Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9cfd447-8881-3aeb-ab34-fd21817a5193.roa
File: d9cfd447-8881-3aeb-ab34-fd21817a5193.roa (raw, json)
Hash identifier: z7Y8s2490oGg+EkqvFQkbagH51Nsbz9jyryVqBYu/kY=
Subject key identifier: B3:31:D1:60:2C:22:7A:22:16:C2:BB:61:B7:CD:E2:FE:B9:C5:26:51
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406DCB8F2831855776917003A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9cfd447-8881-3aeb-ab34-fd21817a5193.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 162.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:cb:8f:28:31:85:57:76:91:70:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=83de401b-3a87-4056-b7b2-a942874b1973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:95:66:41:14:3b:8c:01:07:98:3c:80:70:
4b:86:89:17:4e:04:f1:84:3f:0c:d6:4e:26:a4:40:
99:4a:a6:0a:68:bb:69:c7:fb:6c:13:24:8c:2e:be:
10:be:3b:63:89:55:ef:84:4a:5b:b9:03:25:4b:9a:
9d:0f:24:7a:b0:a6:70:49:de:1a:41:bd:9b:6f:57:
73:91:ed:5e:14:ba:17:83:88:a8:7e:db:74:e2:73:
05:db:1e:d7:18:3f:da:bd:b7:dc:67:98:25:23:3b:
76:11:da:04:c5:1f:5f:bf:0f:d2:ca:0c:d9:0a:d1:
8d:4d:e7:5f:12:4c:15:7d:b4:ff:c3:35:ba:35:b5:
29:27:12:44:b2:2c:8d:93:43:a2:f8:3c:18:68:8c:
12:03:fe:d4:ea:db:41:bb:82:45:78:f5:08:cf:f4:
88:d9:ec:d4:1c:45:9c:73:ee:63:7b:54:79:d1:ed:
ec:3f:e9:93:2b:cc:bb:35:1c:83:80:ed:70:4f:7e:
e4:e1:5b:ca:12:15:c5:2a:02:4a:1a:df:dd:4e:3b:
41:32:b1:cc:87:4e:f8:36:b0:50:f0:1c:3b:89:23:
d6:92:89:6e:0b:47:62:c1:84:68:84:6e:d8:39:05:
9f:ca:40:ac:e3:10:ef:17:4f:46:08:3b:ce:18:f2:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:D1:60:2C:22:7A:22:16:C2:BB:61:B7:CD:E2:FE:B9:C5:26:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9cfd447-8881-3aeb-ab34-fd21817a5193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:18:ab:b5:f8:1d:ad:d9:e1:ef:f7:ca:48:68:cf:06:f4:04:
97:26:14:61:47:68:66:49:49:53:c1:e0:2b:ab:6e:ee:85:7b:
84:58:6f:8d:e0:73:67:d8:fb:c8:b8:c1:ee:6a:9b:34:04:c8:
ae:99:dc:d0:0c:6e:8d:27:df:75:dd:98:94:1f:ad:2b:20:ff:
48:79:3c:34:6b:27:0c:17:a2:95:c4:2f:bd:0b:ae:c4:3e:78:
a1:94:33:f6:09:de:3c:92:59:87:6a:12:72:9a:b3:1c:16:49:
de:90:25:44:01:1d:e8:cf:eb:a3:8e:cb:ff:23:ab:a6:ea:1f:
3e:c4:33:67:00:29:a7:f4:07:a8:33:ec:86:21:c1:3f:54:70:
dd:2f:d5:4d:d6:13:ee:86:7b:ca:ff:e2:e6:2f:86:1d:54:13:
27:c7:c8:79:9b:ea:e7:4b:00:79:7b:0e:29:97:7e:bd:ad:8e:
7c:40:eb:e4:a2:44:94:36:82:9d:f9:d9:8f:ed:07:60:ca:e0:
c9:f4:ad:76:22:26:da:ed:47:d7:20:1f:ad:56:dc:f1:9e:f9:
12:ef:96:7a:69:3e:bc:32:bb:07:88:26:94:ec:8b:b1:2a:31:
26:5f:61:76:23:3c:e5:17:8d:2c:3f:f3:6c:af:af:1d:32:c8:
cf:27:f0:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBty48oMYVXdpFwA6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ODNkZTQwMWItM2E4Ny00MDU2LWI3YjItYTk0Mjg3NGIxOTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4qVZkEUO4wBB5g8gHBLhokXTgTxhD8M1k4m
pECZSqYKaLtpx/tsEySMLr4QvjtjiVXvhEpbuQMlS5qdDyR6sKZwSd4aQb2bb1dz
ke1eFLoXg4ioftt04nMF2x7XGD/avbfcZ5glIzt2EdoExR9fvw/SygzZCtGNTedf
EkwVfbT/wzW6NbUpJxJEsiyNk0Oi+DwYaIwSA/7U6ttBu4JFePUIz/SI2ezUHEWc
c+5je1R50e3sP+mTK8y7NRyDgO1wT37k4VvKEhXFKgJKGt/dTjtBMrHMh074NrBQ
8Bw7iSPWkoluC0diwYRohG7YOQWfykCs4xDvF09GCDvOGPL2zwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLMx0WAsInoiFsK7YbfN4v65xSZRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDljZmQ0NDctODg4MS0z
YWViLWFiMzQtZmQyMTgxN2E1MTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAolcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhxirtfgdrdnh7/fKSGjPBvQElyYUYUdoZklJU8HgK6tu7oV7hFhvjeBz
Z9j7yLjB7mqbNATIrpnc0AxujSffdd2YlB+tKyD/SHk8NGsnDBeilcQvvQuuxD54
oZQz9gnePJJZh2oScpqzHBZJ3pAlRAEd6M/ro47L/yOrpuofPsQzZwApp/QHqDPs
hiHBP1Rw3S/VTdYT7oZ7yv/i5i+GHVQTJ8fIeZvq50sAeXsOKZd+va2OfEDr5KJE
lDaCnfnZj+0HYMrgyfStdiIm2u1H1yAfrVbc8Z75Eu+Wemk+vDK7B4gmlOyLsSox
Jl9hdiM85ReNLD/zbK+vHTLIzyfwMw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:39 2025 by rpki-client