Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa
File: 142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa (raw, json)
Hash identifier: zDWX3D8R6hg/6boR60pQ1riBiIgUd9/3Q8wChiB7cjc=
Subject key identifier: CA:93:BB:2C:6D:F4:32:67:F5:A6:2A:35:51:88:55:BD:7F:38:CF:5A
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A95F6D012705856BBCDC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396826
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:95:f6:d0:12:70:58:56:bb:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=9045ba99-fbd0-4162-b32a-f47621162933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:2e:31:44:3a:91:53:98:40:3e:85:9c:ed:
f9:c6:5b:8e:53:3c:dd:d2:25:95:bd:b6:b2:73:71:
57:3f:bb:a6:25:e0:14:71:ef:c3:33:50:1e:cf:8e:
9a:f0:95:54:22:5a:c2:a5:53:78:51:d4:be:57:1f:
03:06:90:b2:11:b1:51:66:ac:90:79:d4:ef:62:51:
10:cd:4a:a7:d3:8c:2e:a4:ee:58:24:72:3d:d3:8a:
1f:30:40:39:ea:e4:80:e4:37:d7:8a:27:23:9a:31:
52:20:a1:54:4d:33:25:40:36:d8:27:03:80:3e:7a:
47:62:af:e2:e6:a9:0b:cb:f8:c8:e2:3a:69:79:60:
39:32:14:5b:09:73:4e:4b:47:33:cc:c2:94:46:17:
56:2e:2b:7f:c1:d0:bc:1f:93:e2:b2:9b:0e:fc:0e:
e3:d3:20:19:2a:7d:94:00:8d:90:cc:5b:a4:74:be:
07:5e:7d:23:03:ba:a7:1f:24:6e:06:b7:1f:76:37:
f7:24:8f:ce:a5:9b:41:07:0d:57:27:0c:b3:ba:b8:
87:a7:21:3f:8d:cc:a1:5f:61:0f:e6:5c:f6:41:41:
03:23:58:1a:12:48:8e:f7:6f:be:c4:3e:35:cb:79:
93:1d:8e:32:fe:4d:58:61:30:17:c9:0d:b1:4b:95:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:BB:2C:6D:F4:32:67:F5:A6:2A:35:51:88:55:BD:7F:38:CF:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:b9:89:ca:ae:c2:50:c5:33:9b:61:b7:e4:48:36:e9:20:be:
41:23:b3:1e:aa:fa:aa:c8:40:14:15:ce:9c:b5:37:4f:d7:45:
40:c1:e4:75:21:86:85:d9:5f:07:b9:7c:be:25:7c:85:22:e5:
de:df:ab:98:cb:b9:4c:a9:63:ca:b3:d4:bb:10:b3:e4:9a:92:
a8:4d:72:2c:34:09:00:36:f9:b7:81:21:00:d8:26:ca:c1:1e:
11:3e:a0:e9:05:f9:1c:c1:a0:76:46:24:65:d3:23:cd:f0:45:
c1:e8:95:5e:af:51:b3:38:7c:c2:6d:57:a2:f8:7e:5a:ee:ba:
82:73:2b:e2:6f:e2:90:35:0d:09:4e:8b:a9:25:3b:2f:86:23:
02:06:d3:e0:42:ab:fc:bd:61:60:74:78:b8:0c:5b:b9:3e:61:
f9:d0:9d:ee:1f:f2:51:26:5b:d0:38:9a:47:d7:b1:15:0e:6a:
15:de:3e:dc:d1:ad:8a:06:3b:bc:72:aa:5a:4c:81:95:96:86:
c7:e9:68:8a:50:d9:b6:58:d0:d3:a3:1e:34:31:37:7c:82:35:
74:85:47:97:45:1f:8a:49:54:ef:d1:53:ec:92:70:5f:41:e9:
c0:71:7c:25:50:04:65:54:93:48:59:b4:48:fc:e2:0f:f0:70:
71:10:69:4b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgYapX20BJwWFa7zcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIwNDE0MDA1MloXDTI1MDMwNDE0MDA1MlowLzEtMCsGA1UEAxMk
OTA0NWJhOTktZmJkMC00MTYyLWIzMmEtZjQ3NjIxMTYyOTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquQuMUQ6kVOYQD6FnO35xluOUzzd0iWVvbay
c3FXP7umJeAUce/DM1Aez46a8JVUIlrCpVN4UdS+Vx8DBpCyEbFRZqyQedTvYlEQ
zUqn04wupO5YJHI904ofMEA56uSA5DfXiicjmjFSIKFUTTMlQDbYJwOAPnpHYq/i
5qkLy/jI4jppeWA5MhRbCXNOS0czzMKURhdWLit/wdC8H5PispsO/A7j0yAZKn2U
AI2QzFukdL4HXn0jA7qnHyRuBrcfdjf3JI/OpZtBBw1XJwyzuriHpyE/jcyhX2EP
5lz2QUEDI1gaEkiO92++xD41y3mTHY4y/k1YYTAXyQ2xS5XaFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMqTuyxt9DJn9aYqNVGIVb1/OM9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQyZTRkZDQtNjlmZC0z
MGRkLWI4NGYtNWQzY2E5YzRiMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAUuYnKrsJQxTObYbfkSDbpIL5BI7MeqvqqyEAU
Fc6ctTdP10VAweR1IYaF2V8HuXy+JXyFIuXe36uYy7lMqWPKs9S7ELPkmpKoTXIs
NAkANvm3gSEA2CbKwR4RPqDpBfkcwaB2RiRl0yPN8EXB6JVer1GzOHzCbVei+H5a
7rqCcyvib+KQNQ0JToupJTsvhiMCBtPgQqv8vWFgdHi4DFu5PmH50J3uH/JRJlvQ
OJpH17EVDmoV3j7c0a2KBju8cqpaTIGVlobH6WiKUNm2WNDTox40MTd8gjV0hUeX
RR+KSVTv0VPsknBfQenAcXwlUARlVJNIWbRI/OIP8HBxEGlL
-----END CERTIFICATE-----
Generated at Sat May 10 08:12:13 2025 by rpki-client