Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa
File: faa4b138-2a66-3a38-85b9-47b64616ab70.roa (raw, json)
Hash identifier: Vv6KO9OG81Hs+WzRD8dg+kOE3o2LykBK0gDZW4sRMJY=
Subject key identifier: 76:D0:D1:A3:FF:A4:11:A1:92:20:E3:D4:2B:FB:74:70:1F:D9:F9:00
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F4328584878BB04786B351A79FA5BB898
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 7018
IP address blocks: 65.87.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:04:78:6b:35:1a:79:fa:5b:b8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=63a5bf7d-548f-4d2f-9e81-dc1a528e5e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:d2:0e:1b:fa:c9:e9:6d:07:63:ab:25:4b:
85:99:d8:be:7f:10:ac:7e:29:dd:48:fa:63:b7:2d:
68:41:df:4a:40:5e:4d:d7:77:dd:b7:5e:5f:18:f7:
22:53:cc:2a:e5:21:7d:ac:4b:e2:d3:9d:ae:0e:fc:
af:05:ae:3e:ec:b8:e6:7f:a8:87:51:4e:0e:1b:99:
03:6b:26:81:d7:52:71:41:dc:e5:92:55:21:49:b3:
67:f0:52:5b:20:fc:9a:70:84:e3:0d:81:f3:0b:69:
73:3f:76:3c:23:67:c2:a4:21:f0:9f:74:38:c8:03:
8d:a6:66:33:44:d2:f5:46:25:97:a3:77:07:2d:be:
7d:8a:d4:f0:4e:7f:33:68:f2:e0:29:54:40:24:f6:
4e:25:10:b4:a8:24:61:3d:67:1b:4a:79:51:f9:7c:
cf:37:6b:33:fd:f0:c7:4f:4c:3f:8d:f4:40:e7:99:
78:e1:b2:4f:6c:66:f2:08:79:70:0a:a4:fd:14:74:
74:16:e4:91:53:88:72:45:ef:17:ea:83:d3:34:42:
41:05:93:2c:67:ff:30:e9:5f:37:0c:00:3a:f6:1d:
a1:a1:ab:81:e9:3a:05:62:2b:1c:63:a2:9c:84:4a:
b9:fc:f6:24:dc:ed:af:eb:f8:95:84:bf:0a:85:4b:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D0:D1:A3:FF:A4:11:A1:92:20:E3:D4:2B:FB:74:70:1F:D9:F9:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ea:d8:94:b6:c9:5c:9e:4a:9c:e6:e6:13:ba:41:d9:9a:6b:
e7:2e:7c:83:da:35:c2:ab:b7:63:a3:b9:a2:e3:1b:81:77:5b:
6c:6d:57:8d:e0:bf:cf:ab:c0:e8:87:56:55:11:7b:b9:81:71:
73:e6:dc:f9:d0:7b:ef:47:2c:11:dd:60:ae:55:03:fc:e1:a0:
b0:b6:a0:05:82:f5:79:23:4b:ef:68:ef:cd:24:05:e6:ce:da:
14:b8:96:76:e9:88:63:97:9d:1e:47:94:ad:92:89:e0:63:de:
a7:2d:12:22:1a:c1:de:2d:e7:80:fa:94:8f:7f:a1:d8:14:e9:
6e:b0:3b:4c:cc:30:49:7a:49:e7:d9:35:d0:46:d0:eb:89:63:
74:6e:fc:2d:ca:7d:0a:5a:7c:c1:65:62:1f:ef:31:af:9a:99:
e0:d0:76:4f:12:82:ea:48:94:83:1d:02:55:f9:41:8a:06:72:
63:9f:1d:10:5d:96:20:07:cf:83:7e:f0:d8:d7:af:bb:ba:59:
9b:71:1c:fd:3e:b8:4f:ab:5e:58:c9:b1:78:fa:f4:11:81:c8:
59:44:eb:64:64:d7:d5:ef:fb:db:e6:85:66:17:bb:89:0a:d8:
a8:d3:28:1e:34:e9:a4:b8:d5:ce:16:df:c9:e6:d9:3a:25:9f:
c1:e2:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:02:56 2025 by rpki-client