Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d69a02dd-01c5-301f-a280-1d9c74121c2d.roa
File: d69a02dd-01c5-301f-a280-1d9c74121c2d.roa (raw, json)
Hash identifier: P0BmwqN7KEkUgWNTdxCh2X7nvFoQNYeuSSAAapAb4/g=
Subject key identifier: 1A:33:E2:AC:CF:EE:47:84:90:48:F3:F3:A9:67:A6:64:69:F9:0E:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053C4DA610AA51F01A8C6C3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d69a02dd-01c5-301f-a280-1d9c74121c2d.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:c4:da:61:0a:a5:1f:01:a8:c6:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=5665bb66-f5a2-45ff-8952-6b3d9427c9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:d7:5c:fe:0f:81:82:0c:7e:40:97:40:52:
9a:a7:46:e8:b5:d1:3c:98:5e:f4:7f:19:0e:87:e0:
f4:0a:ed:8b:1f:77:24:46:d8:4c:43:8f:d1:5c:44:
d2:ad:a9:6c:18:0c:e0:12:ad:d1:e2:57:ae:59:14:
3f:e2:f3:82:9c:3d:be:09:a4:4a:10:c5:cd:86:34:
e1:df:aa:9c:ed:d4:8f:99:fc:fa:48:2b:9f:1c:ca:
a5:7e:ce:cf:e0:ad:c5:79:d1:41:b1:ed:ae:dd:14:
41:71:2f:c6:f5:72:b8:4f:04:95:d0:e4:ac:80:20:
57:3b:57:02:90:35:c1:c2:49:f0:56:82:7f:97:32:
55:cb:d8:d4:bc:3f:a8:06:a9:d5:cb:3e:90:32:a6:
8e:2f:6a:d7:f0:29:2e:d3:e1:d3:f8:fb:7e:cb:c2:
d3:6c:b8:d3:0b:f7:97:2b:44:28:12:20:2f:db:55:
19:be:3c:af:49:8d:78:c5:83:a6:96:bf:9f:25:0f:
8d:70:9e:0f:fb:3a:d3:af:3d:e7:36:f2:a7:ff:54:
fd:fe:b8:70:48:12:0b:18:09:c6:35:fd:a8:89:23:
40:04:9b:6b:7f:11:81:84:e5:9c:80:b5:51:ba:26:
d9:25:33:24:3b:5d:d4:42:52:ef:67:ca:19:31:35:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:E2:AC:CF:EE:47:84:90:48:F3:F3:A9:67:A6:64:69:F9:0E:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d69a02dd-01c5-301f-a280-1d9c74121c2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:46:a4:a8:f3:f3:34:c0:df:1a:1f:6e:fd:9a:5a:3f:aa:ed:
22:b4:76:c9:a1:51:9a:0c:b6:38:e6:a4:80:a8:f5:4f:4b:b4:
af:93:96:83:5b:65:b7:e7:84:5c:02:f2:b4:75:1d:25:56:a9:
28:97:bd:e7:88:f5:c0:e1:63:45:57:5a:cc:0e:85:3d:fb:ae:
04:f3:3d:91:5f:11:dd:6a:32:0c:fb:9c:e3:fd:7d:e4:a7:8c:
d2:e5:d9:69:64:a6:51:9a:bb:8f:17:2b:e0:2c:26:79:85:b7:
40:b8:ba:a2:33:db:e5:f1:35:23:96:db:54:81:39:f4:f4:b9:
cc:35:bd:72:46:e5:20:4e:78:89:ee:40:50:e7:c7:2e:e5:21:
d9:d0:1c:2e:f6:d6:29:d8:07:7a:51:2d:7d:e4:f9:5f:a3:65:
0d:9a:ad:79:78:8a:d9:d4:de:08:4a:e7:c0:4a:dd:df:64:df:
3d:cc:fe:b3:7b:7b:5f:f2:dd:0d:39:c4:c9:77:ed:45:6d:02:
72:46:ff:cb:bb:88:b6:cb:d3:80:61:4a:90:56:e8:f4:b8:d5:
d4:73:7c:79:f1:04:e7:e4:9e:fe:bd:4b:32:78:24:8b:fa:67:
9c:5e:fa:9a:9f:9f:4f:95:a1:78:4c:e3:b1:eb:96:19:79:6c:
3f:47:a4:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBTxNphCqUfAajGw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMjEyMDAwMFoXDTIzMDEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
NTY2NWJiNjYtZjVhMi00NWZmLTg5NTItNmIzZDk0MjdjOWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcjXXP4PgYIMfkCXQFKap0botdE8mF70fxkO
h+D0Cu2LH3ckRthMQ4/RXETSralsGAzgEq3R4leuWRQ/4vOCnD2+CaRKEMXNhjTh
36qc7dSPmfz6SCufHMqlfs7P4K3FedFBse2u3RRBcS/G9XK4TwSV0OSsgCBXO1cC
kDXBwknwVoJ/lzJVy9jUvD+oBqnVyz6QMqaOL2rX8Cku0+HT+Pt+y8LTbLjTC/eX
K0QoEiAv21UZvjyvSY14xYOmlr+fJQ+NcJ4P+zrTrz3nNvKn/1T9/rhwSBILGAnG
Nf2oiSNABJtrfxGBhOWcgLVRuibZJTMkO13UQlLvZ8oZMTUlrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBoz4qzP7keEkEjz86lnpmRp+Q4vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDY5YTAyZGQtMDFjNS0z
MDFmLWEyODAtMWQ5Yzc0MTIxYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKOMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAn0akqPPzNMDfGh9u/ZpaP6rtIrR2yaFRmgy2OOakgKj1T0u0r5OWg1tl
t+eEXALytHUdJVapKJe954j1wOFjRVdazA6FPfuuBPM9kV8R3WoyDPuc4/195KeM
0uXZaWSmUZq7jxcr4CwmeYW3QLi6ojPb5fE1I5bbVIE59PS5zDW9ckblIE54ie5A
UOfHLuUh2dAcLvbWKdgHelEtfeT5X6NlDZqteXiK2dTeCErnwErd32TfPcz+s3t7
X/LdDTnEyXftRW0Cckb/y7uItsvTgGFKkFbo9LjV1HN8efEE5+Se/r1LMngki/pn
nF76mp+fT5WheEzjseuWGXlsP0ekrA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:26 2025 by rpki-client