Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa
File: 16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa (raw, json)
Hash identifier: Okm1DJDPUR22DzepEghKsXU5VAplJ5kmXCmjGFgjIN0=
Subject key identifier: EF:59:5C:88:8B:72:B3:EC:43:32:0B:9F:14:F9:4D:80:08:C1:3D:85
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D9057CAF577038879926300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 2620:74:e0::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:57:ca:f5:77:03:88:79:92:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=fd4dac69-f780-4ad5-b6bf-b453cfe49847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:09:ae:f1:66:5d:42:d9:c2:fa:6c:56:53:
50:70:80:17:1f:04:e3:f0:fc:74:fa:5a:91:60:dd:
7c:68:12:f1:b8:d0:12:56:b9:53:1f:89:51:73:15:
b4:b0:37:81:ac:36:84:56:03:e7:f6:9e:86:0d:73:
4a:51:1b:2d:d4:5e:d9:0a:b3:5f:48:3e:51:db:60:
45:a2:83:fb:bc:f9:ed:6d:1b:03:d2:bf:68:81:2c:
2f:76:32:ec:d8:8e:92:68:83:02:b4:af:7c:4d:92:
9a:77:cc:c0:6b:11:b0:59:b0:b0:fd:e4:6b:60:7e:
a3:21:03:a9:09:c1:bd:31:97:59:90:33:9a:18:5a:
30:de:35:dd:86:50:81:2e:58:04:29:1e:ba:2c:95:
fa:21:da:51:91:fc:d4:3f:e3:97:c9:a5:2b:dd:42:
6b:93:27:ac:0e:5d:d7:b3:5a:f4:80:3c:8f:18:2f:
39:8f:c2:66:75:fd:e7:2d:f8:f0:38:37:86:09:41:
42:45:2b:41:21:d2:3b:ad:01:e7:40:ed:b0:16:09:
cb:71:b2:a0:94:d6:4b:5a:0d:12:6b:fc:96:ce:10:
53:98:b9:0d:3b:28:c1:6c:7c:30:ad:c1:59:0c:b2:
1e:8b:77:7a:92:5e:f8:01:ea:9f:9e:b4:18:7d:08:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:59:5C:88:8B:72:B3:EC:43:32:0B:9F:14:F9:4D:80:08:C1:3D:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16af4a0d-24f8-32b1-9700-dd9ac3a436a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:e0::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:1e:b2:29:1c:95:a8:3a:5b:91:7f:7d:3d:aa:39:e5:b2:ed:
a1:c7:41:87:4c:dc:dd:3c:62:ae:04:4b:ed:cd:ca:2f:96:28:
88:ea:16:d2:2a:51:f4:f5:78:70:50:ed:20:d7:10:4c:d2:cd:
0d:38:89:1c:a3:c4:ac:7e:fe:27:b9:d7:96:0a:e4:f0:38:89:
60:f1:41:fa:07:23:be:a8:24:50:ae:13:61:fe:61:0d:c5:c0:
af:ae:6b:a6:15:a6:44:f9:03:8b:c4:6e:49:23:14:e2:38:30:
61:4f:65:d5:1e:86:a5:95:7a:d2:65:fc:2f:71:02:26:1b:08:
b5:e7:1b:33:a7:bc:c6:b7:2c:e0:4c:da:a3:e0:27:93:2a:e5:
d7:91:01:07:2e:6a:c8:80:25:7f:46:c6:be:0a:56:42:0e:5d:
44:07:26:d0:d5:96:24:09:35:5d:ce:1d:69:eb:ad:ce:ed:e6:
64:ab:58:cf:70:26:f1:08:36:2e:39:5d:09:26:cf:07:19:44:
dc:cd:80:81:a3:ac:5c:fa:45:98:31:b1:c2:71:9f:8d:7d:c3:
cf:09:95:2a:f6:39:8e:dc:38:d7:de:9d:8f:f5:7f:6a:de:b2:
1e:0a:66:b0:78:52:a7:d7:75:62:70:f2:77:d3:46:b9:82:91:
12:b3:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:05 2025 by rpki-client