Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa
File: 4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa (raw, json)
Hash identifier: J+sw/oSQge+XOtRCcIHJvktVSxhEmb5vt9AqvQKTBTM=
Subject key identifier: 11:69:3B:56:41:F3:2D:D2:AA:DE:ED:0D:22:B2:94:B4:D2:0D:1E:4F
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584839EAD4B66399FD40BCCC4F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 396608
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d4:b6:63:99:fd:40:bc:cc:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=a2e2a996-d6dc-4870-b10e-820d420f1953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:db:7e:36:48:8e:f3:25:3d:57:a2:15:96:
44:15:39:1a:9e:f7:36:8c:d2:d2:70:be:2c:bd:25:
c2:e7:1c:59:a2:b1:23:0c:18:af:3e:52:e4:0e:78:
37:8f:df:51:88:87:7a:19:fa:f5:21:f8:d8:8e:23:
12:0b:da:28:36:74:cf:67:2e:2a:b9:a7:e1:15:e6:
1d:78:d8:84:5e:33:19:4a:26:6b:0a:c5:e4:e0:d1:
be:a4:88:bc:60:76:9d:e9:49:58:e4:63:1f:ed:63:
54:75:b5:1c:7e:5f:83:cd:f4:7a:1b:81:74:15:8c:
58:1f:fa:54:e4:d2:31:ad:91:45:9e:0b:eb:36:20:
5e:e8:53:8a:ce:f0:47:c8:6f:f7:6a:41:2f:1e:cc:
1b:05:02:96:72:75:ac:34:03:10:a4:dc:b0:35:74:
46:f2:ca:e5:95:bf:52:f4:d8:29:e6:c8:27:f6:1d:
2c:8c:c3:24:c7:65:b5:51:5b:0b:27:60:90:6e:31:
dd:b0:c9:98:01:62:8a:7f:6e:75:9d:89:2e:43:a5:
3f:5f:96:d5:e4:c8:a6:9b:d7:ef:91:76:8a:85:68:
07:0d:3d:13:d0:0a:f9:80:77:1f:43:09:b0:3c:82:
6d:88:c0:6a:74:dd:06:02:0a:e4:7e:69:c8:20:f7:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:3B:56:41:F3:2D:D2:AA:DE:ED:0D:22:B2:94:B4:D2:0D:1E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:57:33:c3:2b:1c:f4:ac:c3:22:8d:0b:a3:c8:49:bb:66:89:
66:28:2c:95:02:52:95:92:9f:e2:ca:96:7d:fc:d9:b0:f8:b3:
75:d7:4f:ce:30:c8:3e:8d:d5:e8:d2:67:de:9d:92:b1:bd:f1:
1d:b8:bc:27:2b:62:b8:4e:48:c8:fa:60:1b:1d:7f:1e:05:8d:
a2:24:1e:cd:da:43:66:b8:5b:46:0f:a4:60:5a:10:81:5f:aa:
08:0e:27:44:1b:f9:41:ca:23:48:24:53:a5:ce:20:bb:5e:30:
59:67:7c:23:71:5e:96:1c:04:ce:a9:89:9a:4d:bd:3b:f1:e8:
38:a0:f3:1b:8b:75:24:37:e0:c1:1a:76:7d:22:45:e4:e7:05:
d6:82:39:17:40:9f:7e:cc:b9:35:71:8e:63:78:ea:33:38:ed:
a0:12:45:89:67:9d:e4:8a:42:70:41:f4:74:dc:13:f7:d5:ad:
f6:3d:0c:2f:d9:20:26:80:40:3f:ed:f9:f2:58:c6:de:ca:b9:
cc:08:6a:02:f5:c6:74:15:29:09:1b:65:e5:d2:72:37:7f:a5:
17:60:f8:91:9c:a7:4e:76:40:c7:c3:77:c5:32:a1:1d:99:f9:
29:b2:86:ad:c3:44:df:fd:1d:2b:1c:41:6d:c8:d0:cc:76:37:
49:03:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:22 2025 by rpki-client