Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0d292ac-7863-3e7b-b18b-88f2eb2676f7.roa
File: a0d292ac-7863-3e7b-b18b-88f2eb2676f7.roa (raw, json)
Hash identifier: FNX7LII6v3sQnm7UY/Z2tkOxxBCSZWx5ErEA7Z6dFno=
Subject key identifier: E8:C4:68:AC:30:5F:B0:05:CA:C6:44:B9:EA:E2:0D:44:F3:B9:1F:78
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A99E94EB2E68A8ABA7B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0d292ac-7863-3e7b-b18b-88f2eb2676f7.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396561
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:99:e9:4e:b2:e6:8a:8a:ba:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=c3c9d617-2934-4aa1-9e5b-6ac18eeba234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:92:f0:9f:a9:62:3b:f4:da:f2:8d:f1:31:
10:0e:51:fd:70:41:48:a3:80:6e:5a:eb:fe:5b:68:
dd:f1:27:15:42:1f:d3:4b:07:69:80:b8:42:31:7d:
83:d4:83:f3:cd:84:4f:3b:63:f2:d1:76:8a:ce:70:
9d:75:df:6b:e0:04:f6:e1:ec:01:c3:a8:b7:ae:8b:
48:75:28:d6:7c:e9:e7:94:93:8d:87:93:00:fe:16:
42:6b:e8:d9:76:c1:88:a9:ca:32:fc:f0:e3:d0:f6:
40:d3:da:60:90:8a:66:0e:19:5d:26:46:6f:e4:74:
96:ab:87:d6:81:6f:45:d3:bf:cd:0b:8f:2f:97:fd:
9b:a2:f4:15:d6:2e:8f:ca:4c:80:c1:c0:d2:9f:4b:
6d:75:e1:81:4c:df:7d:4a:6a:c0:db:c9:49:73:5c:
93:68:a4:3e:01:f4:89:e0:df:50:d4:b5:c0:c6:7e:
85:5b:fa:f0:0c:03:b9:9e:ad:e0:6e:1c:3c:93:3d:
e9:ed:0e:7e:6e:5f:ad:62:d8:59:29:be:50:eb:fb:
3a:8b:87:d4:28:e2:e8:c0:71:d5:55:36:ff:85:ba:
9a:13:02:38:27:49:c6:7a:5a:d8:18:0a:56:49:43:
88:fa:98:73:38:57:cf:91:59:e4:cb:16:e3:a7:ed:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:68:AC:30:5F:B0:05:CA:C6:44:B9:EA:E2:0D:44:F3:B9:1F:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0d292ac-7863-3e7b-b18b-88f2eb2676f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:58:fb:12:24:6c:57:d4:42:69:4c:d0:9c:7b:e8:19:ed:74:
02:11:d2:a2:5a:a2:5d:e1:1e:73:1d:f8:31:48:87:3f:db:05:
38:06:eb:64:03:b0:b3:81:8f:83:b2:e1:b5:ed:a8:97:19:61:
31:b8:9e:ee:56:64:f8:92:c5:d9:f4:cb:ba:a2:c6:5b:d9:c0:
90:59:77:56:e4:8c:b8:56:6e:f3:d0:31:e9:a4:e7:23:dc:5f:
98:7a:08:63:b0:01:f1:d8:02:21:3f:fd:09:f3:d7:69:76:da:
03:21:cd:ee:ac:a7:50:fe:eb:bd:c4:3a:0f:d4:35:0a:69:95:
67:19:32:ff:60:b6:9e:aa:93:8d:c9:99:ba:60:34:71:49:43:
1e:bc:e2:63:7e:bd:36:48:9a:f2:82:4c:ae:d1:4c:1b:30:10:
be:fb:88:e1:d3:26:32:6a:91:95:77:d7:3f:a1:9c:b7:f0:7b:
b3:1e:1d:22:2a:57:c8:fe:0a:28:4a:6e:c9:b1:82:5f:52:1a:
e4:f9:74:39:26:54:2d:28:55:e8:93:3c:59:02:52:e6:2b:6f:
8a:4b:ec:23:8e:68:8f:1a:00:2a:fa:6b:c8:97:4d:4c:96:26:
cd:9a:5b:f3:d5:ee:5c:16:07:2c:a4:30:39:6e:58:e5:78:21:
86:32:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:29:25 2025 by rpki-client