Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa
File: 5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa (raw, json)
Hash identifier: mEmGtUOUn38H+84zHMqX3tUmHf18QS0VKp5ksykBl+o=
Subject key identifier: 51:D5:C0:92:13:BF:F9:02:21:22:37:AF:D8:54:2F:7D:56:3C:F1:90
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F4328584823F6E312BC1EAFB3B1E62080
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa
Signing time: Sun 08 Dec 2024 17:17:38 +0000
ROA not before: Sun 08 Dec 2024 17:17:38 +0000
ROA not after: Sat 08 Mar 2025 17:17:38 +0000
asID: 834
IP address blocks: 65.87.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:f6:e3:12:bc:1e:af:b3:b1:e6:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Dec 8 17:17:38 2024 GMT
Not After : Mar 8 17:17:38 2025 GMT
Subject: CN=419b90be-546f-41b9-b74e-e65e4f9b1390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:7f:84:ae:f9:63:75:68:e1:b8:c2:75:9e:
ff:75:b9:c4:d3:65:f5:ed:8f:3a:96:24:1b:58:8c:
c6:0c:9b:16:76:ee:9a:25:45:02:9c:3a:5c:21:33:
49:02:5e:8d:a2:3c:1f:b8:cc:57:e9:9b:96:b2:6a:
eb:37:27:39:48:6b:c0:54:d6:7a:e4:22:19:83:d8:
bb:7b:78:cf:3d:b0:76:05:a3:99:f1:5e:5b:ee:0e:
50:ff:76:b6:83:a9:23:ee:f8:0d:2a:c9:e9:35:5f:
4c:e2:27:89:48:66:67:d4:1d:ca:5f:30:ae:e9:e6:
df:91:13:fd:45:3d:61:ba:6e:60:d1:a4:26:69:6c:
4e:55:e6:99:51:24:d4:d4:0f:e9:4c:ab:8b:8b:cf:
8f:50:11:03:ed:83:d3:cf:c0:1c:bd:0c:20:42:a7:
5a:cb:54:33:3f:f6:3b:be:8f:08:54:02:5b:7f:e6:
fe:ec:d6:e7:a7:9b:73:ea:60:20:59:73:46:92:c1:
91:27:c8:25:ea:01:cf:b3:34:71:70:a1:d4:8b:3b:
fd:cf:b2:66:2a:6d:66:a4:ac:1b:99:a2:ef:0b:10:
d3:9f:a9:d4:da:86:dd:69:cd:33:3f:82:86:8b:03:
51:f5:f9:35:ef:bd:0f:be:36:13:db:01:0d:b0:fd:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:C0:92:13:BF:F9:02:21:22:37:AF:D8:54:2F:7D:56:3C:F1:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d6:23:17:c7:b7:d5:f6:63:e2:fc:d7:4b:1b:bc:08:0c:c1:
b3:5c:93:6d:63:06:68:56:2f:4a:b3:94:d8:26:83:81:99:e7:
32:05:17:ec:53:5e:19:23:aa:65:72:4f:a7:b6:30:7f:b5:e0:
ad:44:6c:7f:a0:ad:90:7e:db:fe:b5:79:04:76:6a:cc:ea:89:
e7:92:e4:35:b2:9b:7b:65:7d:b3:c4:56:db:51:3d:b4:4f:b9:
8b:3f:78:05:1d:ac:34:3f:b6:c0:67:7d:64:d5:90:a4:c7:aa:
32:2b:a6:0d:3b:b8:d7:70:6a:b6:ac:18:6c:9a:72:e6:b3:e1:
9b:f3:ac:ef:bc:c8:95:4b:96:99:65:0c:36:c1:96:c1:b6:0c:
9f:7f:90:d2:c2:a7:55:79:e4:76:52:2e:a8:27:71:9b:b3:ff:
a1:6d:43:90:93:3b:f3:ab:21:44:70:16:10:89:01:0d:0d:4c:
3f:5a:18:37:7e:a3:0c:43:17:a6:8f:b3:3e:8e:43:22:95:87:
28:bd:f9:b6:a0:ef:3c:0c:6c:df:1c:00:38:21:28:b9:72:fe:
24:87:d4:f8:5d:25:5c:1b:b3:67:41:03:a7:18:6c:c1:a8:7c:
62:cf:30:f3:12:37:33:5a:55:8f:05:79:4a:3f:25:cb:46:72:
bd:d3:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:43:48 2025 by rpki-client