Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa
File: a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa (raw, json)
Hash identifier: ilPn+N3PvetVsW8abSVLmCPRTaXZz3Lko9H0aCMKzwg=
Subject key identifier: 29:83:A6:34:68:4C:2C:11:95:84:AC:EB:C6:6C:C3:DD:1C:1F:BE:54
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D905827A6C2341B2890B680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 2620:74:98::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:58:27:a6:c2:34:1b:28:90:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=cf27a8c1-c3dd-4ad7-9444-bfe3237e2b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:8c:81:8b:4c:9e:da:f9:b5:d1:65:27:4f:
8d:c4:8e:1c:7f:e2:c7:b4:aa:70:b8:aa:99:02:8c:
57:07:33:19:a4:fb:9d:31:7a:9f:a8:ab:4b:61:44:
4a:1d:52:6b:85:00:7e:15:a2:a1:6e:d4:99:70:2c:
4a:a3:4e:0a:27:89:8b:47:56:48:00:83:95:b1:f2:
f8:ff:4a:0c:7d:ca:35:31:6c:0a:d3:27:e2:b7:53:
52:0d:6e:53:06:92:5b:71:8d:c8:8e:f4:00:d8:eb:
1c:e0:54:6c:60:2d:8e:e1:61:fe:99:c3:a0:dc:6e:
27:7d:ff:c0:20:d8:0b:83:91:9b:4c:f1:b9:a3:77:
bb:4b:65:5b:79:af:c9:a6:98:f3:60:cd:53:dc:07:
fc:9c:07:23:18:e7:81:7d:c6:44:6d:53:89:90:fe:
63:f5:f9:6f:33:d2:10:f6:ef:84:e0:b2:a8:af:4b:
6a:bb:82:68:e7:d7:32:ec:39:37:35:e5:bc:72:9f:
54:ed:83:6a:87:bd:b7:1b:0b:b8:07:b6:eb:cd:6b:
e8:1c:35:5b:a5:51:2a:aa:9e:0f:e1:4d:cd:c6:d1:
e4:e1:d4:9c:a3:57:4d:27:c5:00:ef:12:99:0e:2a:
3c:f7:15:61:9f:10:23:82:62:e5:2a:c2:50:8a:d4:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:A6:34:68:4C:2C:11:95:84:AC:EB:C6:6C:C3:DD:1C:1F:BE:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0561ed3-1465-39a5-9ab2-c60526f02d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:98::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:61:83:e8:de:84:d5:c3:58:7d:57:52:e6:b6:e9:04:c0:bb:
18:53:e7:99:24:82:07:8e:e4:d4:0e:82:21:73:b9:c0:2e:53:
2c:24:36:d1:f6:04:ab:f4:8d:57:39:8d:74:76:65:32:e9:e0:
77:3f:29:82:e2:fe:65:00:1a:87:a5:76:58:5d:7e:88:55:59:
39:7e:d9:2e:a5:e9:51:98:75:54:61:09:b5:cb:b5:00:56:63:
36:44:0a:8e:bb:97:a9:83:b9:b5:c0:82:3a:de:6f:76:e2:7f:
24:09:dd:25:60:9f:62:6a:a9:86:f2:5b:26:58:dc:00:e5:05:
02:f6:2c:9b:74:b3:c9:73:f6:cb:d6:e6:bd:26:c1:28:13:90:
57:11:2a:b5:c5:73:5d:7c:d5:b5:cf:ed:63:af:05:f6:00:ab:
94:f6:65:88:15:37:18:3f:15:43:52:a6:09:99:e5:46:67:94:
f2:21:fa:ae:c8:22:c3:44:ca:ec:45:18:b1:16:e1:13:63:81:
1a:d2:1c:28:57:d7:df:2b:42:b3:4e:b9:21:91:56:b7:d9:7d:
21:70:c6:50:5c:83:ed:da:ad:46:bb:ab:b2:71:0d:c9:d3:77:
53:94:0e:db:4c:ca:dd:ea:ea:93:4b:e8:69:b7:aa:0c:3c:1d:
b1:f0:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:21 2025 by rpki-client