Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a999f508-54e9-359c-95b1-e61d5460452c.roa
File: a999f508-54e9-359c-95b1-e61d5460452c.roa (raw, json)
Hash identifier: FTgp/zGuLvWfKnwIvTdIlvdatz4YNbF1kx57NnmM9zU=
Subject key identifier: 83:9F:07:71:E0:F8:70:03:00:16:A5:03:73:81:CE:F3:48:13:B6:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BBF6F3F9521DB081D48CC900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a999f508-54e9-359c-95b1-e61d5460452c.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 65.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:f6:f3:f9:52:1d:b0:81:d4:8c:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=4d127bc7-38f8-4dec-ad3d-cc0cce6458a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:f8:21:04:b4:b2:eb:84:80:b6:02:50:1e:
ba:65:23:36:a5:f5:6c:a5:eb:2d:89:79:a1:01:0a:
06:32:33:82:94:57:02:f8:db:65:13:14:e3:95:a5:
7c:6c:92:3f:5e:4d:52:1c:ab:de:65:c3:1f:82:68:
a1:bc:4a:80:f9:54:46:41:90:8f:b6:93:39:21:ef:
de:4a:17:fe:26:2d:d3:55:9d:31:77:a0:47:b0:1b:
9a:8d:cc:2e:bb:07:a6:ab:25:53:1e:ab:23:55:d3:
2d:23:47:2d:dd:f0:84:55:62:2c:67:00:86:b5:f7:
74:ba:40:ad:7f:e6:f0:1e:5b:90:ae:59:d4:55:d6:
d1:24:e9:cc:17:fb:18:44:87:bc:d8:f1:16:83:da:
29:ef:9d:c3:88:c5:22:f8:af:92:00:36:dc:ec:a3:
9f:35:1a:46:d2:ff:44:b6:c1:5a:4d:ff:af:20:90:
da:2f:3d:89:55:50:45:6e:a4:11:8e:69:d5:ac:5f:
0d:f1:6d:18:0d:b4:71:26:5a:48:43:bd:f5:9d:f8:
ff:40:84:96:85:4a:b2:d7:b2:c5:aa:fd:44:80:44:
ed:7a:d5:7f:40:3a:67:30:0b:03:76:5a:68:e8:e6:
c9:c7:90:d5:50:f8:d6:a7:17:fa:aa:7a:ff:ee:b8:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:07:71:E0:F8:70:03:00:16:A5:03:73:81:CE:F3:48:13:B6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a999f508-54e9-359c-95b1-e61d5460452c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.8.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:26:b9:2b:e0:7d:fc:8b:db:c1:5a:05:c8:39:71:cd:6a:0f:
1b:11:c3:3f:8c:cc:ef:0d:85:4a:5b:fd:63:f2:93:e9:07:41:
4f:a1:5c:2e:bf:e8:67:38:2e:cc:11:d5:e0:d7:87:ef:4d:6b:
f0:8c:7f:97:85:25:30:8d:f4:bc:d7:0f:68:4a:36:de:07:93:
1f:de:39:70:92:59:1c:fd:f1:a8:76:bc:e1:9c:56:0d:a6:40:
cf:a0:bf:21:00:ab:d1:f8:68:b7:24:ec:87:ff:e4:86:85:41:
bc:46:89:2f:6d:b0:ad:42:ae:7e:9c:80:39:a4:c1:06:76:e4:
28:b6:13:23:b9:9f:77:0d:36:23:df:d1:58:22:90:e4:b7:e4:
e0:52:23:a0:3c:7a:c9:da:60:5f:3c:36:5d:aa:51:4a:e7:46:
40:d9:2b:ff:e4:c5:95:7d:4c:3d:68:85:e0:62:54:8d:71:66:
52:e8:7f:53:c4:58:2e:32:07:6b:e2:2b:2b:3f:a3:b7:51:7b:
9d:75:5e:aa:78:ec:9c:42:19:e6:6c:5a:99:9f:ee:6e:48:31:
89:91:39:5a:13:28:e8:ae:7d:34:1a:8b:83:83:33:7d:42:a6:
30:95:28:dd:c0:4d:89:6d:ef:4f:69:e5:9a:68:13:20:63:03:
c9:14:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:03 2025 by rpki-client