Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bbc81af-7652-313b-bf96-d64e8e74e452.roa
File: 0bbc81af-7652-313b-bf96-d64e8e74e452.roa (raw, json)
Hash identifier: ojDjJZjcHUUScw6Jm3yz0MOGMC6wKc99XHYvjr5sYwg=
Subject key identifier: F8:6D:10:8F:7F:76:A6:17:E2:B0:AF:2F:29:FB:43:C7:B3:96:27:C5
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584839EAD8A1D09C06AAD00AEF40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bbc81af-7652-313b-bf96-d64e8e74e452.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 396576
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d8:a1:d0:9c:06:aa:d0:0a:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=df7a86c5-c7f5-40ab-a4dd-d50e59fc7dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:53:4a:ac:cd:e9:f6:c7:71:c1:d1:e2:84:
04:9e:3b:66:2d:87:1e:33:7c:34:23:76:98:0d:cd:
b2:6f:e8:ec:5a:31:31:ad:b2:44:fa:6b:85:5f:fb:
74:ac:94:7d:b1:0c:31:e9:30:d5:04:48:42:b3:d0:
7b:87:19:7f:6a:ac:5c:c6:af:c8:ab:0a:14:b2:9e:
95:1d:69:fe:95:2f:34:89:77:35:be:6f:3b:1f:1c:
99:41:67:7b:5d:3b:d7:dc:a0:17:25:e8:65:91:ab:
3b:59:8a:e2:6e:50:96:17:7b:23:87:81:83:1f:6f:
4f:c2:bc:43:e3:ea:11:8d:6c:45:40:c6:b6:a9:a1:
6c:93:b8:64:19:0d:37:dc:25:56:ec:4d:98:bb:be:
60:a2:07:e3:c4:77:fb:31:44:3e:de:f0:89:ad:0c:
53:a6:96:bb:4b:7e:e1:47:fb:95:61:12:55:c4:e5:
43:97:7e:0c:8b:08:70:54:aa:c9:99:81:0d:15:90:
52:a5:78:f8:e7:32:8a:56:f7:4c:ce:6c:84:44:b3:
c6:22:1c:f0:69:91:75:38:73:de:16:ad:a5:5f:14:
a4:d2:ea:d0:2c:b8:d3:4b:2b:f9:d7:57:a1:8b:e0:
2b:cf:5d:d5:19:9a:17:7f:28:53:16:74:14:18:08:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:10:8F:7F:76:A6:17:E2:B0:AF:2F:29:FB:43:C7:B3:96:27:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bbc81af-7652-313b-bf96-d64e8e74e452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:84:7e:0b:ba:63:9d:ef:4a:55:cd:97:4a:58:44:14:71:72:
a8:d8:29:bc:37:3a:30:11:13:62:6c:dd:e7:39:62:d9:4a:28:
51:3d:4e:14:47:d6:b4:54:7c:23:b5:58:89:1c:59:a3:9d:20:
ab:f1:99:48:12:ec:7a:b7:21:c6:64:9d:d7:6f:d9:15:82:c4:
3d:3e:aa:be:c9:75:b9:e7:5c:35:0d:1a:12:f6:39:61:0d:4c:
d6:64:01:64:c1:96:ee:30:66:c4:cc:80:bb:08:8a:b8:dd:3e:
13:8f:05:b1:a8:db:ba:7c:dc:3a:e6:e5:14:a0:0e:53:59:4a:
45:a6:cf:2f:57:95:e3:03:30:54:a4:56:32:6e:93:4d:a5:f0:
5f:79:17:27:75:48:bb:63:67:8b:db:76:30:ce:27:f0:87:51:
83:02:5a:8e:05:7a:58:86:b9:65:af:f7:59:c7:4f:c3:08:08:
d2:e7:96:f3:f4:1a:76:28:c0:b5:4b:ca:cd:ab:41:c4:5f:9f:
e6:5b:0a:59:6e:2c:74:89:1e:22:96:5e:ee:1b:65:90:46:ff:
80:37:76:fd:f8:82:0e:a4:1a:56:52:80:a0:ce:de:fb:de:3c:
02:47:d0:a2:e5:38:36:3b:10:33:9e:b4:17:2d:41:bf:93:a3:
c4:19:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:31:58 2025 by rpki-client