Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
File: aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa (raw, json)
Hash identifier: BQSEVPc9+StRgc8IRmbcIcg9YDbGs2jGIPQqVoDY2us=
Subject key identifier: D8:97:07:55:3A:9E:3E:6D:6A:8E:31:67:5B:E8:63:19:E4:A6:62:D0
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F43285848AAFB4FE4D04B3C9D5BF82B80
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
Signing time: Sun 26 Jan 2025 02:00:38 +0000
ROA not before: Sun 26 Jan 2025 02:00:38 +0000
ROA not after: Sat 26 Apr 2025 01:00:38 +0000
asID: 11260
IP address blocks: 71.7.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:fb:4f:e4:d0:4b:3c:9d:5b:f8:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Jan 26 02:00:38 2025 GMT
Not After : Apr 26 01:00:38 2025 GMT
Subject: CN=5a8d7cae-dbb9-4f64-a3f4-4b3c070bae3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:73:58:32:47:2e:76:80:d8:c5:28:6c:d6:
f3:26:56:a7:f6:69:e3:e6:27:81:f2:d7:75:6e:67:
8e:f9:ec:a3:fa:94:3b:d0:5f:95:f0:a6:7c:86:be:
19:38:7c:12:1e:f6:84:69:b7:f3:e3:ae:76:f2:6e:
42:0f:79:88:6d:23:16:f2:4b:82:2d:4d:35:7f:90:
ff:57:ec:5e:e3:b3:c4:d7:0e:9e:15:84:c5:ca:b0:
9c:a2:98:64:95:98:78:01:a1:7c:42:a7:64:7a:1a:
f4:93:f4:4c:5c:75:88:8a:aa:5f:cd:d6:6f:69:ce:
cb:04:16:02:67:17:8a:f5:71:da:11:20:62:10:55:
da:58:b8:cc:78:4a:38:10:39:69:ae:19:9e:42:e2:
0d:44:f1:08:62:97:2e:76:03:40:ee:7c:61:ee:7d:
f4:37:cc:a5:bb:92:77:bb:aa:0f:b9:4f:74:91:10:
86:4f:ba:80:67:e0:9a:a2:e5:e4:cb:1e:59:b8:3f:
37:27:f0:e9:55:9c:7a:db:1d:10:5b:c9:65:7e:eb:
17:60:db:8f:43:b7:f7:58:fa:03:d0:88:ed:56:11:
70:a4:ef:1c:43:95:45:2b:37:7e:aa:b9:07:6d:37:
6e:5a:ac:b8:ac:27:59:20:71:3f:fb:2a:0d:ef:0b:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:07:55:3A:9E:3E:6D:6A:8E:31:67:5B:E8:63:19:E4:A6:62:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
71.7.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:4b:6c:fa:1a:6c:47:b6:34:b6:98:a9:8e:b2:9e:8a:47:bb:
56:63:6f:e7:a2:4a:3e:f5:51:0f:33:a5:54:13:bd:39:df:4e:
8d:4c:17:8a:e0:55:27:b5:0e:a0:e2:fb:20:45:da:f3:3a:54:
a0:2f:77:70:06:ce:53:1c:a4:15:0d:7f:f4:f0:6e:b8:ef:53:
1d:f4:6d:eb:47:f9:d5:39:8f:84:e4:0c:3c:4e:32:25:da:87:
1d:07:ff:7a:5e:b5:ab:0f:3a:db:45:f3:9b:cd:89:1c:e5:df:
af:c3:de:e1:b2:6e:45:51:9c:db:c6:a5:4f:24:41:17:4a:ad:
db:37:6f:0f:e2:e5:5f:3a:3f:58:14:2e:11:22:7d:3e:d7:86:
9b:9d:98:97:9d:7e:d6:ed:ab:6f:6b:64:a1:a8:20:6a:cc:84:
78:0b:df:9d:5a:b7:bc:5b:02:84:41:b8:6a:ff:8c:11:e3:0b:
fe:af:c6:d2:c3:02:e5:cf:54:2f:bf:88:ac:ca:25:e5:dc:d5:
e0:be:37:fa:de:23:fc:b8:44:8d:01:ab:f2:74:11:7b:95:89:
8c:94:05:12:e7:34:53:88:ac:67:97:54:17:bd:11:e1:da:8f:
3d:bf:0c:98:2e:3e:04:d0:c9:76:85:a5:07:53:26:46:00:f3:
e9:84:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:53 2025 by rpki-client