Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa
File: 8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa (raw, json)
Hash identifier: NCHLwfu0LUpkeRBmA8TDjoGP0P8y5AbKgc6202nZk34=
Subject key identifier: D1:AA:67:7E:04:F3:CA:74:73:14:C2:9E:FB:E0:E8:98:6A:8C:EE:D2
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A958C8F8B3DC12DE816C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396611
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:95:8c:8f:8b:3d:c1:2d:e8:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=d1310ba6-1879-42f8-8418-fc8582797285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:b1:fe:85:be:4e:92:f1:d7:50:2d:94:2f:
39:0b:70:99:cf:d4:63:c4:e5:cc:4b:21:e9:2b:cf:
77:c5:32:12:20:0f:96:c3:28:6e:ff:1d:20:87:2e:
03:35:74:aa:ae:8f:0a:89:ff:bb:2c:0e:b5:62:03:
4e:33:fa:14:b8:99:f7:0d:8c:c8:ea:48:e3:a1:b9:
d7:29:fb:04:66:96:49:3c:1e:d1:f6:09:41:10:40:
4e:64:8d:9e:be:dd:dd:0c:9e:70:51:d5:29:40:2d:
65:91:c7:4a:f0:14:79:66:28:69:b8:0a:8d:18:0b:
d4:8b:cf:6f:8a:65:b8:e8:ff:1d:e1:19:14:66:ad:
8f:18:11:7c:53:d8:32:0f:40:68:c8:5c:28:dc:ee:
e3:81:fb:5c:fe:ea:44:3e:d6:6d:bb:c3:17:c8:bc:
f5:5f:1d:82:21:83:10:b1:0f:5d:6c:50:bb:18:36:
37:fd:06:58:ea:55:a1:0f:93:45:59:c4:47:7f:e2:
ee:5d:6e:70:ca:cf:0b:b1:7f:d9:e7:ac:b0:37:a6:
54:db:ae:70:82:d1:b3:d7:a2:6a:76:04:b4:13:64:
c7:18:82:54:b0:7b:66:52:db:93:8e:52:0f:f6:89:
5e:e0:c0:32:4a:0f:81:42:86:4d:2c:f1:47:2c:93:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:67:7E:04:F3:CA:74:73:14:C2:9E:FB:E0:E8:98:6A:8C:EE:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:74:d4:42:86:26:e9:f7:5c:12:b9:d5:c3:a4:d1:09:a1:5e:
38:28:d0:a7:ac:1c:49:28:1f:4c:a6:ba:4a:1b:68:56:ea:d9:
de:93:b1:a5:64:30:66:4e:6e:35:7c:24:f3:9b:36:14:35:ec:
d1:c2:3e:3b:08:d7:21:57:a3:dc:1c:c9:c7:d6:81:dd:9c:ad:
b4:b0:7a:c9:73:55:eb:6a:ae:a2:5f:ca:4b:68:e4:6d:9c:f0:
f5:c3:4f:c7:dd:8a:c6:1c:f3:7a:2c:40:1b:af:98:b2:26:65:
0d:d8:7d:2e:1a:ec:1b:af:c4:76:53:c1:1e:35:18:24:33:f8:
bf:f7:e5:17:c2:a1:43:4b:ec:1a:dc:da:74:36:88:24:90:29:
fa:be:a2:ae:87:9e:f0:7d:2d:ce:46:d4:08:1f:03:7a:0f:d9:
97:fa:6b:1a:80:a5:9a:54:01:1b:c8:78:5d:13:03:90:b1:cc:
57:e6:14:e8:56:93:19:4c:7b:56:c3:f4:1d:35:67:c1:78:70:
27:e5:b0:fc:38:aa:e6:19:19:71:14:85:15:4a:b3:e9:dd:dc:
27:37:37:7e:83:88:3d:99:17:dd:96:8f:bc:fb:2f:5b:4e:a4:
92:dc:b7:bc:1a:c4:ff:5f:0f:f7:dc:90:48:35:ca:3e:14:da:
9f:a8:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:56 2025 by rpki-client