP5+UA+WQX6Pa5
7kdU730lNj1LJ0YPHSgPEIgznhl6y/0XhcHCO+TnKZQRTi0I0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI7QEMNlcYemdk1NwnZKH4wKP/NeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2Y3M2NiMWQtMWY4Yi0z
ZGU1LTg2ZjQtNWU0ODM5NDc3OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfE+SUXMJBXa+vkAb1IstpzRxLS8fdloOdPtZopkiCIO3x2Z37cgN5/ZF
k70q+mI0tvHsryS9EmKE6Vkuv2uOOkEXQEj6diLazIvpf7Vj13MNjrXlYp0X6um6
G+Hf/p9KLbm9dU1jIMW3lSxbVD3uBjBULCdhKqnaQVSzMUCoxS9c8PBrIqRi8lVc
UIhHaYwcgFZEEdqU6XSE5m9YIbOql5xZnAyMaPproYEI5nShyuEaeyKrPmmj1tfs
Vd++k5g6sRRs9o3kOPixToVHYXQ1bDLTClcBEYHIw7Q+mdgRMfNqmtuaIdStLHKh
9+jVwkftCuXlMC8GqUQWXBSUnXcsMw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:08 2025 by rpki-client