Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa
File: 1013b58b-c978-32db-a484-4f958d5cd161.roa (raw, json)
Hash identifier: rNuOEDQUgtbXMO8ynyoUV/w1Rhg3JMxtg6/oyE0cSW4=
Subject key identifier: A8:42:00:21:4E:4A:29:5D:44:7D:41:A1:40:EA:3C:8C:05:33:38:43
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F432858491511570DAD5F1B3E52C6DD68
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 5650
IP address blocks: 65.87.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:57:0d:ad:5f:1b:3e:52:c6:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=f9965e98-fb6b-4e01-ae03-18ec43e0f0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:a6:5b:63:54:57:1b:64:f4:6a:89:b6:74:
2f:3d:b8:ab:b0:1a:e5:80:9c:43:61:6d:d4:26:be:
24:b7:a5:13:1e:fa:25:c3:9a:49:74:e1:d8:02:1d:
87:b3:b8:fd:a4:7d:68:22:69:19:d6:ce:d4:8e:b2:
9a:28:40:42:e6:2b:5f:c8:d6:f0:3e:57:23:ad:f3:
5e:17:14:de:b6:7d:34:ac:cd:87:8e:5b:2c:c2:71:
aa:b4:49:4c:5e:a2:4d:d9:c4:90:43:2e:26:62:7e:
33:44:4f:e0:ba:e1:63:c8:c3:60:48:6c:72:e2:8d:
85:f9:cf:5d:62:bb:40:17:4b:b9:0e:d3:8d:86:7e:
95:ea:f3:ed:ad:dd:ad:c1:40:fd:8c:bb:7f:40:9d:
ec:01:c1:f2:ed:52:70:52:45:5c:ef:1a:52:66:18:
4a:50:ac:da:9b:50:e9:d4:ec:93:b6:e5:12:48:fb:
2b:31:37:a3:7b:bf:2d:67:f0:d8:53:e8:58:df:41:
7d:56:b8:3e:dd:85:2c:a7:60:b4:85:b3:aa:46:ef:
0a:ae:e7:f6:1d:20:64:3f:c6:18:1b:a8:17:8f:b7:
5c:ee:b0:d0:a7:d8:1e:cf:7f:e8:8e:0a:64:5f:3f:
29:75:95:1e:cb:21:c3:aa:da:99:85:5d:45:ca:cb:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:00:21:4E:4A:29:5D:44:7D:41:A1:40:EA:3C:8C:05:33:38:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ea:1a:24:fe:ac:76:e9:a1:4e:89:b3:f4:85:36:a6:6b:26:
f4:29:d2:c3:18:1d:eb:7b:6a:d8:ab:33:89:c8:fa:24:72:5b:
65:97:f9:4c:c2:90:3b:ce:3d:06:0c:52:cb:bb:81:79:47:d4:
db:69:88:ff:5d:11:11:bb:7a:9e:f0:fc:01:37:08:6b:70:ac:
1a:8c:19:2f:91:05:81:9f:ad:7c:88:2c:af:65:43:09:9b:66:
1b:0c:39:96:53:7c:50:84:af:53:c5:e3:82:99:31:c5:d2:cf:
54:37:2d:b9:b0:7c:57:3f:11:67:07:0d:b0:b0:28:cf:ee:a6:
d0:0d:4a:ca:2c:e0:1d:9f:0d:ed:1a:9f:50:00:92:d4:61:57:
18:b7:d9:cb:12:25:e5:e4:f8:0f:82:36:fb:99:a1:4b:9a:76:
8d:02:ed:f2:ee:1e:81:c2:5c:09:51:78:ea:76:c9:f8:81:9c:
82:ff:c1:9d:73:3e:1a:1c:fb:7d:ba:5e:78:20:e7:65:65:e2:
b7:1d:61:18:29:33:6f:67:6a:2c:b2:10:d4:b2:47:78:2f:ef:
38:46:de:2f:df:79:f6:2a:e5:c8:b5:17:c2:3f:8b:83:59:de:
87:3d:de:9e:fa:b1:86:d8:62:92:b8:f0:1c:2b:a3:15:70:a5:
f1:94:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:48 2025 by rpki-client