Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/4518b5d1-f6e1-3fca-a714-fb9d86c2e663.roa
File: 4518b5d1-f6e1-3fca-a714-fb9d86c2e663.roa (raw, json)
Hash identifier: ikxmZbMu6mznVb8qkRlTsKRhAtmd8H68884/imPh7C8=
Subject key identifier: 07:A6:5E:93:1C:02:BE:ED:17:15:08:78:60:87:FB:85:BB:BC:0E:AD
Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b
Certificate serial: 010D0C9F432858480214FC8D3D07ED119985E200
Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/4518b5d1-f6e1-3fca-a714-fb9d86c2e663.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 19704
IP address blocks: 2620:135:2000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:fc:8d:3d:07:ed:11:99:85:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=e5cf0a6f-e4d6-46dd-bfd8-193a75e52fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:e7:11:14:54:a0:e5:64:30:5e:9f:0e:c5:
89:db:c5:c2:09:91:d4:38:91:63:88:35:b6:23:c1:
49:65:4d:28:a0:6c:32:f1:65:40:f4:cd:ab:03:11:
ff:3c:64:2a:99:5d:2e:18:4a:63:7b:6b:f7:c1:5a:
e7:7d:ab:f4:eb:8b:96:1d:b6:4c:e5:9f:51:2a:7a:
b2:ee:5e:86:29:56:d8:fa:03:ee:c2:bb:e1:96:c7:
e9:9f:bf:0d:29:d1:74:c8:1d:ef:0d:9f:86:c8:99:
0f:b5:ca:09:3f:2f:84:4b:51:01:c0:3b:41:fe:25:
01:57:20:66:ef:03:f4:a5:63:e0:9d:0d:d2:05:71:
04:5e:3f:33:16:47:f1:1e:93:dd:74:b4:56:46:5c:
d0:aa:78:98:a4:c6:58:ca:c5:2e:b5:e5:13:7f:2a:
7e:ac:43:58:12:f7:e2:e7:1b:16:25:a0:33:72:58:
83:eb:79:cd:8c:21:28:a0:f0:c6:f6:18:db:c3:77:
47:8e:c4:46:8f:ad:e8:93:f6:2d:dc:6f:1a:13:43:
b0:18:7a:6e:8b:8a:7c:22:c3:98:db:a0:fa:98:5c:
3b:54:c7:c8:3e:0e:f9:f7:62:23:6b:ed:6d:c1:1e:
4d:c9:42:c2:34:c3:e5:ad:d0:b2:d4:be:3b:c0:8d:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:5E:93:1C:02:BE:ED:17:15:08:78:60:87:FB:85:BB:BC:0E:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/4518b5d1-f6e1-3fca-a714-fb9d86c2e663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl
X509v3 Authority Key Identifier:
keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:135:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:a4:97:57:41:84:83:61:d2:69:e4:b8:83:5a:bb:d1:b2:fe:
ac:76:20:08:1c:4e:8c:94:c7:f5:30:55:19:ce:6c:e9:71:00:
6c:ce:9b:a1:5a:cd:e5:39:a7:f4:6f:5f:ae:88:b7:0e:00:eb:
e9:b2:a0:7d:99:12:63:5d:fd:89:25:d1:e2:38:19:9a:58:93:
72:a2:73:64:7e:1c:69:e0:7d:64:36:9f:85:94:4a:36:a6:a0:
39:90:29:27:e8:9a:1a:0b:04:52:70:5b:48:b0:85:0c:49:51:
02:32:5a:11:f6:06:ba:3d:fa:78:55:d4:df:99:cb:50:55:ae:
91:36:c2:bc:9b:16:0b:30:3d:d3:f1:92:45:9a:81:86:7d:9d:
3d:5c:e0:83:33:27:16:54:af:61:08:79:50:0b:69:0f:ab:72:
fc:8a:a2:75:a4:d6:8f:df:4f:63:ec:72:ff:65:35:8c:6c:a3:
c8:62:00:34:e2:19:3c:6a:38:c0:5b:7d:c3:7f:54:48:2e:cc:
44:06:b3:80:00:4c:59:0f:ce:b5:84:8c:88:6c:d7:78:47:b6:
6b:ad:cf:9b:9f:51:3d:99:d1:31:9e:25:17:30:ce:5b:19:1a:
65:dc:89:17:55:b2:b5:9d:68:5f:b6:1f:df:90:6d:a0:10:ff:
66:d0:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:51:29 2025 by rpki-client