Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7693f1a-6d7f-30be-9d38-3ca32afebe31.roa
File: f7693f1a-6d7f-30be-9d38-3ca32afebe31.roa (raw, json)
Hash identifier: 8W93g4MAXnmP5ifTh15ocFmOHmgL5mg/YDThKKzVYOc=
Subject key identifier: 73:E1:13:18:06:D4:27:8A:F8:96:89:87:89:DB:5F:9F:11:A7:D5:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAA495F86D80D428093619480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7693f1a-6d7f-30be-9d38-3ca32afebe31.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:49:5f:86:d8:0d:42:80:93:61:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=7b865d98-13da-4ca4-a2b5-97e988eeba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:31:06:ab:3a:4a:87:d8:7e:ee:a5:3b:47:
65:5c:2f:3d:85:af:14:9d:9d:56:e3:c2:e3:ce:ef:
53:b1:92:2b:6d:e1:68:9a:74:96:ec:3d:3c:8a:64:
6e:bc:3e:99:7b:0e:b7:a0:f0:03:02:05:58:02:a5:
a5:b3:e2:0c:a2:4c:ba:fd:a4:d8:73:97:e7:f2:7e:
0e:e1:3f:87:ad:53:d7:8d:3e:84:1d:a4:59:12:0d:
d7:8d:12:76:e4:78:a7:91:d1:d3:d5:55:24:af:c4:
9c:e2:cd:e0:3f:06:7d:4d:06:aa:85:01:ef:60:a7:
70:7d:df:e7:29:c9:6e:85:a0:cf:32:35:a7:34:95:
eb:62:82:58:79:8b:6a:9e:47:ef:40:3e:15:45:1e:
03:83:b6:70:ba:f0:58:34:22:3d:2c:1c:7d:d7:fc:
9e:28:1d:13:9f:c3:1d:6c:27:38:99:9b:16:82:7e:
f4:01:c7:2d:f1:26:cb:aa:15:2a:a8:26:ac:22:0c:
87:f5:52:c1:7b:e5:02:d4:a6:a4:81:1c:6d:f6:c7:
50:da:7b:eb:af:da:6c:94:3e:bc:c9:68:91:42:0f:
5a:c6:37:03:31:2a:05:df:37:19:57:b4:da:18:7b:
e5:28:3b:55:1e:60:8e:95:09:23:eb:45:a2:9e:c4:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:13:18:06:D4:27:8A:F8:96:89:87:89:DB:5F:9F:11:A7:D5:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7693f1a-6d7f-30be-9d38-3ca32afebe31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:76:7c:14:a5:94:76:d1:c7:2d:17:25:42:0d:7f:52:f1:5b:
ef:54:b7:4c:2c:e1:e2:84:9f:81:6e:93:64:d4:01:bc:40:03:
fe:46:39:45:61:24:dd:9a:10:54:44:23:43:b4:cd:67:66:c5:
fd:bd:a6:2e:14:3a:8a:d7:79:61:cc:b1:e0:f3:d1:00:c5:2f:
58:b7:20:e2:ea:0e:2d:4a:89:5b:6b:46:a7:cf:19:c9:91:44:
dd:ee:9c:37:2d:60:cc:de:8d:6b:ee:75:f9:34:c0:08:fb:a8:
9e:b3:50:45:3a:8b:70:b5:57:69:79:0e:77:f4:b8:70:be:9a:
a4:a1:77:b5:97:5a:5e:54:cb:90:a2:8c:da:5d:43:8f:65:b5:
cf:bc:a6:e2:19:53:8a:58:18:5f:f3:b9:4d:06:01:1b:04:5d:
51:2d:5e:8e:b8:2e:17:76:f4:e8:6c:b5:68:3d:f1:f5:3d:ca:
2b:51:ca:54:2c:63:57:24:7a:19:31:dc:62:b7:10:e2:cd:cc:
d2:9d:77:bd:3a:6f:22:66:ce:66:ce:12:df:63:3c:82:49:84:
f3:93:78:fc:5d:ff:fb:27:52:2a:41:af:54:cd:89:94:43:ef:
b9:63:2a:e8:8e:02:56:ec:e7:a6:f9:ab:4f:82:d8:48:56:e2:
8f:50:86:9a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+qSV+G2A1CgJNhlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
N2I4NjVkOTgtMTNkYS00Y2E0LWEyYjUtOTdlOTg4ZWViYTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhkxBqs6SofYfu6lO0dlXC89ha8UnZ1W48Lj
zu9TsZIrbeFomnSW7D08imRuvD6Zew63oPADAgVYAqWls+IMoky6/aTYc5fn8n4O
4T+HrVPXjT6EHaRZEg3XjRJ25HinkdHT1VUkr8Sc4s3gPwZ9TQaqhQHvYKdwfd/n
KcluhaDPMjWnNJXrYoJYeYtqnkfvQD4VRR4Dg7ZwuvBYNCI9LBx91/yeKB0Tn8Md
bCc4mZsWgn70Acct8SbLqhUqqCasIgyH9VLBe+UC1KakgRxt9sdQ2nvrr9pslD68
yWiRQg9axjcDMSoF3zcZV7TaGHvlKDtVHmCOlQkj60WinsQcDQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHPhExgG1CeK+JaJh4nbX58Rp9V3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjc2OTNmMWEtNmQ3Zi0z
MGJlLTlkMzgtM2NhMzJhZmViZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCZBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl3Z8FKWUdtHHLRclQg1/UvFb71S3TCzh4oSfgW6TZNQBvEAD/kY5RWEk
3ZoQVEQjQ7TNZ2bF/b2mLhQ6itd5Ycyx4PPRAMUvWLcg4uoOLUqJW2tGp88ZyZFE
3e6cNy1gzN6Na+51+TTACPuonrNQRTqLcLVXaXkOd/S4cL6apKF3tZdaXlTLkKKM
2l1Dj2W1z7ym4hlTilgYX/O5TQYBGwRdUS1ejrguF3b06Gy1aD3x9T3KK1HKVCxj
VyR6GTHcYrcQ4s3M0p13vTpvImbOZs4S32M8gkmE85N4/F3/+ydSKkGvVM2JlEPv
uWMq6I4CVuznpvmrT4LYSFbij1CGmg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:05 2025 by rpki-client