Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa
File: 843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa (raw, json)
Hash identifier: u0qizll6qxZ+yIFMqPz/ySdNbkGqTl+sqZpMIZQeMcQ=
Subject key identifier: 49:3A:A1:FD:90:10:D9:B8:3F:52:81:FE:A4:35:57:F9:06:A1:59:A0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B6502CEF7919BEB6FAC80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 20172
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:65:02:ce:f7:91:9b:eb:6f:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=8b174715-731b-4cb0-a054-a7ff7b4051cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:91:73:7b:a6:8b:d3:88:39:84:0c:c1:95:
a4:82:a5:c5:6d:24:a6:a5:d9:12:6b:32:2f:af:3e:
26:84:ff:e6:07:61:67:d4:af:b9:b4:84:4e:7c:ac:
80:09:89:ba:2b:c5:dc:74:75:72:1c:aa:d4:df:14:
d8:8b:3d:90:0e:f8:df:cd:47:ba:4c:e5:0f:1b:7e:
08:f6:78:ca:18:22:58:0c:e8:f2:89:ea:67:ff:50:
7d:87:d7:56:9b:e7:21:f8:3a:f2:4d:19:60:e6:05:
44:d0:60:1e:5f:3d:19:f9:d5:ef:25:3c:af:62:45:
a3:1b:f3:3a:13:8e:cd:a5:a1:ab:27:13:0a:c9:e5:
da:95:b3:c4:47:5d:35:7d:b4:53:27:24:9a:99:f2:
e2:e8:3c:ec:50:c6:82:00:d3:cf:5b:54:72:c0:60:
b2:c6:26:0b:90:f4:be:c7:0c:ed:e9:6c:3f:ba:5e:
7b:f7:f0:77:90:fb:e6:ad:ce:63:1a:96:fb:11:8e:
08:d3:2d:25:0a:5c:c8:4d:7a:3e:33:2b:db:2d:82:
54:19:be:b2:d3:91:b9:c0:37:6b:f6:59:f9:cc:c4:
12:be:b6:f5:c6:f7:d5:5e:0a:8a:d1:b0:02:7f:fe:
d7:f0:45:fa:81:af:2f:9b:7f:76:a7:d1:d0:46:a1:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:A1:FD:90:10:D9:B8:3F:52:81:FE:A4:35:57:F9:06:A1:59:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:72:52:3c:95:21:6f:72:74:9d:bd:59:a9:94:4d:5f:64:73:
0a:61:6f:89:bb:93:0e:97:52:f1:fa:f7:c8:ee:d2:b8:ec:4b:
57:db:eb:e8:5b:6b:3c:8d:66:bd:60:4d:6a:f7:2a:13:30:1c:
ab:71:55:07:47:b6:e9:37:a6:e0:c6:93:db:3b:12:c2:21:3e:
88:b2:e1:86:b2:d1:37:23:df:46:c1:3a:2e:28:80:8c:b7:a7:
53:40:9a:0b:e0:59:b4:83:0e:81:71:7b:bc:fe:34:9a:db:42:
52:30:76:f8:da:8e:64:fc:71:4d:af:c0:70:80:17:43:e8:33:
51:40:86:cc:86:90:7a:51:06:cd:3d:77:a4:89:c0:d0:6b:e4:
8e:c4:c1:db:f7:77:15:5f:0e:d7:83:81:0b:8d:6d:dc:27:82:
8e:56:4d:53:43:4a:d8:3b:22:1e:83:6f:d3:1f:b5:0f:ba:d5:
35:58:91:65:69:ca:f9:4d:82:d2:bc:e3:02:83:73:16:e9:ea:
81:eb:25:4b:06:86:6d:9a:29:6f:35:81:9e:0d:ef:ba:cd:aa:
53:e3:1e:82:c9:98:ad:2d:71:63:3e:ca:46:76:95:2c:d3:14:
97:99:26:99:a5:e7:66:2b:8d:d9:5e:49:52:81:e9:30:c3:b0:
28:71:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:14 2025 by rpki-client