Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa
File: 3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa (raw, json)
Hash identifier: KtMVemiEPL0F776AYdPXNleQQV6+QU4wt400j/qxVE0=
Subject key identifier: 44:41:FC:F5:0C:02:35:A2:0D:52:E1:2A:A0:C3:E6:19:23:90:72:58
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285847F1552547BE5C285D8D7ABF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 396570
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:25:47:be:5c:28:5d:8d:7a:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=0704cfb4-604a-4669-b436-4976403d8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:e0:be:3b:5b:3b:cd:a9:41:b8:7f:fe:b0:
1a:f4:34:60:9d:9b:f6:a3:a4:6f:80:08:18:06:32:
a3:88:82:49:4d:40:c1:3b:cb:d7:32:6e:1a:75:ea:
8a:77:74:b7:bf:98:3f:eb:17:0a:12:44:b9:11:77:
8b:e2:64:5d:7b:37:81:7e:9b:a1:ba:78:11:24:3a:
c5:c6:62:19:6c:b0:85:54:7f:15:e4:2e:df:73:b3:
c9:65:2d:e2:2e:82:79:09:c8:e9:14:54:6d:99:ef:
4d:55:84:55:34:f8:31:03:93:84:0e:ec:d3:48:bf:
84:0d:bc:93:cd:06:82:f9:82:61:dc:21:5d:3e:38:
bd:e9:d5:f0:45:f1:8f:2a:27:06:fd:30:88:dc:53:
68:10:d6:bd:ba:3f:02:67:6d:48:74:85:31:a1:7f:
93:f1:e6:a8:e5:2d:d4:13:0c:fc:46:3f:ea:42:fc:
54:a5:c0:c3:cb:e8:88:83:a2:a8:59:e3:0d:1f:58:
a5:8b:08:0d:08:bc:2b:99:d7:cc:0b:51:06:6c:af:
40:35:14:a1:7a:24:a0:0f:80:67:18:6b:72:e5:f9:
cc:49:67:44:53:6e:3f:29:e6:e8:54:1c:fb:91:d5:
38:0f:03:71:5d:4f:69:3a:92:d1:ca:47:c1:83:87:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:FC:F5:0C:02:35:A2:0D:52:E1:2A:A0:C3:E6:19:23:90:72:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f721a6f-3306-31b8-b5b1-ca9b6f4444e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:61:4f:4c:29:f8:33:e7:78:fb:9c:44:5e:4d:42:14:3c:40:
7d:4d:12:f3:89:00:c7:7a:e1:f3:15:6a:13:80:89:3f:f6:0d:
e0:41:0d:28:3b:43:a7:30:9a:1f:7b:25:69:0d:c5:78:d7:c5:
9a:7e:00:36:6e:3e:8c:84:08:69:09:48:e9:2d:9d:7b:87:7a:
48:cc:12:c4:c0:7d:9f:69:38:8e:67:1d:45:31:b6:bb:44:63:
cf:fa:95:27:7c:c8:f7:77:7d:92:ca:64:26:be:1e:f4:4d:9e:
38:0a:be:e4:a5:2c:10:b2:de:53:d7:ab:18:36:13:02:fc:5d:
b8:8c:2b:f0:c5:7b:ab:7b:40:09:8b:b7:3f:f7:1d:01:6b:51:
13:3a:87:60:ea:cb:aa:52:05:bf:7e:2c:83:4c:33:84:91:2b:
ca:9c:0a:fc:7d:d5:42:f0:e2:a8:37:ac:69:df:74:86:fd:75:
30:e7:3c:11:5d:15:40:2d:e5:75:16:7b:92:3b:4c:a6:ef:54:
bc:0d:a3:2f:80:34:24:90:bc:12:8d:11:0a:47:67:c6:ad:c0:
be:b1:e2:1f:33:7c:2e:83:d2:8f:86:53:68:fd:27:54:1a:24:
72:2b:a2:65:6a:e3:72:fb:7d:46:bf:0d:46:06:2c:db:bd:4b:
8a:7f:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:32:23 2025 by rpki-client