Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c61cd111-ec9f-33e1-acb4-0daef830df7e.roa
File: c61cd111-ec9f-33e1-acb4-0daef830df7e.roa (raw, json)
Hash identifier: o6cBcry1h2gqSwSLyNam6CQRO4U5WTNvvpmwOZjaYTs=
Subject key identifier: C1:EC:AD:14:44:8D:E5:9A:88:DA:1F:5A:4A:F7:75:19:A2:A0:3D:9B
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F43285848116FBDDD12025D0DCD296F00
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c61cd111-ec9f-33e1-acb4-0daef830df7e.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 7018
IP address blocks: 65.87.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bd:dd:12:02:5d:0d:cd:29:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=a39f043a-d964-4c65-bd49-9a269488d219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:4a:70:11:93:5f:9e:9f:00:27:81:4c:58:
94:60:dd:41:d0:05:60:9a:eb:09:41:11:37:60:a2:
6f:e8:2a:a9:96:98:d1:7c:08:3e:21:ee:4b:ee:de:
64:5c:3a:31:a3:2f:df:55:fa:51:42:cd:7e:b8:52:
ad:1d:0f:7d:2b:00:1f:0e:a3:48:2c:1e:ea:68:17:
6d:87:d3:75:15:53:b0:d5:67:f6:b3:20:31:f5:64:
31:fd:a4:1b:bf:de:d6:a6:bc:b1:12:a1:25:0e:da:
94:9a:01:9c:2a:d7:6d:75:c5:24:7c:e0:5d:b1:a7:
8d:3a:a2:a6:61:e2:5e:e5:d6:2a:3e:b5:0e:76:17:
20:21:0d:f1:61:9a:7d:50:e2:0e:c9:61:25:66:0d:
9f:e9:70:d5:12:23:8d:a9:35:50:b4:0f:b4:a9:97:
b2:eb:cd:0e:ad:0b:9d:b0:22:3c:c3:82:ff:fb:8f:
56:8c:c5:40:af:90:a3:18:cf:18:70:8c:4b:37:fd:
c0:54:9c:a2:79:5e:08:73:d4:40:ed:b2:b0:84:ad:
eb:3c:15:c9:70:1b:b6:74:68:24:b3:29:0d:08:37:
f5:04:9f:9b:13:8d:42:50:5e:1e:63:ae:3a:cc:df:
d8:e7:cd:4c:ef:ad:11:2b:83:cf:33:4f:09:7b:6b:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:AD:14:44:8D:E5:9A:88:DA:1F:5A:4A:F7:75:19:A2:A0:3D:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c61cd111-ec9f-33e1-acb4-0daef830df7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:60:86:5d:1a:26:b5:28:6c:f8:b7:2d:85:f2:9a:05:a8:d6:
01:ad:4e:67:95:23:ac:10:5f:b3:9b:6c:1d:a5:8a:86:40:31:
f1:21:53:8e:ff:aa:be:63:2a:13:83:e6:5e:06:cc:24:8e:71:
d9:24:75:73:67:b5:03:0c:8a:8e:61:d0:3d:f2:aa:d6:ad:28:
4c:81:67:33:8d:f3:73:24:72:7c:8f:d4:4b:c0:0a:45:3a:b7:
59:1d:26:94:e9:d8:9b:20:32:3c:3c:ec:b9:bc:b6:8e:6f:50:
f1:8f:c7:1b:2c:5a:62:6c:c1:2d:df:46:3e:5f:65:83:a1:48:
e6:ac:34:c4:ec:98:1a:c1:90:1a:41:7d:e3:13:9c:75:ad:7a:
1e:dd:a9:ba:3d:b5:e1:8c:ac:a2:7e:d1:27:57:0e:b0:8d:dc:
8d:d6:76:cf:f7:09:29:d0:fd:c3:1f:ff:49:00:97:67:e1:a1:
2f:23:5c:b6:a6:ff:ac:a9:b3:ab:50:69:d2:b8:a4:83:5d:42:
31:9a:9a:e8:8f:b6:8c:27:bf:a9:92:59:8c:b4:3c:ce:bf:e1:
b8:c8:5e:b9:0b:f8:7a:1f:ea:c6:3b:bb:59:52:a5:4e:23:eb:
a1:6f:3a:96:74:47:e1:66:97:b9:fe:76:ee:a4:c0:5f:ce:ef:
2a:ca:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:48:54 2025 by rpki-client