Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cefd50f-81c5-37c9-ab27-8ab83695f907.roa
File: 3cefd50f-81c5-37c9-ab27-8ab83695f907.roa (raw, json)
Hash identifier: u2gPCRniX05NNtxoCVUN+SaaHb2VYrufHbW6mHhTlDk=
Subject key identifier: 7E:F8:7C:A0:2B:0F:10:73:6B:B2:4B:D4:4D:B0:86:BD:78:67:2B:41
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A94B5523D38FBE791BDD0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cefd50f-81c5-37c9-ab27-8ab83695f907.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396565
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:94:b5:52:3d:38:fb:e7:91:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=546d189c-d741-42ea-95d2-a1d80f57ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:12:08:96:ca:d9:57:5b:ae:3e:04:12:aa:
f4:da:0e:0b:7b:31:34:47:76:d2:ef:f2:39:18:7b:
a0:d8:0a:5a:d1:cd:d7:08:7a:80:fb:e2:10:ad:7f:
90:26:2a:ae:86:d1:ce:e0:05:6d:5e:69:c3:97:3e:
13:61:a6:89:7e:b4:94:ad:33:f7:55:ec:93:ae:74:
43:bb:89:06:3c:6c:84:c0:ae:7b:54:ae:c9:d0:bf:
e7:d2:08:c7:5a:6c:8c:fc:26:42:0b:e1:7d:91:fa:
70:e8:6b:9c:b7:0c:52:12:97:11:7f:99:be:4f:25:
f4:fd:82:e3:79:48:44:5e:29:d5:1d:78:79:ef:51:
27:be:ec:b1:23:e2:57:06:2f:d1:a4:5d:ba:40:5c:
76:b7:3a:75:81:b5:d4:d3:28:06:28:0d:8b:e3:28:
37:ce:6c:ad:99:e8:d8:5d:6b:18:c6:36:82:da:2d:
91:96:e4:02:ee:44:71:7c:99:e9:aa:39:4e:ca:b6:
9f:b9:94:af:65:31:bd:aa:c6:4f:ce:03:3a:f8:93:
ab:74:90:a0:83:f9:51:22:8e:b8:52:1f:ff:15:78:
80:8f:6a:92:b0:52:a8:58:e1:a2:9d:99:19:94:4b:
63:6c:41:dd:22:41:f0:a5:55:4a:2e:1d:ec:bf:66:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:7C:A0:2B:0F:10:73:6B:B2:4B:D4:4D:B0:86:BD:78:67:2B:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cefd50f-81c5-37c9-ab27-8ab83695f907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:5f:50:cc:6b:3e:aa:69:18:2d:1f:90:df:f6:1f:b1:83:bd:
1b:9d:75:f9:46:ba:bf:e6:b8:b1:51:4b:ae:0b:09:03:7b:f9:
cc:a2:40:c4:19:81:3c:24:65:85:ae:30:de:38:72:a5:47:34:
3b:07:c5:4a:dd:a0:1c:9e:77:eb:4f:67:44:fe:f9:4c:70:4c:
f1:6a:11:bb:24:11:48:15:a5:8c:4f:85:1d:a1:b8:cf:73:c2:
37:df:11:f2:ee:20:a5:46:a6:ad:5c:fb:08:0b:42:98:e2:90:
20:f0:fe:9b:9a:6c:a1:78:3e:9a:ab:bd:14:45:12:09:3b:a5:
ea:01:19:7a:9a:2c:93:4a:cf:07:3c:a6:48:f5:a3:c6:47:f2:
d5:c3:9b:68:7e:bb:aa:e2:e2:93:8f:81:f7:e1:79:78:77:27:
a6:87:27:6c:ee:cf:2d:55:16:84:ce:37:2b:5a:07:bd:c9:5b:
ec:13:1a:b0:8e:1d:b0:02:21:f4:3a:a5:0b:56:6c:3b:61:a8:
5e:c3:e3:81:1c:59:f2:ee:3b:9e:21:dc:5b:77:af:fe:e9:c1:
ed:c0:3a:e2:f9:28:f1:d4:fd:17:ef:8f:9d:47:04:fd:0a:d8:
ee:e6:d8:00:65:55:78:08:e8:36:45:79:85:05:c8:63:a6:d5:
bd:c0:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:32 2025 by rpki-client