Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/deb9bcda-7ead-3487-8de6-1bc293cecdc0.roa
File: deb9bcda-7ead-3487-8de6-1bc293cecdc0.roa (raw, json)
Hash identifier: fY6KtCTN0h9IZskpRTKS+OLdvQ40uvauzi/3dPHRRGc=
Subject key identifier: 0A:64:48:00:17:E6:F8:75:9A:2C:A1:FF:95:9E:AA:66:E4:15:E3:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584016610917E2DB4CB1037E5000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/deb9bcda-7ead-3487-8de6-1bc293cecdc0.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:61:09:17:e2:db:4c:b1:03:7e:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=9028e0f8-86eb-4ccc-a48b-cbc1aeb48cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:7e:d4:57:78:c3:bc:a0:f9:d6:b6:fa:68:
9e:13:d8:93:5e:1b:bf:62:63:ce:32:ca:fc:a8:60:
d0:68:33:fe:42:c3:50:56:d5:c1:c0:0c:0e:ba:c6:
38:62:f0:a8:02:09:21:9f:83:05:00:ff:47:c4:b0:
ae:7e:a4:5f:9f:3b:26:71:b3:31:cd:bc:f3:ed:6b:
bc:6f:d5:51:4a:96:7a:34:8b:37:2e:be:9e:b0:72:
c4:e2:51:09:97:ae:91:94:e3:c1:45:0f:60:7e:eb:
5c:bc:b1:33:09:2b:da:ed:72:1e:79:3a:6f:f2:63:
4a:5d:bc:45:df:48:c8:60:96:cc:00:6c:f6:0d:2a:
39:1b:12:26:24:12:fc:ce:78:6e:b2:ac:b7:ab:3b:
b0:ef:a3:1d:a7:bd:50:3a:0f:86:b7:f9:08:e2:5b:
f8:d1:d9:63:4e:ac:9d:12:32:cb:b1:80:c5:4f:d4:
f2:93:a5:fc:0d:4b:88:15:bb:94:92:f4:7b:f1:22:
08:34:3b:27:70:a5:3a:07:7f:c1:06:6d:80:66:3e:
81:17:13:22:80:4e:1c:c9:00:e9:41:a7:e3:97:09:
72:e4:72:f3:cb:db:a7:84:a6:ca:e1:42:3a:9a:cc:
30:1d:00:5c:48:5c:7f:eb:ea:32:c5:c7:54:eb:85:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:64:48:00:17:E6:F8:75:9A:2C:A1:FF:95:9E:AA:66:E4:15:E3:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/deb9bcda-7ead-3487-8de6-1bc293cecdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f9:ad:48:41:b7:e5:12:56:7e:96:1b:91:48:0e:02:db:4d:
9e:b2:51:4e:6d:50:a2:3f:3a:44:63:68:58:0d:0f:8c:7f:2b:
e2:86:78:b1:f0:25:58:32:5f:1e:0f:ab:d3:2c:1f:6f:7a:3c:
bf:1a:29:18:19:0d:1f:68:f7:a6:46:e1:11:c1:ff:67:ed:b8:
7f:c3:ab:4e:a1:0d:f4:86:f6:53:59:1d:71:0c:a3:b8:0e:19:
c3:59:ff:b9:53:71:7e:5d:02:59:5c:34:03:18:17:c7:47:7a:
00:a8:0c:06:19:10:83:14:64:f3:a6:fa:8e:9e:4d:45:c6:79:
79:0d:84:c6:e6:da:50:6a:7f:46:e0:52:0b:fc:fa:62:98:58:
84:82:c9:28:ed:68:99:37:eb:a9:ca:8b:e2:dd:5f:d5:0d:f4:
1b:7a:27:f6:b8:82:e6:de:22:ea:20:66:8f:ff:6c:c0:6b:0e:
65:fc:b8:fd:3f:1f:97:26:f4:b9:56:f2:6a:64:5c:22:38:93:
b7:0d:52:9e:52:25:74:65:0d:0a:2c:55:1d:76:f1:1c:0b:d2:
02:80:56:02:e0:36:44:53:d9:9d:c2:eb:ae:66:cd:44:7c:f4:
3b:a7:60:d5:42:8f:78:8b:f9:d0:7f:49:a4:99:d3:3f:ea:ac:
86:c3:16:37
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAWYQkX4ttMsQN+UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTAyOGUwZjgtODZlYi00Y2NjLWE0OGItY2JjMWFlYjQ4Y2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ5+1Fd4w7yg+da2+mieE9iTXhu/YmPOMsr8
qGDQaDP+QsNQVtXBwAwOusY4YvCoAgkhn4MFAP9HxLCufqRfnzsmcbMxzbzz7Wu8
b9VRSpZ6NIs3Lr6esHLE4lEJl66RlOPBRQ9gfutcvLEzCSva7XIeeTpv8mNKXbxF
30jIYJbMAGz2DSo5GxImJBL8znhusqy3qzuw76Mdp71QOg+Gt/kI4lv40dljTqyd
EjLLsYDFT9Tyk6X8DUuIFbuUkvR78SIINDsncKU6B3/BBm2AZj6BFxMigE4cyQDp
Qafjlwly5HLzy9unhKbK4UI6mswwHQBcSFx/6+oyxcdU64VUMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFApkSAAX5vh1miyh/5WeqmbkFePAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGViOWJjZGEtN2VhZC0z
NDg3LThkZTYtMWJjMjkzY2VjZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAP/mtSEG35RJWfpYbkUgOAttNnrJRTm1Qoj86RGNoWA0PjH8r4oZ4sfAl
WDJfHg+r0ywfb3o8vxopGBkNH2j3pkbhEcH/Z+24f8OrTqEN9Ib2U1kdcQyjuA4Z
w1n/uVNxfl0CWVw0AxgXx0d6AKgMBhkQgxRk86b6jp5NRcZ5eQ2ExubaUGp/RuBS
C/z6YphYhILJKO1omTfrqcqL4t1f1Q30G3on9riC5t4i6iBmj/9swGsOZfy4/T8f
lyb0uVbyamRcIjiTtw1SnlIldGUNCixVHXbxHAvSAoBWAuA2RFPZncLrrmbNRHz0
O6dg1UKPeIv50H9JpJnTP+qshsMWNw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:41 2025 by rpki-client