Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
File: af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa (raw, json)
Hash identifier: 9XssAM9W+W1UqUYiQJ2HEKa9NT9zNBXLavGAs2B2hf4=
Subject key identifier: 02:82:48:A9:6E:FE:ED:75:5F:00:16:39:FA:A3:61:12:87:A5:54:87
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584847E02CF30C110813AF81F080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 2620:74:7e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2c:f3:0c:11:08:13:af:81:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=9069efa9-57fd-4ce0-ae53-1067bf5ba11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:49:0b:92:38:17:58:40:48:4e:e4:9e:3a:
4b:02:f4:cd:12:1c:d8:a0:10:51:3e:99:ba:6f:ea:
10:4d:53:ea:bb:28:81:52:65:df:ce:e1:88:fe:e2:
01:bf:89:67:56:9e:49:44:a0:ef:d4:16:93:9b:ec:
0c:b5:f3:ce:2b:d2:b9:e3:71:c2:65:7c:b5:73:b8:
cc:07:93:28:64:23:9e:e5:ef:d0:57:b8:b5:8c:9d:
ac:dd:82:c0:1f:1b:fe:ee:49:a1:8e:60:f3:b6:50:
cf:ec:ba:32:1c:f0:bd:b2:2e:cd:b6:a5:04:32:24:
0f:5b:58:60:29:95:f5:a7:fd:1c:b1:12:ac:b8:b5:
39:63:9e:9c:03:f6:a8:9c:e6:b4:b4:b1:e3:79:35:
12:f1:76:50:3e:9d:df:08:a0:5d:fb:5c:5d:53:ab:
e8:ef:fa:1e:7f:95:5c:65:2f:d0:6a:aa:eb:64:6c:
f0:88:9f:ef:cd:01:4f:41:35:49:d6:60:c8:61:43:
a5:03:e3:35:0c:cf:86:98:54:5f:b9:44:fc:49:b4:
af:f7:20:ce:04:eb:e1:c1:30:b4:77:ab:be:5d:dd:
a8:27:4a:df:82:12:e5:fd:37:6b:48:a4:43:f4:84:
02:db:10:bd:da:2e:bb:06:85:50:40:47:be:ac:a8:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:48:A9:6E:FE:ED:75:5F:00:16:39:FA:A3:61:12:87:A5:54:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:7e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:11:f3:e6:e8:cb:55:54:1b:ca:31:4b:78:a0:b7:4c:16:b2:
ac:5f:42:99:5f:ad:50:32:8d:6f:9f:7d:10:1d:7f:b7:13:e1:
12:7c:66:6a:27:f7:1d:ee:57:0a:ea:59:10:c7:47:1c:86:ab:
c0:c2:7f:b8:57:28:bd:21:f4:a4:33:ed:1d:9d:29:06:d6:0e:
c8:d6:4c:43:25:33:28:04:2c:ee:df:6d:9a:8b:de:56:7a:c4:
1b:8b:c4:fe:ca:39:f8:bc:fc:46:cf:e6:38:5f:91:f2:61:39:
df:47:20:91:24:86:b3:8f:d4:73:32:2f:0f:60:48:bd:bf:67:
95:1a:b5:b9:0e:26:53:a9:15:1f:ea:69:ca:bd:bd:5d:b7:ed:
c2:74:79:9f:a7:24:d1:73:7b:a1:10:ea:2f:24:af:c8:4b:89:
e9:e4:0a:91:f6:37:b8:9f:dd:d7:b1:ee:bf:62:5f:e4:c0:1f:
70:1b:ad:c9:d2:2c:8a:57:f0:bd:57:0e:de:c8:d4:8e:ec:72:
49:a7:df:38:d4:52:19:d8:5e:fc:28:59:8a:3d:28:2e:01:ae:
dd:2d:31:1a:05:fd:8f:fb:2b:61:75:36:24:6a:8f:8f:3a:e0:
5e:77:7f:82:fe:89:a1:41:62:c4:a1:eb:cd:41:bd:49:5b:d2:
c4:cf:12:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhH4CzzDBEIE6+B8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIyMTE0MDA1MloXDTI1MDMyMTEzMDA1MlowLzEtMCsGA1UEAxMk
OTA2OWVmYTktNTdmZC00Y2UwLWFlNTMtMTA2N2JmNWJhMTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMtJC5I4F1hASE7knjpLAvTNEhzYoBBRPpm6
b+oQTVPquyiBUmXfzuGI/uIBv4lnVp5JRKDv1BaTm+wMtfPOK9K543HCZXy1c7jM
B5MoZCOe5e/QV7i1jJ2s3YLAHxv+7kmhjmDztlDP7LoyHPC9si7NtqUEMiQPW1hg
KZX1p/0csRKsuLU5Y56cA/aonOa0tLHjeTUS8XZQPp3fCKBd+1xdU6vo7/oef5Vc
ZS/QaqrrZGzwiJ/vzQFPQTVJ1mDIYUOlA+M1DM+GmFRfuUT8SbSv9yDOBOvhwTC0
d6u+Xd2oJ0rfghLl/TdrSKRD9IQC2xC92i67BoVQQEe+rKhjowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAKCSKlu/u11XwAWOfqjYRKHpVSHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4OGQ4MzctZTRhMy0z
YjA1LThmZGYtOGIwZWRkYzkzYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJAR8+boy1VUG8oxS3igt0wWsqxfQplfrVAyjW+ffRAdf7cT4RJ8
Zmon9x3uVwrqWRDHRxyGq8DCf7hXKL0h9KQz7R2dKQbWDsjWTEMlMygELO7fbZqL
3lZ6xBuLxP7KOfi8/EbP5jhfkfJhOd9HIJEkhrOP1HMyLw9gSL2/Z5UatbkOJlOp
FR/qacq9vV237cJ0eZ+nJNFze6EQ6i8kr8hLienkCpH2N7if3dex7r9iX+TAH3Ab
rcnSLIpX8L1XDt7I1I7sckmn3zjUUhnYXvwoWYo9KC4Brt0tMRoF/Y/7K2F1NiRq
j4864F53f4L+iaFBYsSh681BvUlb0sTPEqc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:20 2025 by rpki-client