Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f37bc0ba-3e7d-3d1f-a3a8-b479ac526341.roa
File: f37bc0ba-3e7d-3d1f-a3a8-b479ac526341.roa (raw, json)
Hash identifier: oHQb9bACl6y/aOtZv+gVTUwubNS5FODMZdttTJRU9gk=
Subject key identifier: 5A:5D:EC:92:D4:E3:9A:1A:E1:A8:3F:D2:61:C2:B1:89:1D:0C:98:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840244059CF5F0001ECA233C340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f37bc0ba-3e7d-3d1f-a3a8-b479ac526341.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:40:59:cf:5f:00:01:ec:a2:33:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=9d242b57-72b1-4247-9f30-e9a249d4f44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:d9:05:bb:81:f2:2c:e9:54:25:95:3d:bf:
9c:57:79:71:f1:21:53:b7:8e:bb:38:a0:62:57:79:
34:ad:84:2f:a0:20:3b:25:08:94:ef:8f:46:19:10:
d3:41:9b:5b:cd:b2:16:ee:ad:fd:76:9b:73:5f:b6:
b6:9d:bb:c3:d1:13:cb:d0:eb:21:87:a3:2c:5c:b0:
ea:e2:21:08:83:df:20:ef:c6:97:9a:dd:74:f2:5a:
ba:22:bd:ac:94:69:7f:cf:8b:c2:7d:46:ca:c9:fe:
f1:47:de:ef:90:68:af:22:49:cb:83:50:db:1c:53:
1a:9f:cc:53:57:af:4d:50:c6:cf:48:64:93:b3:7f:
c7:95:0f:c6:be:3b:5e:8a:cf:c7:da:c8:2d:7a:60:
07:71:43:49:3a:29:7f:40:c2:48:cb:ad:8a:a1:f8:
b9:dd:dc:17:47:eb:3f:7b:f9:62:f9:f2:05:68:98:
34:95:9c:33:c9:6a:d0:f5:de:b3:ba:e1:35:a0:7a:
9a:f7:ab:32:cb:ab:31:5c:1b:20:ac:af:25:94:9f:
6e:74:4f:2b:94:af:72:ef:1b:b5:af:42:ed:9a:9e:
80:ef:c8:7e:d3:61:55:f3:db:b0:8f:8a:a7:7d:42:
93:72:6e:b2:e7:13:81:26:2a:49:52:77:80:91:80:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:EC:92:D4:E3:9A:1A:E1:A8:3F:D2:61:C2:B1:89:1D:0C:98:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f37bc0ba-3e7d-3d1f-a3a8-b479ac526341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:48:9f:24:9d:f8:6e:98:f1:a0:c9:aa:1a:22:5f:49:a2:6f:
e7:fb:0c:3f:f9:d0:34:72:7e:78:6f:4b:e6:4c:42:a6:32:6b:
bc:5e:5d:be:2a:20:41:57:ad:3a:fb:2c:48:c0:05:07:41:66:
51:4e:a3:e6:50:b9:e5:85:fb:c4:2f:f9:2c:50:47:0f:42:27:
5d:53:95:1e:7f:7f:f8:90:78:87:4c:05:8b:5c:5d:61:3d:fb:
0d:59:e5:ee:d6:b0:bd:5a:7b:86:23:ab:9e:95:c3:a9:a7:ac:
37:9e:8b:9f:4c:e8:b7:37:9e:c0:f8:8a:b0:0f:e1:08:22:4d:
aa:3c:2b:0f:66:2f:1b:15:66:60:0c:53:55:0e:9a:cf:f4:d8:
87:d6:cc:d8:ac:95:4f:3c:b6:b0:ee:da:72:1c:f4:ef:bc:55:
e8:ff:76:4e:0c:53:86:7f:ee:40:da:c0:1e:36:f2:ed:75:34:
0d:cd:97:84:7a:8b:72:0c:09:85:31:54:23:d5:80:bb:39:9e:
12:a5:78:a2:8b:86:8e:29:d1:0c:56:8e:b0:ff:05:fa:4d:25:
8f:fc:8e:58:39:7e:4e:7b:dc:97:45:cb:a2:25:00:34:cc:4c:
20:83:68:62:14:9d:47:66:45:0c:42:53:9c:36:dd:95:ad:4a:
6b:25:bb:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAkQFnPXwAB7KIzw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
OWQyNDJiNTctNzJiMS00MjQ3LTlmMzAtZTlhMjQ5ZDRmNDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5TZBbuB8izpVCWVPb+cV3lx8SFTt467OKBi
V3k0rYQvoCA7JQiU749GGRDTQZtbzbIW7q39dptzX7a2nbvD0RPL0Oshh6MsXLDq
4iEIg98g78aXmt108lq6Ir2slGl/z4vCfUbKyf7xR97vkGivIknLg1DbHFMan8xT
V69NUMbPSGSTs3/HlQ/Gvjteis/H2sgtemAHcUNJOil/QMJIy62Kofi53dwXR+s/
e/li+fIFaJg0lZwzyWrQ9d6zuuE1oHqa96syy6sxXBsgrK8llJ9udE8rlK9y7xu1
r0Ltmp6A78h+02FV89uwj4qnfUKTcm6y5xOBJipJUneAkYCncQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFpd7JLU45oa4ag/0mHCsYkdDJhfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjM3YmMwYmEtM2U3ZC0z
ZDFmLWEzYTgtYjQ3OWFjNTI2MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHkifJJ34bpjxoMmqGiJfSaJv5/sMP/nQNHJ+eG9L5kxCpjJrvF5dviog
QVetOvssSMAFB0FmUU6j5lC55YX7xC/5LFBHD0InXVOVHn9/+JB4h0wFi1xdYT37
DVnl7tawvVp7hiOrnpXDqaesN56Ln0zotzeewPiKsA/hCCJNqjwrD2YvGxVmYAxT
VQ6az/TYh9bM2KyVTzy2sO7achz077xV6P92TgxThn/uQNrAHjby7XU0Dc2XhHqL
cgwJhTFUI9WAuzmeEqV4oouGjinRDFaOsP8F+k0lj/yOWDl+Tnvcl0XLoiUANMxM
IINoYhSdR2ZFDEJTnDbdla1KayW7Pg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:00 2025 by rpki-client