Route Origin Authorization
Location:                 rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa (download)

Subject key identifier:   BB:30:1C:F6:09:0D:82:A9:59:F5:24:3D:B7:00:06:8A:2E:FF:2B:13 
Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
asID:                     AS399668
Prefixes:
    1: 198.206.157.0/24 maxlen: 24

--
$ test-roa -p rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8b:4e:d2:b6:9e:21:b2:bc:a5:fc:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
        Validity
            Not Before: Sep  9 04:00:00 2021 GMT
            Not After : Jul 14 04:00:00 2031 GMT
        Subject: CN=a8a6f288-9df9-450b-8d38-d32209c83b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:72:85:a2:23:90:07:34:cc:7b:66:2c:05:
                    55:20:97:92:42:f0:33:20:f5:22:0b:51:e5:85:16:
                    0b:c6:aa:a1:28:17:c4:5c:e1:e3:6f:b2:38:c5:90:
                    6d:2c:fa:60:95:86:1b:21:d1:7e:70:a1:1b:98:a8:
                    6c:c9:1f:70:c0:ee:12:89:40:e3:5b:72:1e:97:f9:
                    b7:6d:91:1a:96:a8:fd:7b:41:2f:7b:48:b8:97:73:
                    27:7a:09:86:60:db:09:16:8a:f0:47:72:1f:2b:e4:
                    2f:5d:9c:1b:71:70:c3:c6:5e:2e:ec:3e:67:98:d8:
                    2d:07:b0:33:c9:ce:bb:8f:c2:0a:36:e5:c7:b5:ba:
                    e6:eb:5e:5e:e6:f1:c7:2c:b1:57:49:e3:f0:7a:e0:
                    55:8c:d6:d4:98:74:01:f4:8e:1b:52:e8:06:b1:8f:
                    49:98:df:20:fd:90:ad:a4:dd:f4:bd:73:40:1e:54:
                    f9:91:ea:8c:4a:e8:20:9c:96:5b:31:75:ef:03:32:
                    52:88:7e:58:0f:cb:62:8f:75:08:66:69:56:f5:1e:
                    7e:7a:06:5f:e0:98:25:87:8e:3b:86:dc:d2:96:b1:
                    bb:4e:65:19:fc:be:dd:b9:3c:20:d0:6c:65:83:52:
                    c9:27:36:d5:71:8d:8a:1e:da:9a:12:20:c4:62:2b:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BB:30:1C:F6:09:0D:82:A9:59:F5:24:3D:B7:00:06:8A:2E:FF:2B:13
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/a86e256b-b4bb-3be0-aaf7-201e06e81a58.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl

            X509v3 Authority Key Identifier: 
                keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.206.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6e:82:e4:2a:4e:9c:49:e1:ea:fb:6e:5f:8b:d2:5c:5f:79:
         b0:b3:2f:62:fc:b9:a7:8f:28:8f:cf:77:99:8a:53:d7:dd:8e:
         ee:df:e6:67:50:c1:c2:cc:2a:72:5d:ca:19:bf:37:50:9d:c8:
         a4:cc:08:56:87:5f:ce:b5:0f:ae:dc:35:77:fc:c5:95:b7:a6:
         70:7f:3d:99:d6:ed:e4:23:e4:9a:a0:c6:9f:aa:45:e3:62:84:
         da:43:44:fe:cc:d7:55:b6:db:49:38:5f:a0:12:43:fa:ec:67:
         88:d1:38:7e:38:1f:62:18:6f:22:02:53:88:37:23:90:7d:71:
         fd:48:cf:58:a0:f3:11:36:ea:1c:7c:e1:65:5b:3e:ba:86:14:
         2e:cf:0e:3f:68:4f:47:bb:09:57:a5:ba:3b:7d:e5:9c:12:db:
         df:02:7b:5b:01:cb:33:11:43:1a:4c:08:20:be:40:e3:87:b8:
         b6:c7:89:24:18:eb:95:e5:15:28:37:4f:4c:51:48:2b:cf:23:
         9d:1d:39:54:34:e4:92:aa:31:65:50:ea:f4:41:d8:ae:40:42:
         d6:3f:29:c8:ce:61:d0:20:7e:cf:af:38:1b:7e:ae:b1:f2:29:
         7f:d6:58:a8:fc:cb:8e:dd:08:fb:0d:33:c1:3d:ba:ec:23:7f:
         9f:45:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Apr 12 05:24:56 2022 by LibreSSL & rpki-client.