Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa
File: ef494090-aba7-39db-8156-d416d68d068e.roa (raw, json)
Hash identifier: 8reFPGh79xWQpAnII47OJ+wfSJbjd1iOM/0qbilhxlw=
Subject key identifier: 35:8C:86:94:7B:05:0F:50:1A:8E:B6:63:BF:58:09:8C:CA:B2:20:A7
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F4328584890B5898A07156D31D3C7ADC0
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa
Signing time: Thu 16 Jan 2025 16:09:04 +0000
ROA not before: Thu 16 Jan 2025 16:09:04 +0000
ROA not after: Wed 16 Apr 2025 15:09:04 +0000
asID: 7018
IP address blocks: 65.87.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:b5:89:8a:07:15:6d:31:d3:c7:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Jan 16 16:09:04 2025 GMT
Not After : Apr 16 15:09:04 2025 GMT
Subject: CN=a7fe6f3c-8e78-4c19-b5aa-210a14d2c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:1c:0b:eb:41:7f:f7:73:61:42:7b:7c:e7:
9c:38:ee:f2:f1:1d:9e:59:b6:8f:cc:90:48:a1:3e:
07:19:23:95:e8:4c:6f:7a:a3:70:eb:16:e1:d1:e8:
72:07:84:8c:1f:02:92:bc:02:3e:98:04:b9:61:2e:
ac:39:17:25:df:3e:83:df:9c:f3:ee:99:c8:13:e2:
7c:7f:2a:ce:af:aa:d5:13:a0:14:7f:e4:3a:27:2f:
71:0a:ae:c2:35:91:9f:ea:93:81:69:28:8a:2e:40:
c9:10:e5:e9:80:55:5b:c7:48:9a:e5:2a:ef:b7:ec:
42:77:a2:d3:51:29:9f:74:fe:8f:f1:63:8d:9b:a5:
1d:95:88:c6:33:8a:4b:c2:99:5d:43:cb:88:f6:c8:
03:d1:76:63:f1:a2:92:17:39:98:60:23:c8:4c:40:
0f:cb:3c:16:97:b8:63:5e:c3:b4:ae:d4:ea:e8:fd:
ce:a2:87:29:00:95:c6:58:b0:e5:2a:44:75:a1:2e:
3a:df:24:ba:15:76:53:a5:69:dc:2d:21:e4:4b:ee:
18:c1:02:58:66:66:53:f0:9e:38:d8:a4:4a:bf:98:
b4:a2:b6:48:57:aa:14:98:64:e6:85:8b:40:0b:82:
f4:74:c2:2b:72:2e:e2:a7:0c:3f:a6:5a:12:f8:a6:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:86:94:7B:05:0F:50:1A:8E:B6:63:BF:58:09:8C:CA:B2:20:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:d2:63:af:5b:d6:31:ba:33:63:47:46:d3:ca:97:1b:bc:a8:
88:56:f1:39:1b:ad:2f:26:32:ea:1b:28:32:19:94:f7:1e:e2:
a9:e8:d5:cc:d1:0e:e5:d3:eb:29:ac:d6:dd:a8:14:14:ba:be:
7f:81:c3:ef:61:d8:fe:33:23:3c:af:94:b4:c3:e4:20:f7:89:
08:30:cb:4b:78:60:e2:ed:3e:1c:ca:67:52:b4:81:e7:53:47:
72:84:51:2c:55:19:25:95:f8:b8:4f:84:a2:fb:2f:9e:c3:14:
87:f0:61:62:14:16:0d:63:92:77:21:b5:ff:17:2c:8a:5a:5c:
2a:93:c3:62:90:73:fa:8a:f5:06:0f:a7:c2:09:c2:dc:3b:9e:
d2:47:11:2e:d3:e8:c9:d1:20:60:42:2c:8e:ed:6a:6f:4d:80:
70:76:7c:c5:1c:5a:20:ee:e6:c8:c7:c7:c1:eb:3d:a4:a5:06:
06:02:0e:2b:a9:3a:be:1b:59:4b:71:c8:d0:8f:61:55:0a:6b:
0b:bd:ef:2b:ce:a9:ef:f1:d6:58:f1:7b:90:ad:df:3a:46:4a:
0f:74:62:d5:df:ec:41:14:5a:58:9a:1d:ee:e7:d2:86:04:c9:
57:14:f0:4c:76:31:d8:6a:20:55:f5:6b:e3:aa:d2:f2:db:0a:
78:89:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:55 2025 by rpki-client