Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7a13f85-8f31-31b1-9da5-058a900e7f29.roa
File: d7a13f85-8f31-31b1-9da5-058a900e7f29.roa (raw, json)
Hash identifier: ghU9y8mJ2RCK1jVh1z5HBF1usPqMGgc179GjXX4C7oI=
Subject key identifier: 59:A2:47:43:D3:62:88:7E:56:39:E8:71:D3:45:E3:15:38:72:0E:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BE018745BDB577E1D6F7640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7a13f85-8f31-31b1-9da5-058a900e7f29.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 156.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:e0:18:74:5b:db:57:7e:1d:6f:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=9846db89-0f88-4015-9187-4f1eea83fe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:95:52:c0:7e:5c:86:58:6e:7d:b3:66:b2:
e4:f2:8d:74:ed:1f:44:d1:67:b7:60:79:f4:2b:4b:
f4:24:d9:d5:e9:c6:33:1f:d5:94:d4:55:6c:76:df:
94:7a:e4:37:bd:fb:52:3c:ed:ea:14:81:86:c9:2d:
78:3f:1f:b8:59:2e:39:b3:ca:bb:00:7f:94:7e:f3:
ee:bf:93:f9:68:6e:86:b4:42:a0:19:7e:15:cf:f2:
a4:f9:49:76:48:b6:47:38:27:cc:2d:ce:12:3f:4a:
3f:32:de:76:2e:11:2c:19:81:14:72:bc:93:53:8a:
6f:27:b8:cd:49:d0:44:e7:fd:ea:d2:9f:23:27:32:
05:70:54:b3:9b:5d:8c:31:d5:c6:d9:f4:0b:a8:ca:
c4:94:a7:6b:46:08:7f:a5:7a:be:a2:b0:51:75:a9:
aa:3d:1a:b2:f1:6a:84:f2:ce:f1:fb:91:2f:27:e1:
81:9a:91:dc:32:be:ce:ef:4a:11:8b:44:9a:51:b7:
4a:60:7b:cd:b1:cd:23:a9:93:57:1e:cf:7e:20:b8:
8f:e9:c5:07:41:ab:84:75:08:08:fd:50:70:2a:74:
43:16:a3:fe:51:5b:30:dc:1f:e0:cb:db:65:f2:2a:
a5:d7:7a:c8:22:db:a9:7c:f2:1f:4f:e9:c1:77:d0:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:47:43:D3:62:88:7E:56:39:E8:71:D3:45:E3:15:38:72:0E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7a13f85-8f31-31b1-9da5-058a900e7f29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6a:7f:87:e7:30:c8:c0:b4:97:65:e7:1c:b0:c4:56:bf:d5:
13:4a:e5:d2:53:46:db:a9:b3:7b:a4:58:fa:3c:0c:09:38:cb:
05:27:ca:45:5d:b7:9f:2a:4b:4c:db:1d:25:8c:2c:40:b9:b0:
d4:85:91:ff:f2:2e:ed:bf:4a:2b:3b:ed:86:4e:1d:70:8a:5a:
0e:81:72:db:60:a4:ed:70:42:30:16:14:56:f4:0b:3e:88:76:
83:6a:93:61:37:b2:4c:b2:42:04:74:8d:3d:22:f1:7c:8b:4c:
94:f4:e7:b3:21:0c:05:a6:77:be:f3:92:91:a6:1c:8c:1b:66:
c2:bb:14:9e:f8:af:30:41:c0:e8:f7:6d:81:fe:9b:1a:29:91:
ae:2a:3a:42:4b:df:01:e8:cd:c7:cb:3d:63:c4:12:95:90:9e:
d4:47:83:57:f2:6e:85:e8:d8:80:df:93:00:32:52:57:7c:03:
03:96:3f:f4:dc:d0:e5:08:de:13:da:17:7e:d9:a3:ae:6c:54:
96:bf:b9:85:f4:15:b6:c4:92:f9:20:64:a5:68:b6:83:52:df:
5e:c6:28:e2:8b:0e:8f:c0:4a:03:8b:59:3d:10:4b:6d:93:9d:
3b:de:8e:ff:02:51:5c:0d:3b:e6:f5:a2:89:a9:58:8f:c4:fb:
2c:9a:e2:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAb4Bh0W9tXfh1vdkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
OTg0NmRiODktMGY4OC00MDE1LTkxODctNGYxZWVhODNmZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphuVUsB+XIZYbn2zZrLk8o107R9E0We3YHn0
K0v0JNnV6cYzH9WU1FVsdt+UeuQ3vftSPO3qFIGGyS14Px+4WS45s8q7AH+UfvPu
v5P5aG6GtEKgGX4Vz/Kk+Ul2SLZHOCfMLc4SP0o/Mt52LhEsGYEUcryTU4pvJ7jN
SdBE5/3q0p8jJzIFcFSzm12MMdXG2fQLqMrElKdrRgh/pXq+orBRdamqPRqy8WqE
8s7x+5EvJ+GBmpHcMr7O70oRi0SaUbdKYHvNsc0jqZNXHs9+ILiP6cUHQauEdQgI
/VBwKnRDFqP+UVsw3B/gy9tl8iql13rIItupfPIfT+nBd9ANMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFmiR0PTYoh+VjnocdNF4xU4cg4KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDdhMTNmODUtOGYzMS0z
MWIxLTlkYTUtMDU4YTkwMGU3ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdmp/h+cwyMC0l2XnHLDEVr/VE0rl0lNG26mze6RY+jwMCTjLBSfKRV23
nypLTNsdJYwsQLmw1IWR//Iu7b9KKzvthk4dcIpaDoFy22Ck7XBCMBYUVvQLPoh2
g2qTYTeyTLJCBHSNPSLxfItMlPTnsyEMBaZ3vvOSkaYcjBtmwrsUnvivMEHA6Pdt
gf6bGimRrio6QkvfAejNx8s9Y8QSlZCe1EeDV/JuhejYgN+TADJSV3wDA5Y/9NzQ
5QjeE9oXftmjrmxUlr+5hfQVtsSS+SBkpWi2g1LfXsYo4osOj8BKA4tZPRBLbZOd
O96O/wJRXA075vWiialYj8T7LJridw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:01 2025 by rpki-client