Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa
File: 2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa (raw, json)
Hash identifier: qiZoUoCAxOVduYRD/VAz3TAZ/3ceWeEz+dVkbUlDolc=
Subject key identifier: 1C:F1:91:8D:C2:D5:F9:C7:93:B9:90:71:E6:F5:44:B6:5B:AF:45:2C
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F43285848D9E7B55B508FC436E04E6200
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa
Signing time: Tue 11 Feb 2025 21:24:10 +0000
ROA not before: Tue 11 Feb 2025 21:24:10 +0000
ROA not after: Mon 12 May 2025 20:24:10 +0000
asID: 213990
IP address blocks: 65.87.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:e7:b5:5b:50:8f:c4:36:e0:4e:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Feb 11 21:24:10 2025 GMT
Not After : May 12 20:24:10 2025 GMT
Subject: CN=865388f9-2b4c-44a6-baba-b876bd1b7114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:33:5c:21:46:ed:fc:f7:d8:9d:33:34:3c:
21:85:b1:d2:7e:c4:28:3a:7e:bf:02:62:17:af:ac:
cd:61:65:2b:ab:b3:cf:00:cb:f4:65:47:f2:ca:d7:
f4:ac:0a:14:b1:b0:c7:b4:2c:21:0a:6a:c3:a4:77:
2d:b7:d9:69:15:d4:9f:f3:86:84:af:d9:4f:cc:01:
08:0a:b5:e1:a8:5b:54:d6:f0:13:05:e1:57:8a:24:
28:c3:a9:79:bc:02:0e:f0:f3:ba:6c:c7:57:81:bf:
87:98:03:a2:fd:25:ea:d7:a2:7f:f9:48:a6:a1:a2:
f0:95:5e:05:c8:71:00:bb:78:94:04:70:40:6d:5f:
a9:18:d4:c7:45:bd:93:18:a0:b3:38:45:ea:46:f0:
53:db:16:ce:4a:22:e4:0a:94:3d:19:7d:28:02:83:
9c:0e:40:83:65:85:1c:60:20:70:bb:27:f5:b0:89:
7d:89:0b:75:d4:fa:5c:cd:86:ec:6b:ad:40:88:42:
e2:dc:ac:6e:fb:f7:47:c9:0c:3e:a9:28:43:b6:45:
9a:34:8f:00:38:93:a4:fe:ac:3a:be:9e:7d:18:71:
cf:d3:1c:7d:69:ac:a4:e8:ae:47:6e:f0:14:3f:e8:
94:e4:b1:5d:bf:e9:29:b9:c5:53:2d:cf:f8:5f:81:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F1:91:8D:C2:D5:F9:C7:93:B9:90:71:E6:F5:44:B6:5B:AF:45:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:3d:67:f6:1e:5f:03:b5:67:e9:20:45:7a:b8:c2:59:10:76:
74:54:a7:87:d1:d1:43:15:1c:d6:b9:39:dd:25:f9:43:fe:76:
70:b4:df:31:43:d9:fa:94:22:8b:22:17:4b:66:ca:d3:84:b8:
28:b5:5d:da:04:78:6c:a7:83:43:5c:3c:b0:d5:63:24:42:20:
af:d6:a7:a4:be:00:dd:52:91:3c:7c:08:00:8c:4f:36:68:d5:
85:6f:c9:a7:fa:e0:b3:6b:af:a0:4f:b4:fe:e0:de:06:25:36:
2e:46:b2:f1:8a:20:11:6c:d1:f5:a6:6b:41:cb:59:14:86:07:
d9:e4:37:d1:34:63:40:25:4c:9a:71:17:71:80:e5:76:e8:44:
92:8c:d4:49:ed:7a:94:48:1f:8f:54:1d:d1:4c:57:c3:a3:16:
e1:a5:22:d7:82:46:c5:49:84:7a:90:73:a7:bf:cc:fa:a0:86:
d7:0c:e0:69:ae:ff:6c:53:6a:56:e0:f3:5a:4e:e5:87:62:0d:
9e:f1:c4:fd:c4:4d:18:7c:23:26:0e:77:90:3c:1b:68:70:67:
c7:f7:55:b4:42:f8:18:c4:be:1f:e5:35:d3:a8:60:4e:f3:0e:
c2:42:56:7b:a8:08:a3:38:0f:66:08:09:24:75:45:af:c6:ff:
7f:8e:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:38 2025 by rpki-client