Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2732b99-6b89-3690-abb7-d8ebe4b91492.roa
File: a2732b99-6b89-3690-abb7-d8ebe4b91492.roa (raw, json)
Hash identifier: ZoM/Nty0s/EzLQ0OPpr2Lnr1bfEkA08dsviJizVq70k=
Subject key identifier: 48:03:E0:79:3A:8D:86:F5:07:D9:3B:69:BD:0A:CB:3C:51:E2:B4:EB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858488280A3E926C4AA6983F0A000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2732b99-6b89-3690-abb7-d8ebe4b91492.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 397207
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:a3:e9:26:c4:aa:69:83:f0:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=22c8ed52-61fe-4cb9-8ca1-2bf327637f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:60:55:f1:88:f3:7f:cf:22:b3:ff:66:7b:
b7:24:4a:49:be:87:1c:f8:d5:b5:a4:54:b8:81:62:
c8:c8:5d:9f:00:02:8f:aa:ab:58:f3:a4:38:63:6a:
34:d0:fd:2b:6d:ff:bf:94:1c:5b:fa:6a:c6:1d:ed:
5d:25:f4:ad:14:4f:3c:fa:58:b1:91:62:15:b4:51:
99:4a:d4:ee:23:d8:7e:d6:ff:a0:74:8f:90:e4:4d:
79:7b:bb:86:06:93:67:46:35:7c:fb:53:05:7a:35:
5a:37:01:3c:ff:a8:90:d1:26:0a:3e:13:b9:c6:53:
58:ad:fd:c9:04:02:d8:60:9a:9b:da:1c:b2:b7:d7:
f1:9c:6a:3a:d9:33:6d:0f:35:60:29:4f:4b:db:80:
6c:da:32:dc:78:0b:7b:27:3c:3b:c7:10:f6:6a:a6:
f1:ea:36:a3:3f:86:80:b3:8f:5e:3d:98:94:7b:01:
26:61:3e:1e:09:61:fc:a2:14:11:b0:d2:6e:52:9d:
b9:62:d1:15:d4:c6:5c:27:3c:62:6b:fe:b0:b9:cb:
88:cb:d6:1b:88:70:98:bb:c2:2c:fd:cc:1d:8d:14:
c7:d4:22:83:43:99:f5:ce:91:d9:e2:4b:75:a1:bd:
f3:a9:ad:2f:46:0e:7f:59:4f:ad:66:8c:3b:a2:35:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:E0:79:3A:8D:86:F5:07:D9:3B:69:BD:0A:CB:3C:51:E2:B4:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2732b99-6b89-3690-abb7-d8ebe4b91492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:86:56:9d:4d:0e:a5:b6:f9:a7:76:95:36:a6:d5:14:26:6d:
5e:d9:3e:99:03:e9:0d:da:a1:1e:d2:28:9e:63:4b:58:b0:be:
62:d7:fe:63:9c:2e:02:54:20:f6:88:b5:1c:3d:04:9f:21:22:
e9:3e:c9:2b:90:be:b1:bf:e3:9d:53:a9:0e:f3:28:3b:4c:ce:
b1:02:22:cc:75:e3:6e:ec:42:c0:8b:49:ba:43:77:dc:57:e7:
5a:f5:e8:3e:5b:9e:ef:0f:4f:41:d0:e0:27:92:b1:5a:2f:05:
3e:d7:0d:0d:cd:70:08:7a:d6:df:d7:aa:77:7c:75:80:3e:b3:
93:69:b4:ef:7c:7c:09:d9:7a:84:e7:a2:5c:93:c1:54:ae:01:
cc:67:3d:61:14:12:0b:d6:64:f9:0e:4c:05:14:bb:c5:04:a2:
91:24:2d:16:06:77:47:cf:61:40:a1:ba:f4:af:6c:f1:de:e5:
c0:c4:c8:9c:42:68:a9:10:59:47:30:68:20:a4:60:47:9c:4e:
92:08:b7:53:1b:a7:6e:bc:11:bc:7b:b2:ca:b2:6e:b8:a9:7b:
d4:b6:e3:6f:b3:3b:ab:a0:cf:13:ab:e8:a7:d8:18:d1:b2:d3:
3d:f4:8b:be:62:33:4a:2c:c8:6c:82:1b:af:0c:00:67:e8:12:
ca:86:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:07 2025 by rpki-client