Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/07b0efa4-7afd-395e-bda2-4047770c5bc3.roa
File: 07b0efa4-7afd-395e-bda2-4047770c5bc3.roa (raw, json)
Hash identifier: In0C01UpaQz4vG4A829HsCDdhfdNoGqK4wIXCXv2Bzg=
Subject key identifier: 05:2B:38:74:A2:F7:39:B3:45:08:E4:46:C1:2B:8C:2C:A1:F9:41:3A
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F432858487325A30D68B3CD2A329F0A80
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/07b0efa4-7afd-395e-bda2-4047770c5bc3.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 214411
IP address blocks: 65.87.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a3:0d:68:b3:cd:2a:32:9f:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=0b99df9c-5811-4544-8d02-a3dad1106816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:b6:a1:51:28:d7:5b:c1:32:c4:a8:32:a3:
b6:12:34:0b:54:37:54:06:bb:cd:6c:c3:11:a7:73:
47:3e:1d:47:8f:3f:a3:47:66:ed:5d:d3:72:d5:80:
c8:02:8f:b2:0e:b9:15:bb:ab:2d:c1:d3:c9:42:2d:
16:21:a4:cc:e1:bf:66:6b:1f:3f:07:a7:e3:96:8e:
53:4f:d8:64:b6:74:a6:a5:2c:06:01:23:11:e6:0a:
cd:15:2a:39:63:a8:c5:1b:83:ca:93:ea:c2:fc:c3:
3b:b3:cb:ea:cc:83:ad:7a:55:b1:0b:e3:0a:14:6d:
2a:d9:19:43:5f:89:00:d9:14:bd:fc:2d:24:7d:2f:
6a:5d:93:20:df:66:12:a0:68:b9:a0:c8:6a:bf:ef:
df:9a:ca:e2:46:ba:c1:9e:24:3e:07:16:47:6a:1f:
74:cd:0c:e4:5d:51:31:d9:8a:28:15:22:39:fe:9b:
c3:13:a6:64:5d:9e:f3:53:9f:5a:5d:e1:00:1d:50:
34:b3:35:a4:e4:40:43:d5:98:87:ca:ab:8a:6a:8f:
5c:54:d5:86:d7:28:c1:aa:87:51:55:d5:80:eb:71:
c6:58:7d:1e:e1:43:ca:3b:e8:b1:5d:ac:87:94:b2:
b2:07:ad:d8:8c:c1:cc:5e:4b:db:05:4a:e5:8c:de:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2B:38:74:A2:F7:39:B3:45:08:E4:46:C1:2B:8C:2C:A1:F9:41:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/07b0efa4-7afd-395e-bda2-4047770c5bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:4b:da:b7:76:6e:a2:5a:e7:30:11:99:10:5a:e3:43:47:91:
d4:f6:5a:37:9a:74:e4:50:0c:66:b0:7b:ad:d2:36:49:f4:f9:
55:e2:4a:24:ac:1d:7a:4b:bf:67:af:82:4c:cb:e8:d0:19:59:
d9:3d:ee:8f:44:1d:44:79:0e:bb:11:53:80:3f:6b:5c:d1:00:
41:d6:78:89:f6:96:be:de:72:4a:0e:4c:a8:d1:60:b7:41:89:
e4:92:7a:e5:d5:ef:c7:a4:5a:43:7f:29:05:fb:09:35:4a:db:
41:d6:94:16:34:d8:e3:e4:46:9b:96:1a:b8:2c:bd:13:c9:78:
4e:28:2f:71:59:4a:26:36:11:19:ef:4d:a2:79:46:36:98:f8:
35:5c:3c:38:62:19:e0:d8:cf:23:77:4a:aa:cc:e9:8d:50:97:
c7:3d:ea:3d:5f:70:66:bd:13:62:e4:54:b1:48:31:d2:c9:bb:
85:de:d9:83:33:4c:52:18:b8:8b:05:4b:1c:9a:22:32:72:da:
48:86:b2:f6:f2:e7:38:ee:15:13:48:fc:aa:75:2f:8e:0d:0b:
bd:bf:0c:04:33:b7:7a:e2:f3:20:bf:c3:4e:d6:10:a7:f3:19:
30:c1:47:c0:10:85:4c:0e:7a:ca:ab:ed:3d:d3:74:71:f0:2b:
43:d6:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:09 2025 by rpki-client