Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f69eca25-5a70-3146-9fad-80ac321b42e1.roa
File: f69eca25-5a70-3146-9fad-80ac321b42e1.roa (raw, json)
Hash identifier: vkTpo9Z1rPfnoAzdVjJkA71vFPblRTzZj7p8RgMsm74=
Subject key identifier: AF:80:CA:0C:AD:B9:4F:AE:C2:CD:55:FB:FA:C5:17:69:0F:AF:87:10
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840864F5ED90A795FF0C437BBE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f69eca25-5a70-3146-9fad-80ac321b42e1.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 68.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:4f:5e:d9:0a:79:5f:f0:c4:37:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=236dfccd-b41e-496c-9fc3-7953dd6adcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:69:17:28:9c:67:df:74:69:43:24:48:14:
65:ed:c5:96:37:3c:1b:b8:82:63:3b:68:0b:10:c7:
11:79:1f:e5:23:2b:8a:00:9b:09:1b:ae:6b:54:65:
7f:41:3a:c1:df:84:e9:4c:fa:d0:c3:be:f9:4a:0e:
d2:46:79:6f:c2:87:d9:f4:0b:5c:a1:bb:a8:b5:3f:
31:9c:d3:96:bb:2d:39:e3:20:7c:1e:27:ff:9a:00:
07:21:a5:69:99:13:30:18:ec:fa:82:78:c7:03:8f:
28:54:b6:7b:5a:fd:6c:73:68:1e:c4:a2:fa:12:36:
24:e0:b0:ce:31:24:13:fa:4a:1b:1e:d5:83:26:b1:
63:88:86:e7:61:a5:8b:ab:86:ae:6f:c0:81:d0:7c:
43:8b:6c:d5:3c:24:cf:9f:c5:81:bf:e4:0b:a0:b0:
6b:4f:1e:c0:d1:c2:df:a6:e7:85:aa:67:20:4b:6d:
ab:e3:cb:8c:cd:ac:dc:fa:c1:bb:71:8f:94:a2:2d:
e1:82:76:08:8b:d2:ee:e3:ea:d1:0f:c7:f8:0f:bd:
db:d6:bc:4d:29:25:78:9a:8e:ad:69:51:b4:a5:98:
b7:89:7b:7a:02:ab:5e:71:5a:6d:6d:5e:68:a1:e9:
ae:33:55:c8:8f:41:8f:c5:fa:9e:58:89:c7:5e:c4:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:CA:0C:AD:B9:4F:AE:C2:CD:55:FB:FA:C5:17:69:0F:AF:87:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f69eca25-5a70-3146-9fad-80ac321b42e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a2:7e:3e:cb:09:19:3b:b7:72:9d:9b:19:b5:2b:26:f2:7f:
82:d3:20:e9:05:3f:23:d6:e1:7a:ef:01:4f:4a:71:28:5e:c1:
a9:0c:91:4c:6a:79:51:82:70:6e:91:1b:0b:25:f6:15:46:84:
84:f2:c5:15:6b:12:4b:9c:f4:46:f5:ca:db:a7:9a:e7:ff:f1:
b6:32:b3:a4:0f:78:dd:bb:1e:57:5b:85:c4:31:6e:f5:1e:3d:
7f:c0:61:b2:37:e3:d5:c1:cf:ef:5d:26:06:b3:0e:16:9e:bf:
e6:43:de:04:6f:6e:a1:38:89:2d:a1:d0:3e:b1:d4:d1:d9:fb:
fa:f6:f9:d4:f9:46:61:7e:da:11:21:c0:57:ae:5d:44:d1:7b:
78:2c:a4:eb:0a:47:7a:03:10:a6:a3:4d:31:2c:f1:02:9b:8f:
14:74:98:05:28:ce:01:b4:eb:d0:0f:f7:c9:bc:da:73:cc:d7:
3a:d1:90:6b:66:96:63:b6:53:f1:11:8c:97:2f:56:08:4c:32:
3f:40:57:69:f4:64:d3:10:51:55:83:fb:59:71:a9:46:d1:e3:
f8:da:4b:0e:62:a7:d5:b3:62:9a:58:6d:08:02:3d:7d:54:b8:
12:4b:7d:8c:4f:e4:19:f7:61:60:4d:c2:67:c4:a5:42:ba:1d:
31:b3:3b:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECGT17ZCnlf8MQ3u+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwOTEyMDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
MjM2ZGZjY2QtYjQxZS00OTZjLTlmYzMtNzk1M2RkNmFkY2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphpFyicZ990aUMkSBRl7cWWNzwbuIJjO2gL
EMcReR/lIyuKAJsJG65rVGV/QTrB34TpTPrQw775Sg7SRnlvwofZ9AtcobuotT8x
nNOWuy054yB8Hif/mgAHIaVpmRMwGOz6gnjHA48oVLZ7Wv1sc2gexKL6EjYk4LDO
MSQT+kobHtWDJrFjiIbnYaWLq4aub8CB0HxDi2zVPCTPn8WBv+QLoLBrTx7A0cLf
pueFqmcgS22r48uMzazc+sG7cY+Uoi3hgnYIi9Lu4+rRD8f4D73b1rxNKSV4mo6t
aVG0pZi3iXt6AqtecVptbV5ooemuM1XIj0GPxfqeWInHXsS9VwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK+AygytuU+uws1V+/rFF2kPr4cQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjY5ZWNhMjUtNWE3MC0z
MTQ2LTlmYWQtODBhYzMyMWI0MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARJ4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAm6J+PssJGTu3cp2bGbUrJvJ/gtMg6QU/I9bheu8BT0pxKF7BqQyRTGp5
UYJwbpEbCyX2FUaEhPLFFWsSS5z0RvXK26ea5//xtjKzpA943bseV1uFxDFu9R49
f8Bhsjfj1cHP710mBrMOFp6/5kPeBG9uoTiJLaHQPrHU0dn7+vb51PlGYX7aESHA
V65dRNF7eCyk6wpHegMQpqNNMSzxApuPFHSYBSjOAbTr0A/3ybzac8zXOtGQa2aW
Y7ZT8RGMly9WCEwyP0BXafRk0xBRVYP7WXGpRtHj+NpLDmKn1bNimlhtCAI9fVS4
Ekt9jE/kGfdhYE3CZ8SlQrodMbM7Bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:22:10 2024 by rpki-client on console-ams.rpki-client.org