Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5313a1-5fb5-303d-8764-e19af7542b9a.roa
File: 3e5313a1-5fb5-303d-8764-e19af7542b9a.roa (raw, json)
Hash identifier: kbdibHOn0JQ3udC+frY8cdOk9SwD3STn1AO2jmKDxPs=
Subject key identifier: A2:36:B4:65:77:EC:1E:47:22:94:73:44:D1:E5:1C:44:1F:49:43:9F
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858488280A0CCCB2674421C3D4980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5313a1-5fb5-303d-8764-e19af7542b9a.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 396575
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:a0:cc:cb:26:74:42:1c:3d:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=a7d146b9-31c3-4a76-b1a3-05f1f3092688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:a8:5d:20:b5:ea:74:2d:5f:5e:49:b8:b8:
94:2d:e1:93:87:f5:11:1b:15:cb:a7:4d:8c:48:68:
c4:dd:9e:50:fd:12:4e:71:6f:9a:00:37:8e:fb:f3:
32:95:d0:9d:97:76:8f:6f:4f:0e:af:f0:64:57:3b:
cc:ad:83:ac:fb:00:96:2b:96:c2:d9:b5:bc:e1:41:
2e:b1:41:80:e8:e1:ef:50:08:5f:67:50:8e:27:5e:
a7:ce:98:3f:71:ca:ef:81:a0:91:d2:b7:30:10:e0:
de:e8:2e:19:ee:2d:9e:95:bd:21:a0:be:c5:58:b8:
19:9e:c0:e8:6f:75:74:20:ba:95:b4:ca:0f:89:39:
2b:cc:7d:0d:72:0a:96:8d:2c:6b:63:e0:5c:db:09:
c2:c7:0a:88:5d:cc:85:14:a4:e6:4f:07:c5:ee:01:
0a:d0:ef:85:ed:f0:22:14:4e:e1:5d:c9:10:f8:45:
31:5f:a5:ae:17:37:41:0a:8b:a6:78:85:f5:bb:6b:
af:a2:41:20:8f:dc:ec:ea:3f:58:b5:bf:1e:2b:f4:
7f:0e:9a:f8:84:a4:8f:4d:9b:f4:86:48:f7:4c:09:
74:bc:81:fb:e9:11:ea:6a:4f:e7:90:65:7c:a8:f7:
e5:5e:5b:50:95:35:b1:90:f7:22:ab:0c:ae:58:62:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:B4:65:77:EC:1E:47:22:94:73:44:D1:E5:1C:44:1F:49:43:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5313a1-5fb5-303d-8764-e19af7542b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:47:85:f9:9f:05:c2:5f:94:94:c9:98:b1:f4:e2:f4:08:33:
1f:99:72:40:c5:ce:e5:ee:48:ec:0b:15:44:88:2b:bf:ec:9a:
ba:94:26:bd:fa:41:9b:e8:8b:67:99:63:a2:be:82:ad:d4:a7:
93:f0:39:61:e9:25:42:6b:81:07:3d:27:03:79:49:8b:66:5b:
7b:92:a4:2a:b2:48:86:cb:ec:7e:46:af:ca:c1:91:98:db:0d:
63:74:d3:0c:5c:65:d2:a8:ab:f3:e9:31:c2:7e:47:07:d3:ad:
b5:5e:d0:b1:f8:7a:7a:c7:10:49:8e:30:94:c6:cf:73:98:3c:
a5:a7:97:3d:ac:f2:b5:77:70:d2:ea:c6:b0:41:dd:3b:61:ac:
6d:0e:54:d0:ab:0c:dc:4c:79:42:3d:85:a5:f0:87:07:a7:8e:
e3:b6:50:65:95:e9:d9:39:39:33:8f:e1:b8:83:48:a7:5f:75:
84:95:0e:21:7d:91:69:6d:a7:27:ce:36:87:5c:3b:27:85:56:
72:76:3f:3b:80:33:33:5b:7a:78:93:2e:bd:b5:e1:bd:7e:e2:
8f:b7:dc:d4:a7:ff:35:54:04:68:7b:c5:dc:bf:c0:0d:44:bc:
9c:7d:58:97:37:26:09:55:b6:e9:f0:23:ab:2a:ac:e2:21:69:
19:b1:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:35:48 2025 by rpki-client