Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a02791e5-4a52-310b-829e-c75fbf1aefa4.roa
File: a02791e5-4a52-310b-829e-c75fbf1aefa4.roa (raw, json)
Hash identifier: j3q8X1LW22u15vhOUOPKOuK2zvozQQ2B9uYm97ns9vM=
Subject key identifier: 00:CA:D0:E6:6A:FC:56:BC:34:0D:35:21:A6:3C:4D:8A:2E:68:4C:B5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD05AA87E6B106CDE50D16BE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a02791e5-4a52-310b-829e-c75fbf1aefa4.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:5a:a8:7e:6b:10:6c:de:50:d1:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=4b98de2e-2232-4b47-bf24-7cda2d5559d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:c9:b4:89:4b:fa:75:4c:cf:0d:8e:bd:4a:
f3:74:45:96:cb:09:0d:a9:1d:98:05:cb:1e:3e:5e:
8a:fa:2e:b4:9b:f6:18:79:87:3f:30:ff:aa:47:58:
7d:92:4e:ab:3b:e9:78:01:9a:43:78:57:f7:4b:c7:
6f:6c:8d:49:35:7c:c9:73:d3:d5:35:a2:c6:7e:46:
d2:6b:50:ef:ca:ad:df:6f:8f:dc:31:9f:78:7b:80:
c4:33:24:41:44:56:08:0b:39:91:4b:6a:3c:ca:d7:
36:6d:b8:58:20:43:3f:54:a2:44:de:a2:2c:1e:29:
8f:72:27:a3:a3:d5:32:18:f3:52:90:fa:86:96:b0:
5f:b3:81:fc:84:c4:16:9d:29:61:e9:0d:fc:27:d0:
0c:73:ef:e4:94:51:a1:af:6f:4c:34:1e:a6:4a:27:
3e:58:df:03:51:f9:ad:4f:e7:56:94:a7:25:09:fc:
30:a7:17:35:12:a1:f3:2b:7f:c6:b4:41:fe:50:01:
50:ca:37:11:eb:0e:49:27:da:81:0b:f8:7b:7a:e5:
83:23:7e:f1:ae:40:8c:a3:a5:4d:a2:64:e0:c5:23:
9e:75:78:87:60:e1:e2:2e:63:c8:89:7d:21:4a:ef:
29:5a:f9:52:a3:6e:ec:1c:57:73:55:02:f0:c0:08:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:D0:E6:6A:FC:56:BC:34:0D:35:21:A6:3C:4D:8A:2E:68:4C:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a02791e5-4a52-310b-829e-c75fbf1aefa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d4:ce:fb:bf:34:71:ac:3e:d1:0a:7d:19:cd:ec:14:89:26:
5b:86:79:d6:90:b8:79:8b:8e:e8:88:79:ee:94:9c:02:d1:79:
62:ca:ca:a2:b4:bf:18:67:bc:56:07:b8:cb:9f:fd:3f:9d:4d:
a9:a0:2d:c3:38:49:da:76:e3:ad:cd:0e:7c:5c:71:27:9f:81:
fa:c3:01:9f:17:7a:41:96:fa:a6:5a:40:d7:71:26:9b:7b:fe:
33:ac:68:d1:d0:2f:c6:76:b3:3c:f5:b2:d7:57:c2:95:a3:f1:
0e:b4:eb:a0:05:51:4f:ba:db:6c:25:fc:26:3c:cb:fe:74:81:
27:e4:e0:49:82:ab:e5:42:1d:48:4a:5d:28:88:af:9c:bb:fc:
31:cc:ef:04:cb:30:b2:ea:45:a5:29:d0:ea:a1:01:12:ce:e0:
88:3c:7c:87:5c:e5:b4:1a:bf:30:b4:2a:9e:c7:37:4d:9c:90:
bb:9f:f3:46:79:1e:a1:a6:e2:c8:a3:f3:53:6c:15:e5:9a:cc:
69:12:59:97:7b:5c:a9:79:2b:4a:ce:81:37:e9:f1:82:be:9c:
91:cf:0a:60:68:6b:0c:0d:60:15:ea:b2:10:9c:9b:bc:0c:fc:
6c:73:1b:2e:ef:e4:7f:52:f8:98:0b:63:0f:6d:96:72:ab:84:
29:0c:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:51 2025 by rpki-client