Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7dd61f4-7861-3ab5-87c9-1dbbf2a91049.roa
File: d7dd61f4-7861-3ab5-87c9-1dbbf2a91049.roa (raw, json)
Hash identifier: OG/33lnEpviglxJEjm3uwnuGAjfgpqDhNjoMmJmQbuc=
Subject key identifier: 2C:1D:5A:6C:83:61:30:51:73:48:33:7C:9D:60:24:72:81:A0:49:0D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D02F02BF8A8C0DCA8FD2AEF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7dd61f4-7861-3ab5-87c9-1dbbf2a91049.roa
Signing time: Tue 22 Feb 2022 05:00:00 +0000
ROA not before: Tue 22 Feb 2022 05:00:00 +0000
ROA not after: Tue 29 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.77.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:02:f0:2b:f8:a8:c0:dc:a8:fd:2a:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 22 05:00:00 2022 GMT
Not After : Mar 29 04:00:00 2022 GMT
Subject: CN=be0ad101-9e93-4475-ace0-acd00781093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:8e:0f:6d:91:63:ba:b9:cb:84:bd:e7:1b:
df:4f:34:2e:4d:50:e4:cf:02:33:8c:55:14:33:65:
dc:cc:be:80:67:23:50:ce:6e:d6:a0:1b:99:ab:f6:
61:fc:d6:5a:65:47:ea:43:04:d6:f3:be:b5:ba:5a:
ea:bc:f4:03:40:40:8d:b4:92:7b:ea:a9:ac:f6:d4:
1e:9e:8b:c7:b2:c1:c5:58:00:77:f4:5d:5e:ae:dc:
d7:cd:00:3e:c8:05:46:26:16:1e:81:6c:b5:56:15:
25:39:13:c2:b0:04:20:e9:d9:58:d4:43:9a:b1:8d:
9c:25:ea:25:19:30:e3:9d:bc:4c:68:f0:df:66:bc:
9e:1f:08:c1:80:ff:e8:9c:b1:97:5e:d7:6f:3a:35:
06:43:67:64:da:7f:21:61:52:53:de:45:62:a1:2b:
8b:ea:ab:06:7c:53:92:90:a8:92:80:5c:45:5f:35:
3b:d0:88:d7:d0:69:ec:1b:00:c1:de:a8:b5:f1:97:
31:81:a2:45:fe:80:48:14:a6:4b:11:4f:e6:ac:61:
d2:54:2f:7c:88:62:28:f9:ac:20:b6:72:2a:df:89:
48:ba:16:77:60:48:e4:94:2b:7f:d7:33:88:d4:9a:
04:53:d3:72:50:73:d3:81:10:48:36:a6:33:25:6d:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:5A:6C:83:61:30:51:73:48:33:7C:9D:60:24:72:81:A0:49:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7dd61f4-7861-3ab5-87c9-1dbbf2a91049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.77.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:79:02:2e:54:c8:91:c7:73:60:df:fd:dd:b0:a6:06:d6:e7:
dc:e2:e2:0e:13:c5:cc:77:d2:28:97:57:3b:00:12:b2:95:1b:
39:5e:70:ab:93:19:0d:79:c4:71:83:53:7e:8f:f4:b3:84:9a:
0a:bc:cf:6d:c3:50:28:81:84:9a:e1:4c:c9:62:b3:06:2b:40:
84:53:76:3e:01:15:a2:32:55:3f:94:f9:c2:cb:f8:47:cf:6d:
56:4f:af:30:60:f6:9a:c2:4b:68:bc:53:f5:98:f0:c9:e2:69:
0d:68:24:98:7b:f5:3a:0a:a5:ab:7e:89:ea:29:57:e4:81:05:
8b:a0:a0:2b:ff:87:73:9f:e0:e1:ac:d0:37:59:7e:b4:41:32:
cc:ab:dc:81:6e:27:d8:17:b7:6b:fd:87:3f:22:0c:00:12:3e:
9a:af:22:a6:27:4d:14:65:d7:e8:f7:07:48:67:10:b9:b7:35:
08:d2:1b:f0:ef:47:a5:35:e9:8c:bc:f8:ae:ad:32:14:16:fc:
29:0f:72:28:bd:46:36:d2:f5:ab:d4:cc:99:8c:f5:ce:2f:b5:
32:2c:30:2b:4c:27:90:46:c0:9c:1c:52:81:d1:f5:bf:4b:95:
4b:68:c5:94:fc:d1:0d:e0:20:57:8e:37:fe:55:25:5e:1d:c6:
13:94:6c:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0C8Cv4qMDcqP0q7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyMjA1MDAwMFoXDTIyMDMyOTA0MDAwMFowLzEtMCsGA1UEAxMk
YmUwYWQxMDEtOWU5My00NDc1LWFjZTAtYWNkMDA3ODEwOTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKSOD22RY7q5y4S95xvfTzQuTVDkzwIzjFUU
M2XczL6AZyNQzm7WoBuZq/Zh/NZaZUfqQwTW8761ulrqvPQDQECNtJJ76qms9tQe
novHssHFWAB39F1ertzXzQA+yAVGJhYegWy1VhUlORPCsAQg6dlY1EOasY2cJeol
GTDjnbxMaPDfZryeHwjBgP/onLGXXtdvOjUGQ2dk2n8hYVJT3kVioSuL6qsGfFOS
kKiSgFxFXzU70IjX0GnsGwDB3qi18ZcxgaJF/oBIFKZLEU/mrGHSVC98iGIo+awg
tnIq34lIuhZ3YEjklCt/1zOI1JoEU9NyUHPTgRBINqYzJW0UeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwdWmyDYTBRc0gzfJ1gJHKBoEkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDdkZDYxZjQtNzg2MS0z
YWI1LTg3YzktMWRiYmYyYTkxMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY02AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR5Ai5UyJHHc2Df/d2wpgbW59zi4g4Txcx30iiXVzsAErKVGzlecKuT
GQ15xHGDU36P9LOEmgq8z23DUCiBhJrhTMliswYrQIRTdj4BFaIyVT+U+cLL+EfP
bVZPrzBg9prCS2i8U/WY8MniaQ1oJJh79ToKpat+ieopV+SBBYugoCv/h3Of4OGs
0DdZfrRBMsyr3IFuJ9gXt2v9hz8iDAASPpqvIqYnTRRl1+j3B0hnELm3NQjSG/Dv
R6U16Yy8+K6tMhQW/CkPcii9RjbS9avUzJmM9c4vtTIsMCtMJ5BGwJwcUoHR9b9L
lUtoxZT80Q3gIFeON/5VJV4dxhOUbDg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:26 2025 by rpki-client