Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa
File: 4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa (raw, json)
Hash identifier: /bCRQ64U9tlWWX3/RtrRm2BL8itNuEG1opa3scNp2tY=
Subject key identifier: DD:CB:AC:D2:C6:95:E7:FA:C9:1C:18:59:DF:00:C7:A6:1E:E5:BF:D8
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F432858486AC59B9A268D728301260780
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 11260
IP address blocks: 71.7.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9b:9a:26:8d:72:83:01:26:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=b1a109ee-6749-4cf8-89ab-7a3c390c3274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5c:b4:a5:54:0f:0d:75:f4:c6:f5:73:a1:e7:
05:10:2f:2b:b4:28:80:36:23:3c:89:4c:55:fb:cf:
2e:8b:c3:ef:b4:97:7e:eb:c0:6b:d1:54:47:f9:5e:
5a:65:da:ab:63:3b:c1:43:ad:fd:f9:ab:32:5c:e5:
b6:ad:57:8e:ae:0c:51:63:6f:19:a3:99:1e:e2:2b:
3d:ef:5b:af:d4:e1:8d:ea:3c:6f:01:4a:ec:66:e0:
12:dc:90:54:78:f3:52:d4:02:0a:86:d4:fd:90:73:
5e:c1:12:7b:4b:a3:99:4a:5b:2f:43:ba:80:94:c6:
f6:32:fa:10:f0:05:37:37:1f:5f:93:de:12:67:d4:
da:26:82:df:80:c9:72:0a:8b:28:50:99:71:73:1d:
10:d4:a5:6b:44:0a:66:40:4c:f0:f9:50:a4:36:c8:
6d:bb:60:8f:a5:e5:fc:61:42:d6:20:9a:7d:f1:bf:
5f:3f:3e:22:9a:56:03:a1:97:23:38:70:18:14:e9:
ef:e7:8b:e0:76:2c:d0:3f:35:9f:1f:8e:7b:a2:ee:
b5:a4:7a:c2:a6:43:10:3c:cf:9e:d6:07:0e:4e:d3:
cb:53:f0:6c:91:8b:fa:18:f6:88:c4:5d:84:a0:e7:
e4:b4:85:ad:d3:f0:cb:f4:5f:16:9c:0f:58:c0:27:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:AC:D2:C6:95:E7:FA:C9:1C:18:59:DF:00:C7:A6:1E:E5:BF:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/4a8f56d0-8f8b-39e0-9b59-2cf32dce6769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
71.7.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:ba:30:78:3e:3b:f4:a6:7f:57:9a:58:8f:2e:3d:31:12:78:
02:34:d9:38:6c:f2:0d:17:70:a3:f0:e8:d2:1e:b9:57:9f:05:
ac:61:b4:fd:ec:f8:92:d2:cb:eb:f7:35:14:f5:3b:41:bf:32:
8b:9b:a5:9a:a6:94:8d:5e:7e:8e:02:66:59:b5:e3:cf:f4:b1:
9d:51:11:4d:82:10:72:e0:3e:b5:fe:9f:62:07:5a:94:50:55:
9d:0c:b9:cb:92:bd:15:9d:40:ab:76:a2:a7:40:a6:86:fc:68:
df:f6:89:80:a2:5b:56:e4:80:a9:6e:10:a6:c3:71:d1:1b:8f:
bc:a7:73:8b:87:41:19:9d:6c:0d:b9:bd:4f:e2:40:2a:de:56:
dd:0c:32:fa:33:ae:67:61:17:43:c4:f4:91:8f:dd:d3:8a:63:
4f:1a:0f:54:b3:68:de:0a:14:41:63:77:e5:b7:c5:8c:61:b3:
8c:e5:8f:ee:b9:08:ef:9a:0c:eb:dd:b9:9c:ca:db:cc:03:10:
8d:b7:28:2e:65:9a:60:c4:6c:d7:6f:a0:06:b7:3d:21:6c:33:
5c:de:b1:dc:93:24:7c:a1:e1:a9:8c:26:68:83:8c:8f:d2:9e:
0e:af:c0:2a:77:33:4f:9d:a5:ef:22:42:0d:97:7b:63:1a:7e:
8a:3e:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:37 2025 by rpki-client