Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1212ee53-1ba8-30dd-9687-9be853c69f3b.roa
File: 1212ee53-1ba8-30dd-9687-9be853c69f3b.roa (raw, json)
Hash identifier: d5brEkhunLVJhwL9F8JW2lPXkVqR04dXZeyjPLa0yc0=
Subject key identifier: 29:1D:B6:C6:1D:A3:4B:32:64:6E:F5:EC:F3:26:EF:63:5F:70:E8:7E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B6B3EC6119BDD832BD100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1212ee53-1ba8-30dd-9687-9be853c69f3b.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 396612
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:6b:3e:c6:11:9b:dd:83:2b:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=7f0666b6-9f1a-4994-9475-6958d4924696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:53:66:39:dd:97:2e:f0:fe:f7:6d:dd:8f:
9f:53:c9:a9:8d:40:42:a1:25:e2:b3:55:dd:0d:81:
2c:fd:6e:9a:80:a0:e8:f2:cd:b5:91:c0:08:d8:8f:
08:ec:b3:33:95:0e:64:9d:de:69:1b:4c:b2:7d:bd:
a0:60:2a:2d:e7:4d:c6:2f:eb:2b:5c:3c:94:25:b6:
69:cf:2e:c1:4a:43:42:fc:66:80:8e:09:a7:ae:49:
9d:70:2a:8b:65:21:74:bc:0c:13:b7:4e:02:70:f3:
12:80:6a:50:12:9e:7d:1b:7c:89:ce:74:b5:33:17:
4e:76:13:7f:67:ed:6f:de:a8:e6:4a:76:ea:19:32:
a7:fb:70:e6:5d:bc:80:25:6d:43:33:f1:49:07:e0:
b9:e8:8c:ff:98:37:dd:8f:2d:11:53:37:95:1b:fa:
aa:db:eb:4c:cf:87:12:02:a9:bc:4e:f2:7a:ac:1a:
f0:0c:33:c0:f7:8b:e1:2c:87:c2:ee:84:9a:d1:77:
a4:99:0c:8a:00:9d:01:6c:bd:b6:4c:c1:ed:31:a1:
12:20:0e:18:c2:14:4a:ca:8a:6f:bb:ef:c8:c5:3b:
ba:84:11:8b:8f:f9:b4:e6:72:02:29:0a:7b:e9:c9:
b9:a7:5f:46:6c:82:3f:a2:1a:d1:09:76:ee:12:3b:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1D:B6:C6:1D:A3:4B:32:64:6E:F5:EC:F3:26:EF:63:5F:70:E8:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1212ee53-1ba8-30dd-9687-9be853c69f3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:2f:52:d5:76:64:43:0b:32:f3:e4:9a:3b:bf:e4:2b:22:58:
bf:bf:cc:2d:37:9a:eb:83:07:d4:b3:f6:82:29:f4:b8:0f:e9:
73:e0:2e:bf:db:3d:37:2c:16:97:44:45:9d:3f:3d:22:3b:ae:
57:54:4c:9b:20:3f:af:39:d0:b8:74:f5:f6:d8:1c:37:cb:47:
a4:fc:ca:02:37:3f:c9:a8:d5:4a:b7:f0:5c:90:0c:6f:49:70:
42:55:01:e5:ec:d8:c2:9c:70:c4:53:2a:f4:70:92:e7:72:cb:
74:fe:97:6b:31:b8:36:fc:45:a1:27:70:1e:b9:d2:26:07:41:
a8:ec:b8:92:77:42:69:fe:fc:6c:97:5a:a5:9c:63:d8:c8:48:
bd:89:2a:67:6b:68:84:64:d4:2f:f9:2b:fe:2f:f0:a9:5b:c7:
f5:e2:f9:b9:f7:02:3f:c0:58:f4:0f:37:4c:18:3b:fb:87:e4:
dc:11:5c:4f:a3:d2:c8:60:a2:fc:98:0d:01:bf:8b:66:20:ac:
fb:6f:be:cb:b6:83:fa:85:85:77:77:5a:ce:ec:cb:42:ca:16:
f4:48:ed:c7:87:de:e4:45:75:72:73:c4:af:c3:45:4b:d2:5e:
c5:65:7c:f0:9f:43:bf:2d:24:6d:86:e5:96:7d:67:d3:f1:48:
08:db:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:04 2025 by rpki-client