Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acee1a41-2e15-3e3f-9675-481f7ea007ea.roa
File: acee1a41-2e15-3e3f-9675-481f7ea007ea.roa (raw, json)
Hash identifier: tzFztgwNIpnuX2gCoB9DTua+MWj0o+WVnUBxeStqdW0=
Subject key identifier: 44:F4:C8:58:AC:C7:1E:CB:53:1D:AE:B4:97:41:5B:8D:5B:DD:85:5A
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584839EAD65C220253A359E568AA
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acee1a41-2e15-3e3f-9675-481f7ea007ea.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 396558
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d6:5c:22:02:53:a3:59:e5:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=fa098415-c76d-4049-a2ef-50183ce7fdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:d0:0a:a3:f4:00:02:99:fa:b3:c3:40:a3:
f1:0c:bd:b3:75:31:ed:49:a0:9e:98:10:b8:40:2d:
a8:57:32:b8:6a:3d:8c:dd:5a:21:03:96:87:ae:1b:
e1:5d:0a:c9:4c:a0:61:49:29:79:06:ba:46:97:ff:
c5:d8:70:5b:5b:0d:fc:6f:c8:4a:61:4b:b5:58:69:
ac:a5:a2:da:59:8b:2a:5a:75:d3:47:f7:77:3f:71:
56:0f:38:30:b6:04:c8:4e:eb:30:04:45:8d:e6:72:
07:33:d1:58:3f:ae:81:59:0a:87:c8:c4:45:6d:1f:
56:a1:7a:b7:f4:08:63:88:9f:32:2a:08:01:09:29:
d7:dc:30:e3:23:b1:fb:1c:16:00:4b:e3:47:1d:d5:
f0:00:04:3a:4e:38:8f:86:24:2a:96:08:70:f9:57:
12:eb:bd:ff:22:5c:cc:b3:52:41:eb:1a:eb:34:29:
7e:82:ed:54:0e:a1:fd:6f:e6:67:5e:f5:19:d4:87:
5c:f7:2f:1f:4c:47:cc:31:0b:06:f0:5c:39:b8:51:
71:10:38:47:85:42:1d:59:cb:a9:5f:68:3a:0a:ae:
1c:fa:28:db:e7:64:64:ed:0b:a9:64:6b:f5:f5:7b:
84:26:e3:8a:73:e3:a8:16:35:f1:d6:96:f7:14:70:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:C8:58:AC:C7:1E:CB:53:1D:AE:B4:97:41:5B:8D:5B:DD:85:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acee1a41-2e15-3e3f-9675-481f7ea007ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:8e:90:cb:c2:e1:93:24:d1:d2:66:ce:4d:71:85:e7:78:9c:
97:e4:34:14:2a:e6:4d:70:9b:c4:dd:38:9f:d3:42:e8:f1:39:
96:b4:00:2c:e0:d9:8c:15:a5:fa:e1:88:31:7b:17:18:ce:22:
e9:e8:6b:49:c7:57:92:a8:50:9f:8f:d4:90:e7:54:53:2b:1c:
2f:dc:5d:38:14:66:7a:38:25:99:7c:32:84:c0:8e:b4:b0:a3:
b8:7b:18:7b:26:d9:01:9b:9b:90:a6:a4:25:4f:35:77:08:a3:
9f:93:93:14:86:fa:f2:29:8e:9b:4b:47:eb:16:00:40:e1:f8:
35:d1:86:a0:5c:f7:d0:39:6b:85:ff:3c:60:2a:84:7b:3c:52:
a1:4c:4f:00:e7:7b:3d:08:af:96:1d:ad:9d:6c:a4:27:1b:16:
58:72:db:4c:2d:bd:5d:99:6b:c1:69:b0:d4:cc:31:51:cd:26:
c8:c6:05:b2:a5:6f:a2:07:7e:ce:2d:fb:60:0b:a9:7a:43:4e:
74:26:8a:b6:7a:46:d1:e8:02:59:34:e6:b6:c4:28:42:d4:2b:
c2:76:ee:6f:7c:42:5c:42:73:94:4e:b6:be:52:dd:28:9a:de:
c3:47:11:e8:06:1c:dc:5c:1a:f6:9f:72:08:a9:64:aa:9f:84:
fe:36:c3:51
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEg56tZcIgJTo1nlaKowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZmEwOTg0MTUtYzc2ZC00MDQ5LWEyZWYtNTAxODNjZTdmZGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWXQCqP0AAKZ+rPDQKPxDL2zdTHtSaCemBC4
QC2oVzK4aj2M3VohA5aHrhvhXQrJTKBhSSl5BrpGl//F2HBbWw38b8hKYUu1WGms
paLaWYsqWnXTR/d3P3FWDzgwtgTITuswBEWN5nIHM9FYP66BWQqHyMRFbR9WoXq3
9AhjiJ8yKggBCSnX3DDjI7H7HBYAS+NHHdXwAAQ6TjiPhiQqlghw+VcS673/IlzM
s1JB6xrrNCl+gu1UDqH9b+ZnXvUZ1Idc9y8fTEfMMQsG8Fw5uFFxEDhHhUIdWcup
X2g6Cq4c+ijb52Rk7QupZGv19XuEJuOKc+OoFjXx1pb3FHAS/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFET0yFisxx7LUx2utJdBW41b3YVaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWNlZTFhNDEtMmUxNS0z
ZTNmLTk2NzUtNDgxZjdlYTAwN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA5jpDLwuGTJNHSZs5NcYXneJyX5DQUKuZNcJvE
3Tif00Lo8TmWtAAs4NmMFaX64YgxexcYziLp6GtJx1eSqFCfj9SQ51RTKxwv3F04
FGZ6OCWZfDKEwI60sKO4exh7JtkBm5uQpqQlTzV3CKOfk5MUhvryKY6bS0frFgBA
4fg10YagXPfQOWuF/zxgKoR7PFKhTE8A53s9CK+WHa2dbKQnGxZYcttMLb1dmWvB
abDUzDFRzSbIxgWypW+iB37OLftgC6l6Q050Joq2ekbR6AJZNOa2xChC1CvCdu5v
fEJcQnOUTra+Ut0omt7DRxHoBhzcXBr2n3IIqWSqn4T+NsNR
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:51 2025 by rpki-client