Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d6cffb-1716-3c3c-b17c-4ac6011d23a5.roa
File: 47d6cffb-1716-3c3c-b17c-4ac6011d23a5.roa (raw, json)
Hash identifier: DaVfMq9n1n8T93SeApSgwqgj8u7MNR667h0kt/mFi9M=
Subject key identifier: 58:24:71:35:D8:76:77:25:3D:F6:0F:0A:5A:B0:8B:5B:69:EC:20:16
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B67E04905E8A580559880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d6cffb-1716-3c3c-b17c-4ac6011d23a5.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 396592
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:67:e0:49:05:e8:a5:80:55:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=34c9ebeb-049f-44ac-a0a3-95f7b894a3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:eb:6e:4f:e9:9d:bd:50:86:83:c9:57:6c:
ad:9d:7f:5d:f2:87:68:e6:78:32:87:d5:5e:0c:aa:
29:7a:47:26:14:72:e0:26:ea:ef:5d:2b:fa:d1:51:
03:cb:dd:0b:ca:66:ff:14:61:94:4c:c9:7d:64:0d:
ff:b0:a7:11:92:81:3e:c5:be:a3:82:ba:5f:69:57:
30:9c:16:b2:53:b7:bb:b3:5b:90:6f:44:76:a0:1e:
25:a7:34:3b:e7:4b:4a:95:92:81:2e:a7:95:bc:79:
0d:e9:6e:2a:d6:bb:6a:1e:5a:58:68:90:9f:20:04:
06:f7:17:cd:f8:bc:11:19:be:52:88:26:81:0f:65:
dc:bb:c5:24:70:49:1e:23:01:17:4f:1e:f8:06:ae:
ec:93:82:50:ea:b8:16:3f:a1:32:d7:21:0e:d7:4c:
29:0c:f3:99:bb:43:11:90:e4:64:57:a8:91:89:f0:
1e:96:43:6b:b5:f6:67:64:74:6e:39:21:a4:84:1f:
b5:d1:8b:bd:32:60:c4:3c:c9:4e:b2:19:ab:e9:f8:
c5:89:75:10:b8:58:b7:7d:3b:10:25:a2:78:2c:98:
02:8b:ed:c1:13:42:29:09:18:04:09:2e:02:81:7b:
b9:8b:17:bb:8d:86:b6:68:21:d7:f8:f4:24:4a:b1:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:71:35:D8:76:77:25:3D:F6:0F:0A:5A:B0:8B:5B:69:EC:20:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d6cffb-1716-3c3c-b17c-4ac6011d23a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a3:c6:cc:92:46:1f:53:44:bf:ab:db:1f:5c:c7:7c:f7:16:
8e:ef:bc:6e:d0:a0:9d:e7:96:f4:b7:a9:5a:9d:ff:cb:67:45:
d3:49:c7:53:97:68:1d:0f:ae:89:73:b9:69:22:5b:5e:df:3a:
58:fd:56:65:59:6d:6c:92:c0:05:aa:72:c4:1c:11:64:3a:81:
cd:c3:05:0e:3e:fc:f3:27:28:49:4e:9b:5d:92:c0:c7:3c:4a:
1d:4e:80:b0:6a:be:5d:c1:f7:8d:e3:0c:99:56:12:a2:4b:d6:
da:a5:52:d6:a3:75:67:84:88:1b:49:26:99:1d:5f:be:3c:b1:
ae:f5:9d:7e:10:09:25:40:78:57:55:0e:1c:b3:49:bd:37:24:
b3:df:87:f1:02:f9:e9:89:dd:d2:38:aa:24:1f:ff:f5:6d:1c:
c4:ed:db:38:3b:ed:91:f8:22:29:ec:32:38:2b:f2:ba:72:02:
18:11:a1:f3:9d:e1:a3:9f:e9:03:7d:2f:05:7d:3c:8e:18:3e:
e6:63:84:65:3c:6c:53:ed:89:5c:ed:34:7c:fe:62:8f:4a:e2:
f6:e7:d1:0e:3b:fe:be:ae:1c:91:cb:2c:7d:b2:ea:88:24:a9:
f2:1f:bc:1b:c6:45:3f:0c:00:09:28:0d:e4:d9:98:c2:23:83:
9b:c6:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:56:51 2025 by rpki-client