Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa
File: a5061038-0bb9-3802-a5a4-f801e56e57be.roa (raw, json)
Hash identifier: OAKAfbmbaDEGHYvTE/0qPWLPPO+8yvvjqwWLhqZeBm0=
Subject key identifier: E4:88:05:FD:B5:AA:C6:BE:20:95:28:84:5B:29:95:0E:2F:62:63:D4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858480EA51DBA09938040A0E87A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7342
IP address blocks: 2620:74:6d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1d:ba:09:93:80:40:a0:e8:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=5eb707bc-f78d-4f81-a56f-f72a43292f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:d2:36:42:53:70:2d:87:a2:15:66:c5:1e:
b5:73:f3:5a:a7:d7:87:78:83:4b:f9:60:88:6e:43:
7d:1d:ad:b4:78:1e:6b:3d:58:03:47:c7:4d:b9:06:
e5:e3:20:da:30:7c:e7:48:d7:c6:e5:97:74:be:66:
29:a7:5c:c9:68:0e:9c:55:0d:46:c5:5c:fc:9f:95:
f3:02:2f:33:a8:46:bd:9d:e7:de:0b:e5:cf:be:8e:
51:7a:92:de:51:95:48:ab:b7:5a:a5:f4:2b:11:58:
e5:b9:62:48:74:af:7c:be:82:26:fe:61:6c:2a:6a:
27:03:cc:1b:85:88:8d:6a:4e:4b:01:d9:d8:c6:42:
3e:19:c0:59:7e:55:fe:f4:6b:d7:9b:c7:d7:e7:33:
ee:a3:69:d8:9e:80:71:d6:44:5f:89:a9:de:6b:0c:
10:76:bb:7e:9e:87:ee:18:6e:87:5b:1b:70:b4:34:
8f:4a:61:ab:1d:a9:43:4b:f0:48:ea:8f:a3:b8:f4:
ce:18:c2:5d:48:0c:09:74:0d:b3:57:64:50:1c:51:
cd:72:b3:06:3e:5b:34:d9:68:44:be:70:23:e5:7c:
d8:22:59:bf:47:c5:d1:36:99:17:34:99:18:06:04:
8c:da:2a:f2:00:92:00:e2:24:e0:87:ed:bf:87:1d:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:05:FD:B5:AA:C6:BE:20:95:28:84:5B:29:95:0E:2F:62:63:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:6d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:43:cd:49:66:4e:63:0d:6a:80:d3:27:fc:bf:78:44:bd:d4:
a4:ae:8e:f5:37:e9:4b:db:44:33:6a:b7:84:c2:54:b9:4a:45:
ec:d8:60:9d:c1:bf:20:82:50:65:d8:3d:b6:22:47:89:9f:f5:
f9:64:30:b2:30:1d:45:fa:6d:4d:48:d4:12:84:27:ed:e6:f9:
fd:22:d4:33:e8:c0:d7:9f:fc:0b:fb:da:ef:51:f3:f7:4f:af:
97:c8:30:4c:62:f3:21:90:04:13:3d:12:d9:f2:36:be:42:f9:
ca:de:dd:f9:d0:fd:c4:f5:a6:f6:f0:38:69:a5:90:85:2b:ff:
4f:a7:c5:e7:0e:72:4d:8b:97:e9:d7:38:e5:44:25:6a:dc:f2:
b6:24:b5:2b:cb:33:a9:98:90:60:15:35:c1:f5:4c:01:75:c2:
49:1d:74:d1:a2:5e:9f:b7:70:75:1e:61:57:e0:52:90:95:d7:
c0:5a:b5:de:0b:69:b9:31:e5:82:1a:c2:32:96:82:04:a6:63:
e9:47:85:f4:f2:70:79:47:ea:05:e8:83:e5:62:b2:44:d0:ea:
65:33:68:ac:21:6a:9e:be:b7:d7:9f:fc:9e:15:ba:44:7d:e2:
ed:66:64:b0:71:68:25:f7:bf:c5:e5:f4:38:ab:e8:e0:43:c2:
d9:84:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:28 2025 by rpki-client