Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb7fcf32-2050-3384-874e-d27be01f411f.roa
File: fb7fcf32-2050-3384-874e-d27be01f411f.roa (raw, json)
Hash identifier: tS5ejWlbEhbxY54rrvDZO40eykhCu6jm5q8scOAB/Do=
Subject key identifier: C9:4D:4B:46:BC:36:FA:23:81:94:EE:02:8A:A7:F9:1B:3C:89:F7:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840251807DD55428D32A1C12280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb7fcf32-2050-3384-874e-d27be01f411f.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:25:18:07:dd:55:42:8d:32:a1:c1:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=3538c7aa-0116-4e3b-8500-8cbd3bc77eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:e7:58:46:bd:d4:4a:11:a3:de:be:15:f8:
29:62:dd:15:67:e5:fc:a4:31:db:7a:51:33:95:7e:
1f:bc:04:4c:78:53:8b:54:75:92:d8:cd:2a:23:2b:
ef:33:44:0a:ca:29:5f:b6:29:db:d8:15:10:e0:02:
af:5d:05:b2:25:ea:b2:56:8e:7c:99:04:b1:01:44:
3b:1a:f1:41:26:7c:05:40:6a:89:82:78:55:80:f7:
b4:3e:87:2e:4c:9a:c8:4b:6b:5a:d3:59:ed:af:c0:
4c:82:0e:a4:66:b1:5c:39:66:73:cb:1f:e9:e3:a5:
95:2a:69:29:b7:2e:03:61:53:84:0b:77:ff:50:47:
d0:b2:95:49:64:19:d9:61:58:b7:85:4e:0c:5f:12:
d8:b0:82:b9:25:b8:5c:9d:95:b0:2b:94:80:65:3d:
c7:41:a0:c0:39:b7:58:18:fa:19:cb:9f:70:5d:83:
3f:62:41:8c:18:d4:2a:15:3e:ac:6d:a3:92:49:b5:
f8:4b:bc:cc:08:e3:44:91:3b:e1:5f:58:0a:c1:4d:
25:42:7c:05:2a:9e:45:0f:3a:b6:8d:b3:7f:d4:1c:
b7:bb:f1:39:7e:1c:1d:b4:2f:7d:d8:df:6c:98:aa:
c0:95:1b:ab:10:80:5c:71:c8:6d:b7:b6:29:35:5a:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4D:4B:46:BC:36:FA:23:81:94:EE:02:8A:A7:F9:1B:3C:89:F7:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb7fcf32-2050-3384-874e-d27be01f411f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:3b:45:ad:e7:20:e1:ec:ab:a4:cb:58:8d:c7:99:54:86:31:
a1:2a:bd:25:db:29:fb:21:0c:2d:f9:3d:1d:2a:4f:8f:fa:15:
52:0f:6e:ac:14:7a:51:07:f5:5e:d3:45:aa:ba:a4:53:38:23:
98:9f:35:f6:d2:6a:69:6a:e6:cb:d1:89:79:06:c5:86:da:98:
46:74:ac:5b:a3:2f:8c:36:b7:ad:fa:1e:a0:40:96:54:a7:56:
45:6f:1e:01:85:d9:27:f9:58:96:0d:a2:4d:44:aa:2b:36:da:
ec:eb:40:d6:da:14:44:ec:45:16:24:41:62:eb:ac:9b:92:d8:
73:88:16:66:7f:8f:56:bf:6b:5e:e2:d0:9f:15:87:6c:f8:5a:
c9:3c:d6:55:52:b8:aa:6d:f9:32:f4:4f:7b:0a:9a:63:2b:6d:
a3:d2:dd:40:4a:90:5b:da:1d:5f:29:d0:b4:ef:b0:6a:5e:79:
4a:00:b7:89:d9:c7:c9:0c:69:89:e2:cd:b8:78:d5:6f:13:cd:
26:55:ee:e1:b1:74:18:05:f8:19:31:f0:b8:e4:c1:56:62:01:
5d:74:ad:8c:57:eb:36:fe:b2:3f:8c:8c:95:c4:a2:30:ca:c6:
68:7b:19:08:20:ac:0b:b1:9c:de:10:e2:27:7e:9e:04:d1:98:
09:89:b8:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAlGAfdVUKNMqHBIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
MzUzOGM3YWEtMDExNi00ZTNiLTg1MDAtOGNiZDNiYzc3ZWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfbnWEa91EoRo96+FfgpYt0VZ+X8pDHbelEz
lX4fvARMeFOLVHWS2M0qIyvvM0QKyilftinb2BUQ4AKvXQWyJeqyVo58mQSxAUQ7
GvFBJnwFQGqJgnhVgPe0PocuTJrIS2ta01ntr8BMgg6kZrFcOWZzyx/p46WVKmkp
ty4DYVOEC3f/UEfQspVJZBnZYVi3hU4MXxLYsIK5JbhcnZWwK5SAZT3HQaDAObdY
GPoZy59wXYM/YkGMGNQqFT6sbaOSSbX4S7zMCONEkTvhX1gKwU0lQnwFKp5FDzq2
jbN/1By3u/E5fhwdtC992N9smKrAlRurEIBccchtt7YpNVrXnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMlNS0a8NvojgZTuAoqn+Rs8ifc5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmI3ZmNmMzItMjA1MC0z
Mzg0LTg3NGUtZDI3YmUwMWY0MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGjtFrecg4eyrpMtYjceZVIYxoSq9Jdsp+yEMLfk9HSpPj/oVUg9urBR6
UQf1XtNFqrqkUzgjmJ819tJqaWrmy9GJeQbFhtqYRnSsW6MvjDa3rfoeoECWVKdW
RW8eAYXZJ/lYlg2iTUSqKzba7OtA1toUROxFFiRBYuusm5LYc4gWZn+PVr9rXuLQ
nxWHbPhayTzWVVK4qm35MvRPewqaYytto9LdQEqQW9odXynQtO+wal55SgC3idnH
yQxpieLNuHjVbxPNJlXu4bF0GAX4GTHwuOTBVmIBXXStjFfrNv6yP4yMlcSiMMrG
aHsZCCCsC7Gc3hDiJ36eBNGYCYm4Ew==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:56 2025 by rpki-client