Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa
File: ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa (raw, json)
Hash identifier: PJeHnTcrh8uTVPPmtSBd+E92eMkWcW9qbHHqCvmIe+0=
Subject key identifier: 06:89:9D:61:BA:C4:80:5F:B2:AD:7E:54:55:63:35:B3:74:CF:89:79
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285848A830AFF3A3E702C54AA9EF00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 209181
IP address blocks: 2607:740:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:af:f3:a3:e7:02:c5:4a:a9:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=5a65dbd6-ab1c-4a0b-b167-b2cd9c4597c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:c7:bb:c3:6d:60:cf:f4:f0:39:5b:bd:e2:
b6:69:a7:da:30:30:8b:84:2c:31:e3:c1:77:72:f2:
26:10:f7:a3:9c:9c:40:18:ea:b3:7e:c1:6b:fa:6d:
71:bd:ed:8f:d7:be:0a:af:1f:d6:06:f3:2d:b9:d4:
ad:4a:8d:6a:06:69:a0:36:3e:ad:97:73:5f:11:8a:
c7:bc:07:7f:dd:b4:d3:a9:51:15:b5:c2:3a:64:9c:
b8:da:e8:60:cb:61:ee:83:33:d1:cf:14:2d:d3:cd:
96:fc:78:b5:27:5c:8d:fe:99:cc:59:c0:cf:97:b9:
73:73:80:83:4b:ea:9c:df:da:e2:92:77:42:ae:92:
68:01:71:05:2e:cc:a3:85:99:ea:13:86:3a:9d:74:
a3:0e:11:df:a2:67:e0:1e:0b:af:49:8e:f9:5f:92:
e3:c8:61:3d:b8:40:f9:19:19:b0:51:eb:2e:56:44:
c6:55:28:28:b7:69:fe:cb:a9:92:ae:59:b2:1c:46:
81:dd:35:4b:bf:a8:f8:f1:a9:7b:33:e6:06:ce:a1:
02:d6:8d:ff:5f:02:4d:c9:9e:f0:8e:21:0d:04:20:
a3:8b:d0:3c:c4:6d:88:a1:64:92:8a:ff:d8:27:ea:
a0:79:93:8b:54:21:0b:d6:95:d6:01:35:75:87:03:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:9D:61:BA:C4:80:5F:B2:AD:7E:54:55:63:35:B3:74:CF:89:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:2a:e5:4d:69:3e:00:99:13:19:5a:f5:df:87:96:85:df:28:
58:a6:11:c9:e0:0b:36:e9:ad:67:6b:43:24:de:84:ec:77:ba:
6c:54:f7:a8:ef:7b:c7:85:99:a5:2e:b2:16:83:f0:f7:d4:15:
0f:f9:8d:92:eb:70:88:17:fd:39:c1:9f:ef:02:0d:a9:ff:bf:
25:26:e6:d1:29:2d:14:b2:43:a7:47:3e:1b:f1:b2:ed:31:0c:
d3:2b:9b:48:e0:ed:2d:f8:0a:7d:30:dc:22:2f:ec:bb:31:0e:
79:9d:f9:63:26:64:39:47:33:6c:79:45:d6:c6:dc:37:f8:03:
3c:9c:f8:1c:cd:58:10:4f:20:05:aa:34:e2:22:4f:82:2d:80:
cb:7e:21:ab:d8:47:25:0b:2c:49:53:b7:5f:7a:20:4f:ef:40:
ce:23:36:ae:fa:cc:60:e9:f5:7e:a1:e0:b8:4b:f9:14:f4:d3:
f7:74:ea:d3:e4:26:30:95:52:f7:9c:f8:a3:2c:87:6a:ac:d3:
86:15:97:e2:83:bc:f6:86:61:67:d0:f9:71:e2:45:3c:6f:5f:
29:30:de:b6:b0:72:03:39:6d:85:81:7f:8c:f0:c1:0f:96:65:
b2:a7:cc:82:f2:9f:30:4f:81:2b:bc:d9:7e:e9:1c:56:70:19:
49:67:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:13 2025 by rpki-client