Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa
File: ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa (raw, json)
Hash identifier: tnpLqUKn7S9tYXjE/4tobqFB1pjkraQ+7HVvnY7o66Y=
Subject key identifier: A2:7C:C5:89:2F:F3:52:06:F6:15:32:98:7B:53:CD:46:63:BF:09:6C
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486AC5A2768C66D23DD23E54A0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 11232
IP address blocks: 2604:7a00::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:a2:76:8c:66:d2:3d:d2:3e:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=354b09a6-0e7b-41dc-8a43-fc66d8120317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:ed:f6:a6:5d:bc:c4:1f:9f:9f:61:50:83:
04:cd:07:73:46:16:56:4a:53:fc:91:52:50:0b:34:
3f:e2:8b:08:70:98:1b:f0:e4:1c:02:b3:1f:04:75:
84:c0:c9:21:40:70:73:a2:10:c0:46:64:59:cf:a5:
a7:7c:cc:9f:c3:7c:1b:b4:5f:f0:98:65:18:f7:3f:
25:f4:d3:0e:5f:15:f6:b3:db:82:21:4e:d2:76:70:
35:a2:8e:e7:a7:16:54:b8:4d:7a:b4:62:f2:61:9b:
7b:62:b6:91:af:3f:5a:72:2d:ea:89:46:6d:ca:f3:
19:8e:ab:3b:97:7c:e2:07:a1:3c:11:3b:14:1a:eb:
71:18:ba:06:25:93:e6:03:ed:97:81:cf:10:1c:1b:
07:a5:2a:38:59:54:8e:3a:35:5f:01:93:18:6e:f6:
7b:88:ca:c1:e7:1e:53:7e:fb:02:c1:1e:02:1c:63:
4f:75:89:13:84:1f:97:fc:2f:98:f3:9f:f8:92:63:
8a:27:85:43:bb:b5:49:0a:71:ea:ba:9f:b2:9f:23:
ab:b9:50:35:64:78:38:87:3e:1b:9f:ee:d9:bb:ef:
e1:b7:83:99:20:03:54:2e:fa:4e:25:8d:61:25:bf:
33:a8:9a:b8:0c:56:9c:0a:0a:0d:7f:aa:7a:fd:fe:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7C:C5:89:2F:F3:52:06:F6:15:32:98:7B:53:CD:46:63:BF:09:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/ef514d7f-7e6c-395e-a7f6-46da966e06c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7a00::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:42:13:5d:01:cc:ec:73:4a:f9:fd:78:7d:2d:bb:e8:6c:cd:
92:82:b1:d9:43:88:39:de:5b:d6:f3:23:2d:49:2a:c5:79:67:
82:a2:8a:2c:31:fe:1d:dd:e1:b8:4a:df:cb:5d:3e:b7:cf:26:
27:fd:7e:42:54:ba:0e:8c:76:9a:dc:e1:e1:97:40:12:07:fc:
13:51:01:4c:6a:81:ef:b4:f4:85:61:19:45:88:2e:6b:a7:f2:
68:93:72:22:eb:5e:da:b6:eb:c5:73:b6:be:81:05:17:c8:59:
b3:40:e4:ce:fd:04:d1:09:7c:0e:ac:c4:f1:9f:f3:41:46:f2:
80:ca:1c:e3:20:03:02:d4:77:5d:55:4d:3c:09:a5:0e:d3:3a:
23:48:5f:41:34:7b:79:de:44:d7:f7:b8:58:46:9c:a8:88:43:
23:59:7c:f8:3e:cb:0d:4b:fb:ea:f6:48:c4:29:87:c8:01:de:
e0:3e:b3:b2:c0:3a:05:04:e3:a9:f4:7b:fc:31:94:57:f6:4e:
7b:80:9b:ab:f1:55:e1:8e:32:ef:28:20:fe:9b:b9:b0:7b:c5:
c5:07:5b:2b:cb:c6:95:89:e5:2b:d8:55:f5:7a:6d:ec:b2:be:
83:d6:f4:87:0b:a7:7b:2e:37:81:1e:1a:6c:2a:e5:38:f4:9f:
9e:a2:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:42 2025 by rpki-client