Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa
File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json)
Hash identifier: MX7nWP8h1yuDj7DoMf64yt+Dhw/wnDpFhEo5nJkWfkU=
Subject key identifier: 38:1F:82:02:6E:05:D5:E5:7D:C7:04:02:75:88:3C:11:55:11:60:50
Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1
Certificate serial: 010D0C9F432858491A0BC8D37ECAB27D3BB91100
Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa
Signing time: Thu 06 Mar 2025 20:48:35 +0000
ROA not before: Thu 06 Mar 2025 20:48:35 +0000
ROA not after: Wed 04 Jun 2025 19:48:35 +0000
asID: 16509
IP address blocks: 2620:85:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:0b:c8:d3:7e:ca:b2:7d:3b:b9:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1
Validity
Not Before: Mar 6 20:48:35 2025 GMT
Not After : Jun 4 19:48:35 2025 GMT
Subject: CN=284ed8cc-ad86-469a-83c2-71aa35cdd554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:cf:79:81:d0:4d:04:f0:c5:82:15:0f:d7:
2e:a5:50:a9:41:1c:6a:d1:3c:57:60:b0:5b:2e:45:
65:61:c7:75:85:29:bc:2a:f8:8c:3c:58:0e:2c:65:
b8:33:2b:c2:33:32:fd:ed:ce:cb:81:da:b0:96:7e:
f2:0e:c7:2f:20:e3:0d:d9:94:59:9a:c5:b2:7d:bf:
c9:63:4a:3c:b7:80:b7:75:60:75:d2:6e:b0:d2:60:
88:dd:07:06:2c:c0:ad:09:5e:51:8b:1e:4b:3c:b1:
9e:21:70:f1:bd:f6:e9:d5:d1:da:6d:3c:d9:94:c4:
ed:12:9d:5c:63:23:34:4b:a9:80:28:66:c9:9e:64:
fa:ba:23:03:df:c2:89:cd:bb:15:83:a6:5b:41:24:
a5:1b:78:d6:49:23:70:68:b6:49:02:77:4e:fe:ce:
3a:db:8e:0b:5e:fb:85:17:46:75:d8:98:cc:66:7f:
26:36:50:40:a7:c8:6e:aa:87:b9:1c:de:8f:de:08:
de:80:cb:98:34:07:b5:43:e6:2c:e6:01:aa:5f:c3:
f1:0b:bc:dd:c3:f1:bb:dd:fb:1b:9a:2c:f0:7e:d9:
32:77:2b:81:44:82:b8:e4:17:78:b0:ba:58:22:24:
70:18:9e:bd:4c:07:fe:06:d9:85:2a:b7:77:b0:5d:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1F:82:02:6E:05:D5:E5:7D:C7:04:02:75:88:3C:11:55:11:60:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl
X509v3 Authority Key Identifier:
keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:85:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:97:3e:2e:e7:ea:10:1f:04:7c:02:0a:27:f3:ff:97:52:70:
27:51:cb:87:22:be:5b:e0:1f:42:86:fb:4c:fd:db:1f:ad:f0:
2b:77:4c:c4:c3:ba:54:b3:8f:9b:ef:ff:28:d3:f5:7d:45:95:
70:43:27:fc:ec:6a:a7:b0:2c:4a:96:d2:af:49:39:07:e7:d7:
aa:38:55:46:66:90:8f:9c:b9:11:cb:30:7d:79:1f:33:0a:67:
a5:72:0d:97:c5:62:c0:4b:92:f6:a2:91:d9:12:69:5a:b3:ca:
d3:2d:11:5f:b3:33:6d:a3:58:22:d4:d2:35:86:f7:ab:6e:16:
a4:b8:a0:00:62:b0:08:82:51:bc:ce:78:8f:af:da:0c:4b:ee:
02:c5:f6:f4:4f:a7:74:73:9c:69:92:04:3b:91:ab:e1:6f:34:
ac:03:36:36:3b:75:37:66:d5:ae:5f:d3:43:7b:7d:ac:c3:d6:
c6:c9:0e:4c:e3:f6:f4:de:fc:7f:a5:31:2a:1e:81:41:35:d4:
c2:1f:87:b6:9c:e3:b9:1a:05:84:e1:05:e5:98:49:35:b7:a3:
da:6b:34:76:2b:09:15:87:6b:c9:be:c2:14:9c:f4:9e:7b:e2:
39:b1:f1:75:7d:91:12:43:e3:49:10:0f:67:a8:51:3e:9f:ac:
f8:4f:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:26 2025 by rpki-client