Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa
File: 396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa (raw, json)
Hash identifier: 8AlHK2g7VfgVoGTrsxXBlWAWih6qbbFASl+co8MCdMc=
Subject key identifier: D1:0A:5D:93:7B:9A:A9:F7:E1:0A:73:39:8E:AB:37:28:25:E4:63:23
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B6963DEC75A84ACCF3680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 40647
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:69:63:de:c7:5a:84:ac:cf:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=54e82113-79d4-4144-810d-dce2cb696546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:9a:bb:92:2a:6c:7c:6a:cd:f1:6d:8d:cd:
af:7f:76:07:af:59:04:df:24:5e:2e:b5:a4:5a:63:
95:8f:99:aa:e8:43:50:3c:64:d2:3c:be:93:aa:09:
d3:2b:4a:92:2c:36:9b:48:41:04:e2:59:d9:db:8c:
7f:56:90:c0:55:06:58:4e:c5:bc:ad:12:b7:73:85:
46:45:c2:ab:47:46:05:35:c5:4f:97:e2:2e:36:14:
34:4e:f3:e5:c9:a0:59:8a:0d:3c:4f:6b:d4:e2:4c:
ee:ce:ce:4e:e1:77:5e:0a:74:73:3b:5d:7c:fd:5c:
72:c7:2a:04:e2:be:02:70:da:2f:86:eb:96:a4:77:
b8:f5:0d:34:44:c8:35:f3:a9:c9:d0:73:2e:34:0d:
6e:dc:83:8a:e0:a7:38:3d:20:13:57:1b:63:2f:9d:
dd:3d:53:74:6e:34:15:f4:3c:9d:db:3a:76:29:89:
01:30:49:05:59:93:19:de:1b:0c:44:1d:34:60:c2:
e7:d6:60:2d:52:36:6a:16:24:59:4e:d6:ab:55:7a:
8e:88:42:15:d7:09:07:76:db:bb:9f:66:c7:7b:90:
00:dd:57:6d:e9:2f:7c:9e:06:6c:55:af:bf:a7:7a:
2d:10:b1:0e:f7:b7:56:fc:5e:1b:16:e8:bc:86:89:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:5D:93:7B:9A:A9:F7:E1:0A:73:39:8E:AB:37:28:25:E4:63:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:69:cc:a5:0b:5a:d5:03:15:66:28:5f:cb:9c:fa:0e:be:67:
7d:29:ba:51:91:bc:43:84:c8:bd:7b:8b:21:a6:a9:63:8f:31:
72:a1:38:f2:78:35:5a:f2:0f:3e:46:e3:e1:72:7a:25:21:99:
7e:e9:d9:ce:c0:aa:27:f7:43:b6:40:f1:36:77:df:77:29:04:
98:18:64:4f:e8:e7:4f:8e:f6:d3:30:5e:fb:3b:89:6e:21:f2:
1a:b7:28:01:a1:df:76:34:e6:e4:73:4b:84:1c:88:f3:15:20:
65:92:f3:db:e3:6a:5c:ac:ad:1a:5d:46:fe:00:86:9e:60:71:
f9:68:46:d4:bd:6b:bf:c2:37:d8:80:5b:d7:cb:d4:fd:26:28:
76:d6:fd:aa:02:c7:df:75:8e:7b:01:2c:3d:48:cf:ee:2f:a2:
29:64:c1:40:2e:3c:c7:14:e0:f3:8c:32:aa:9b:c1:bb:4c:6c:
16:da:82:93:29:79:0d:b6:b6:b9:ba:28:75:07:06:38:fb:86:
8a:eb:e6:3d:da:bd:f3:51:53:4d:5e:d3:c2:5c:c0:25:31:1c:
c4:b7:f5:48:f0:73:2c:dc:59:77:c0:de:2b:dd:cb:4e:48:48:
74:36:17:eb:46:88:b5:fc:f9:4f:f8:45:cf:42:07:84:bc:1f:
dd:52:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:10:48 2025 by rpki-client