Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a90648f-72a3-309a-ab57-5b963789f9f8.roa
File: 7a90648f-72a3-309a-ab57-5b963789f9f8.roa (raw, json)
Hash identifier: evJXRerITN0QAWB/+oGW8+diQTICqYZ2PUaN9bQoIuA=
Subject key identifier: 7F:AD:5E:C7:1A:D8:35:E6:FE:98:B9:B5:2E:19:90:B3:48:5D:93:FC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D810F6FAAA53731B7AFCC0800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a90648f-72a3-309a-ab57-5b963789f9f8.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 65.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:0f:6f:aa:a5:37:31:b7:af:cc:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=0c96bafa-ef80-41d3-87de-9a1c8e1a6394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:be:e3:ad:cf:79:a8:6d:e6:35:df:5a:80:
dd:24:43:91:1e:6d:71:a3:ba:f8:19:70:e7:58:4f:
8d:26:55:b9:54:15:38:07:1b:d9:40:72:0b:d8:33:
50:bf:0e:68:cb:91:25:70:2f:1b:1a:94:47:68:23:
84:88:29:13:23:1b:a4:1b:28:b3:0f:5b:12:ce:3d:
4c:1a:ae:dd:0a:f6:81:9f:22:9d:d2:51:a5:00:a8:
73:ff:68:cc:f4:7a:a7:a3:83:4c:ab:a7:7d:87:a8:
df:bd:05:90:cd:1f:35:93:0b:9d:48:82:59:b5:60:
59:7c:0c:03:df:6b:17:89:96:da:e2:87:43:02:2d:
91:72:2d:be:d7:3f:e9:ee:8a:fc:b1:6e:05:39:55:
0c:e9:89:f4:78:02:fa:82:17:aa:6d:97:90:14:05:
fe:88:4b:8e:85:d7:84:93:2c:0a:e5:6f:2d:0f:65:
c6:b3:82:dc:bb:dc:00:0f:86:24:b8:30:0e:af:df:
e6:ae:39:d4:a9:9f:63:ac:3e:ce:72:1b:51:03:94:
b6:d6:24:26:ff:13:ab:3a:38:36:e4:57:fd:16:1e:
2b:1d:0a:04:79:9c:90:ac:a3:b1:87:1e:72:e6:03:
cc:e9:2f:b5:67:14:36:5d:71:54:87:bf:3d:2a:68:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:5E:C7:1A:D8:35:E6:FE:98:B9:B5:2E:19:90:B3:48:5D:93:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a90648f-72a3-309a-ab57-5b963789f9f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.8.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:4c:29:af:68:c9:be:7b:04:4a:93:57:04:44:f7:f5:76:5b:
06:4d:cf:42:49:93:52:8d:1d:96:60:85:3d:87:53:bd:b4:0a:
b6:74:54:ad:2a:65:8f:d2:ea:58:6d:e3:85:d2:25:50:15:50:
b0:88:aa:b3:f3:ff:68:d9:ea:0f:08:cf:f8:08:e1:38:cf:0f:
2e:e2:c4:08:db:f2:21:0b:6c:06:7b:48:70:5a:29:d5:32:2d:
32:e1:bc:b1:d9:65:6f:5f:c3:bd:5b:50:97:47:06:45:8f:16:
1e:22:a9:5e:2f:f5:c7:a4:e0:c8:d1:bc:ab:b4:9b:aa:46:c4:
fc:1b:02:6f:9a:59:cd:ea:76:8f:e2:29:12:ed:9a:82:67:3e:
dd:0a:9b:cc:3b:73:d6:0c:7a:ad:13:3c:77:bc:66:e6:24:91:
fe:29:b2:f0:be:a8:42:4e:0a:f9:d5:a7:2b:f9:02:43:15:1c:
0b:0a:8a:a7:9d:9b:e0:f7:f2:e1:c4:d1:0e:d1:85:09:8f:86:
4b:05:c4:df:0e:47:0d:d3:8f:25:f6:12:89:72:4f:96:cc:f1:
c3:16:8b:ce:24:8c:e9:7c:34:89:d4:0c:d2:ec:7e:a3:03:3b:
2b:6a:64:c8:f3:17:04:86:a5:c8:8e:05:20:0a:93:ae:42:9e:
cf:8e:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:51 2025 by rpki-client