Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25610b79-994a-3009-8401-39ac68ddedca.roa
File: 25610b79-994a-3009-8401-39ac68ddedca.roa (raw, json)
Hash identifier: viwuBxzgP8hH+wz/t6Uawp9tnYSelOXTQiBctRBt5yU=
Subject key identifier: DA:87:D9:96:23:F3:F2:5E:A3:CB:CF:2A:4B:8B:9B:11:F5:B6:3D:45
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406DCBC84F89F7634FE8D12E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25610b79-994a-3009-8401-39ac68ddedca.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 65.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:cb:c8:4f:89:f7:63:4f:e8:d1:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=af509ba6-7268-4f2a-a517-581b4e3e8f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:b8:2e:a2:cf:50:89:cb:a1:1c:da:1e:16:
cb:29:92:23:9f:29:82:8b:35:a4:e6:fb:75:88:8e:
2a:8a:bc:58:45:1d:7c:bd:18:93:b6:58:34:09:ff:
d1:b6:12:a5:45:ed:b4:64:99:4c:22:7c:7e:26:f9:
d9:cd:62:8e:1a:e0:d4:0f:c9:66:e6:fa:db:fb:e7:
2c:d2:2c:05:79:13:e4:a0:d5:3e:95:a5:2a:1e:62:
19:20:3c:a0:bb:35:fa:60:ce:9a:73:e5:6f:f1:1a:
1f:bc:34:87:f0:bd:17:51:e3:8f:9a:7c:27:b3:4a:
6a:a7:54:42:ff:e8:b7:23:7a:2f:89:d7:7a:fb:9f:
2d:06:d9:2e:ea:b2:53:ad:06:76:f5:b6:29:64:b7:
97:fe:cc:75:8d:7a:df:b2:ca:09:e8:3d:5f:8c:37:
de:e2:b0:84:aa:63:35:b7:d1:61:1a:d1:a4:c0:f4:
f6:45:95:26:ac:4e:4a:1c:4a:1a:e7:5c:0e:7a:e7:
b3:b8:8d:4c:6c:8b:bc:1c:23:c0:71:f6:84:2c:1c:
57:ea:f0:41:62:49:7b:4b:92:c8:7d:15:43:85:06:
0a:c7:2b:b7:42:55:b4:df:ec:61:14:51:bb:b5:0f:
49:a5:30:31:fe:97:48:6e:78:ac:0c:52:9e:95:8a:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:D9:96:23:F3:F2:5E:A3:CB:CF:2A:4B:8B:9B:11:F5:B6:3D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25610b79-994a-3009-8401-39ac68ddedca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.8.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:24:a5:9b:a8:1c:f7:e5:8c:78:6b:9f:d6:75:82:fc:ae:4a:
27:11:57:3c:dd:1c:91:89:7e:3c:ac:5d:f2:e9:dc:37:5a:f1:
cf:55:d3:0b:3d:f6:dd:96:f4:4e:5e:07:33:b1:15:6d:bd:ef:
02:04:b3:1e:0e:a6:06:f6:b0:6b:aa:c2:b5:14:55:91:2f:52:
3f:9c:b6:51:03:07:00:74:ef:d7:3f:a1:dd:9d:66:22:05:f7:
f1:d0:e4:0c:20:38:d3:b7:c2:70:71:37:13:b5:e1:20:9f:a9:
9f:22:38:4a:34:b9:6d:1d:f7:fe:c4:50:21:31:01:87:5c:3c:
0d:ef:00:57:92:4f:6b:44:29:e8:a3:26:70:41:44:c0:10:d0:
89:4b:cf:d6:4b:bc:e2:04:fd:30:d3:f0:fc:d5:cb:90:e6:d8:
9d:92:e7:fe:54:04:4b:55:42:78:84:b9:eb:7c:c5:e0:e6:95:
fb:ff:83:d5:9a:a6:9c:1f:da:db:e9:3b:b5:b5:62:24:e9:9d:
1a:3d:8d:9e:53:3a:90:35:c3:fc:f8:98:5b:be:ca:f9:62:50:
e1:68:2d:ee:63:2a:86:15:4f:d5:3a:ea:47:ed:c2:70:65:b0:
0e:d0:b4:a4:bf:67:f7:34:d5:80:9d:31:f3:f4:e4:53:8e:a2:
24:2b:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:55 2025 by rpki-client