Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa
File: b33653a3-e943-3203-996f-6057a0402e41.roa (raw, json)
Hash identifier: PLq9J67n/iJm9RH5+hqtLbPi0nbVG/5DWWcYb/3bI6M=
Subject key identifier: E0:23:48:66:6C:F7:81:7B:E3:5D:74:92:4A:46:70:9F:80:C3:C3:E2
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A948ED9885116B7764F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396584
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:94:8e:d9:88:51:16:b7:76:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=dd623db5-159a-4813-97f4-d53422ef52f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:dd:c2:fd:d7:3d:89:ef:8d:00:cc:a4:62:
03:0d:4f:4b:47:30:f9:58:92:7f:c3:7d:51:02:89:
72:1c:06:6c:7b:be:c1:ac:0d:6d:bf:9b:3f:a5:c1:
0e:3e:f2:c7:d3:a5:da:92:a3:00:76:9e:de:0e:01:
4e:7a:df:31:46:49:f0:51:2c:bf:b0:39:aa:60:2c:
bb:a0:ce:77:54:cb:be:81:31:68:bd:80:f6:6c:77:
91:a5:81:75:a7:1c:54:26:14:11:6e:1b:a2:67:00:
fa:77:e5:23:2f:dc:3a:86:00:0f:5e:21:f8:a0:7e:
05:df:50:ef:c8:94:f4:c7:f7:ff:f3:a3:68:21:d2:
dd:89:9e:d8:dd:c7:1e:82:47:66:54:f7:75:7b:d6:
05:b4:15:8a:58:2f:0e:06:21:c3:18:4a:da:5f:a0:
60:23:05:ab:e9:c5:12:85:83:8f:90:26:15:14:25:
ff:8b:9d:37:4a:e3:c2:e4:75:96:36:6c:c8:80:ce:
3d:e4:5c:36:f9:17:e3:c2:5c:bd:e9:6e:35:ba:65:
00:ff:e5:ab:7e:31:68:8c:09:cf:49:5b:75:9d:11:
e7:e3:fb:63:6a:fc:72:ea:de:42:3a:e4:91:1c:ce:
a7:51:80:82:ba:70:09:b3:00:6d:20:3c:85:c6:8d:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:48:66:6C:F7:81:7B:E3:5D:74:92:4A:46:70:9F:80:C3:C3:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:61:50:15:a6:45:a2:49:cc:70:93:9b:01:08:d5:1c:98:bd:
6a:45:12:8c:b9:35:21:e8:d0:e6:5f:80:dd:99:7a:73:19:76:
05:52:24:ca:8e:db:f1:fe:aa:69:85:01:95:72:61:86:08:6e:
f5:b9:83:51:5f:24:5a:3f:c6:04:1d:ff:fe:96:01:05:59:cb:
fd:f4:33:84:26:9b:da:27:29:7b:2d:7f:4e:a1:45:f3:64:36:
f4:7e:77:7d:73:b8:ee:dd:26:d8:b6:04:27:4f:aa:19:1f:e4:
5a:fc:93:09:4a:05:9f:ef:62:72:cd:2c:46:22:22:60:dd:c9:
34:f9:d0:57:5b:d0:08:17:05:d9:d9:cd:f4:3a:a5:bc:a4:f3:
a4:72:3a:67:ef:23:f4:17:bf:c9:db:db:02:d6:0c:2f:e6:a9:
b2:7c:38:64:4f:b5:9b:5f:3c:92:fe:d3:5e:de:03:97:10:18:
a3:74:b4:68:73:20:39:3a:f5:a0:b6:a3:97:d7:4a:b9:fa:bb:
31:5a:a0:11:48:15:7d:6a:15:9c:d4:51:94:97:81:49:aa:8a:
e4:bc:41:21:50:2b:b9:5c:c4:4c:b8:08:9f:55:67:69:1e:4b:
64:9e:48:72:b7:2a:84:f7:c6:e8:f7:43:93:46:c7:46:cd:23:
0c:58:9d:92
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgYapSO2YhRFrd2TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIwNDE0MDA1MloXDTI1MDMwNDE0MDA1MlowLzEtMCsGA1UEAxMk
ZGQ2MjNkYjUtMTU5YS00ODEzLTk3ZjQtZDUzNDIyZWY1MmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq3dwv3XPYnvjQDMpGIDDU9LRzD5WJJ/w31R
AolyHAZse77BrA1tv5s/pcEOPvLH06XakqMAdp7eDgFOet8xRknwUSy/sDmqYCy7
oM53VMu+gTFovYD2bHeRpYF1pxxUJhQRbhuiZwD6d+UjL9w6hgAPXiH4oH4F31Dv
yJT0x/f/86NoIdLdiZ7Y3ccegkdmVPd1e9YFtBWKWC8OBiHDGEraX6BgIwWr6cUS
hYOPkCYVFCX/i503SuPC5HWWNmzIgM495Fw2+Rfjwly96W41umUA/+WrfjFojAnP
SVt1nRHn4/tjavxy6t5COuSRHM6nUYCCunAJswBtIDyFxo00uwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOAjSGZs94F74110kkpGcJ+Aw8PiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjMzNjUzYTMtZTk0My0z
MjAzLTk5NmYtNjA1N2EwNDAyZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAuYVAVpkWiScxwk5sBCNUcmL1qRRKMuTUh6NDm
X4DdmXpzGXYFUiTKjtvx/qpphQGVcmGGCG71uYNRXyRaP8YEHf/+lgEFWcv99DOE
JpvaJyl7LX9OoUXzZDb0fnd9c7ju3SbYtgQnT6oZH+Ra/JMJSgWf72JyzSxGIiJg
3ck0+dBXW9AIFwXZ2c30OqW8pPOkcjpn7yP0F7/J29sC1gwv5qmyfDhkT7WbXzyS
/tNe3gOXEBijdLRocyA5OvWgtqOX10q5+rsxWqARSBV9ahWc1FGUl4FJqorkvEEh
UCu5XMRMuAifVWdpHktknkhytyqE98bo90OTRsdGzSMMWJ2S
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:22 2025 by rpki-client