Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa
File: 8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa (raw, json)
Hash identifier: 6qXz/knHgM7gQoWQ6aJbp/xjhlRtEfRtB3IwikET+UY=
Subject key identifier: 33:61:47:59:AB:A1:82:C1:F7:0C:DA:EE:3F:35:A5:2A:67:9C:1C:6F
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F43285847FDE4DA4154A146E4893F6480
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 25752
IP address blocks: 65.87.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:da:41:54:a1:46:e4:89:3f:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=fb71ff8f-4d40-4e77-98e3-c99b3d7ac14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:b2:35:d5:b7:b9:8d:39:41:e9:02:70:2e:
ae:7d:ad:12:89:85:f0:d2:c4:7f:45:23:bb:f9:6a:
5d:2c:81:9d:29:c9:85:e9:a0:a3:1b:89:9a:9c:0f:
c9:6b:75:20:7b:dd:02:e9:69:29:07:21:2e:f8:25:
27:80:6f:57:27:ba:85:e4:68:5c:99:65:5e:89:ce:
e9:5e:50:ab:bb:a7:56:de:04:68:f9:8c:8e:88:1a:
0a:94:b4:2f:5c:ca:e9:7b:77:ae:9a:46:e6:d8:dd:
de:0f:0e:5d:a9:83:3a:06:ac:b9:e5:1e:8a:bd:3b:
ed:a4:3a:e8:66:38:ea:5f:64:83:0d:23:2d:27:20:
73:24:dc:98:ac:34:3f:19:09:f2:56:94:43:86:12:
24:19:16:3b:29:b3:8d:ac:d2:6c:06:4b:fa:70:53:
4a:f8:53:ab:3f:c1:43:d3:31:fe:fa:f5:25:4d:2f:
6f:73:a7:08:a4:d6:0e:dd:7e:ff:85:4c:43:f8:21:
0a:47:aa:bb:49:bb:03:e5:ea:93:d4:f2:7c:c8:f4:
c0:2e:c2:26:4d:5f:71:b9:8d:de:7b:32:24:1d:9c:
52:d6:36:b1:0d:54:fd:b7:1e:0c:9d:ae:41:3d:38:
35:10:cb:a5:a1:a9:16:23:61:85:7e:e2:b5:19:a5:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:47:59:AB:A1:82:C1:F7:0C:DA:EE:3F:35:A5:2A:67:9C:1C:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a8:aa:26:2f:b4:3d:cc:9d:83:e2:9d:35:d4:2d:84:e0:aa:
95:da:70:85:c0:cf:52:68:1c:8a:7a:9e:27:20:ef:13:ba:1b:
84:7a:bf:53:b8:05:36:7a:72:bd:78:6e:65:a0:b0:96:e4:9d:
59:f6:21:0d:0b:df:60:1a:cd:97:ac:6d:8f:a7:1f:bf:c1:fc:
41:91:3c:64:3d:1f:ca:91:00:aa:36:f6:79:90:64:45:2e:3b:
36:4e:be:55:a1:96:bb:e2:56:24:20:d5:71:6e:8d:e4:6c:11:
dd:6b:a7:65:d3:13:76:f8:42:ca:14:9f:79:27:27:15:47:d5:
4d:3c:c5:68:32:eb:cd:2e:f0:d1:3f:d0:ac:6a:86:79:32:4f:
96:87:85:06:4f:64:d4:57:0f:27:eb:f7:e5:a1:7b:2e:0a:70:
5a:81:0d:54:e2:9a:1d:e9:f8:4c:04:ca:88:cb:3f:c7:f2:5d:
f9:19:cc:48:d5:c3:41:ad:0a:e5:9a:e9:f5:59:fd:c6:87:1f:
53:01:8c:87:a8:16:55:30:af:09:d1:fd:9f:9b:fe:e4:b1:e8:
13:d4:9f:95:ca:a9:70:d9:a5:68:aa:67:0d:47:bb:7d:1c:89:
95:8e:dc:53:ac:d5:00:d4:5a:63:a2:09:d3:13:b4:ad:e3:e7:
81:c1:e5:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf95NpBVKFG5Ik/ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
ZmI3MWZmOGYtNGQ0MC00ZTc3LTk4ZTMtYzk5YjNkN2FjMTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/eyNdW3uY05QekCcC6ufa0SiYXw0sR/RSO7
+WpdLIGdKcmF6aCjG4manA/Ja3Uge90C6WkpByEu+CUngG9XJ7qF5GhcmWVeic7p
XlCru6dW3gRo+YyOiBoKlLQvXMrpe3eumkbm2N3eDw5dqYM6Bqy55R6KvTvtpDro
ZjjqX2SDDSMtJyBzJNyYrDQ/GQnyVpRDhhIkGRY7KbONrNJsBkv6cFNK+FOrP8FD
0zH++vUlTS9vc6cIpNYO3X7/hUxD+CEKR6q7SbsD5eqT1PJ8yPTALsImTV9xuY3e
ezIkHZxS1jaxDVT9tx4Mna5BPTg1EMuloakWI2GFfuK1GaVQtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNhR1mroYLB9wza7j81pSpnnBxvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvOGZiNzVjNWEtOWZkOS0z
MWU1LTk3NzctNGZlMzM1MjI5MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqoqiYvtD3MnYPinTXULYTgqpXacIXAz1JoHIp6nicg7xO6G4R6v1O4
BTZ6cr14bmWgsJbknVn2IQ0L32AazZesbY+nH7/B/EGRPGQ9H8qRAKo29nmQZEUu
OzZOvlWhlrviViQg1XFujeRsEd1rp2XTE3b4QsoUn3knJxVH1U08xWgy680u8NE/
0KxqhnkyT5aHhQZPZNRXDyfr9+Whey4KcFqBDVTimh3p+EwEyojLP8fyXfkZzEjV
w0GtCuWa6fVZ/caHH1MBjIeoFlUwrwnR/Z+b/uSx6BPUn5XKqXDZpWiqZw1Hu30c
iZWO3FOs1QDUWmOiCdMTtK3j54HB5RE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:45:05 2025 by rpki-client