Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
File: b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa (raw, json)
Hash identifier: Mse3GcJRCSwtFMizzDu+b5kgOBKzr+0Vbi1y82QlB1Q=
Subject key identifier: 7D:27:89:F8:C6:4C:B0:96:51:41:23:B7:1F:B0:D0:19:38:01:4E:59
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848064514FE48AF1EA750823F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 396552
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:14:fe:48:af:1e:a7:50:82:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=e3714996-d1a9-44c4-9f69-21391981ae07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:13:89:0c:96:f6:d9:ab:50:e7:1c:e4:66:
29:83:bd:bb:2d:51:22:5a:ed:a4:40:28:f5:9d:10:
44:af:97:c8:d0:50:c7:9c:c2:be:fd:97:f1:8e:b9:
a8:b4:51:c9:37:b6:b7:06:9c:7b:6e:7c:79:28:2f:
9d:f5:be:bd:4e:52:92:28:cc:95:1c:6f:4c:d9:b5:
e5:29:e2:c7:ac:1a:85:1c:ba:d0:a7:aa:97:87:6e:
68:43:d7:10:06:04:85:b6:da:46:90:03:41:cc:33:
ba:06:e1:ae:be:e6:f0:a0:3c:ec:d3:20:82:65:ba:
ea:eb:f8:94:18:86:60:0e:4b:ab:68:a1:ba:24:78:
37:20:29:2e:a5:1b:99:b9:de:b2:cf:09:c4:4b:a1:
7c:be:e2:8e:64:01:3d:e4:3d:72:7c:e6:25:fa:1f:
2e:ff:e7:18:d9:2e:92:79:0c:79:e9:1c:09:4f:95:
c4:79:44:be:ef:4e:71:1c:2f:b8:00:bc:55:a1:47:
59:84:dd:ad:0b:ed:9d:70:c1:6f:30:3d:64:d3:9b:
36:c6:57:a5:99:4e:9b:8f:6b:3c:23:90:f3:16:ba:
69:fb:06:d4:8e:81:60:6b:dc:1f:f9:46:28:dc:f3:
cb:ec:05:69:d1:0d:f7:91:08:67:23:44:6b:40:0d:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:27:89:F8:C6:4C:B0:96:51:41:23:B7:1F:B0:D0:19:38:01:4E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:0c:27:b5:c5:62:19:03:6c:29:82:ba:4b:8e:24:73:0d:88:
15:00:8f:59:59:fe:12:3a:5d:24:81:b4:f1:8b:40:1e:f1:44:
48:1a:f4:7a:c7:32:ed:1d:9d:e7:7c:76:dc:b8:ab:88:81:a0:
c6:f0:67:ea:1d:5d:75:b5:12:82:c3:e6:06:f9:42:6c:cf:b5:
df:8e:d4:65:fc:88:b6:45:8c:99:03:bc:ff:96:e2:40:7c:17:
cb:ba:80:4f:45:37:03:88:8b:66:56:89:d1:c0:15:8c:7c:ed:
9d:6c:90:87:8b:8d:78:1d:6f:79:cd:54:61:16:46:07:5e:84:
fc:33:1c:87:cf:3b:49:6e:5c:47:90:4b:f3:5b:d6:38:ad:0c:
91:3c:f4:97:88:a3:25:7e:37:8b:49:b5:55:d1:49:01:58:ee:
21:49:7e:d9:1b:82:ef:a0:07:85:51:b9:53:f3:1f:f7:5d:a3:
11:fe:11:d1:a2:c1:01:52:6d:66:58:59:43:b6:60:50:35:03:
ce:76:be:05:fb:15:a8:32:96:82:96:25:38:06:d2:e4:91:b7:
37:d4:7f:31:01:3a:0a:d9:1c:6a:b2:1d:3a:f5:80:85:fb:4c:
15:59:22:9c:10:7d:50:f4:a8:a4:f2:c3:b7:e0:32:d3:78:7e:
22:f6:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:53 2025 by rpki-client