Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa
File: 67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa (raw, json)
Hash identifier: x8X5xhra7Soz1ytgtxjw6jH+7u41SUnBGoV/u7lzDC8=
Subject key identifier: BC:5C:78:6A:90:7F:B9:4E:73:9E:AB:C6:5C:E6:34:0C:C5:F8:8F:2F
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584839EAD6BC1F11C9472C69ED00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 396584
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d6:bc:1f:11:c9:47:2c:69:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=ce411af0-b952-4d3c-9fc4-a64520138f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a2:67:4b:01:15:a4:aa:56:c4:c2:e0:ee:84:
74:5f:8a:3b:27:a3:4e:0d:1f:12:c1:0b:57:ed:76:
fc:89:19:f6:3c:40:90:16:ba:ea:f2:1e:cf:3d:59:
5a:eb:5d:cf:52:48:6a:0e:59:ce:61:8a:56:69:8a:
0c:7e:21:08:c7:4e:1c:2e:09:80:43:a2:76:1f:3e:
63:a7:bc:18:bb:32:06:93:15:d2:7d:dc:d8:b6:63:
ce:10:48:9e:de:c8:d6:1c:72:99:b9:e4:60:04:64:
b0:75:6b:75:a8:63:bd:d7:96:7e:de:f0:1c:a6:33:
af:95:bd:6a:06:1c:28:a2:53:e2:12:02:ca:fe:87:
0a:d5:d3:a6:71:54:41:b6:6a:c9:63:ba:de:c5:e2:
a6:c5:0c:6b:42:27:17:9b:ca:8f:91:c8:ad:c1:c6:
6c:e5:61:c5:d2:dc:77:5d:38:c3:98:2c:4d:6f:4b:
41:d8:34:1e:0f:44:15:a6:c2:1a:a2:b4:de:53:7c:
32:2a:c0:89:22:ac:a5:ab:c4:29:c9:2e:83:75:52:
dd:19:bb:e8:2c:2c:00:a1:74:2c:25:0c:2c:cd:36:
c5:a0:3f:28:81:ff:1f:be:ac:3b:f4:68:86:78:2a:
3d:f5:30:e6:4d:e1:a6:a7:00:03:34:ea:ac:5f:78:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:78:6A:90:7F:B9:4E:73:9E:AB:C6:5C:E6:34:0C:C5:F8:8F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:17:2d:d3:12:48:55:46:be:cc:6e:92:97:72:af:70:39:5a:
9f:04:35:2a:11:e8:a8:67:90:d3:fa:ef:aa:ab:81:0e:b5:f5:
af:1c:09:81:75:35:6b:3d:4c:f6:8f:e2:81:9c:51:fe:c8:f7:
90:9e:a5:38:ce:e1:f1:38:ce:f1:62:2a:2b:f8:43:1c:17:aa:
98:28:50:5d:79:71:4d:a6:7c:da:c0:d5:bd:01:c1:6a:c2:2f:
bb:e3:3c:d0:78:78:cd:81:27:73:2c:c5:bc:21:9d:2e:39:f6:
89:b7:71:89:d4:91:b5:f1:5b:36:fb:77:df:aa:f7:77:6c:02:
10:ed:90:a5:bd:c6:f0:d6:15:65:92:1a:0e:c8:ee:3c:4e:e1:
a7:83:25:93:50:30:fe:ca:20:56:6d:c0:e6:a8:03:7e:ab:79:
2d:06:d0:4d:e6:a0:0b:b2:f5:83:4a:8f:56:5f:72:88:20:0e:
86:c0:05:c4:59:76:62:e8:93:57:a0:47:4d:e9:66:da:10:47:
e9:43:9a:8d:56:25:ac:11:06:a2:52:71:79:48:bb:15:d7:3a:
d3:d2:af:cd:f8:ac:97:ce:6b:55:fa:35:5a:46:08:35:b3:35:
89:3a:a8:3f:ee:65:18:8f:ba:7c:7a:3d:a0:0a:c4:bf:a2:bd:
b3:dd:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:04 2025 by rpki-client