Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa
File: cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa (raw, json)
Hash identifier: qqiV0fdmTEaYt10gUH8tWJDVvoVbcYqEgNH/DEOUyZc=
Subject key identifier: 1D:3B:B4:3A:A9:16:F9:7D:CB:C6:66:90:90:6A:25:01:9D:9A:7B:2D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A93C5BB4F8BD73965DF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396579
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:93:c5:bb:4f:8b:d7:39:65:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=a7f7d8ed-1db0-4538-af80-4d32e80fd896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:d4:dd:d9:20:64:de:70:3e:13:2d:69:0b:
74:0b:4b:62:52:a6:36:9b:d7:cd:70:28:b3:43:c7:
99:59:73:8f:5a:78:88:38:11:56:65:e7:7c:3d:3b:
1b:40:c9:17:a9:63:38:bc:7d:71:fd:b0:db:4a:26:
76:b5:b4:8b:92:7e:e5:59:98:bd:e3:77:d0:8f:3e:
17:2e:fb:3f:1c:30:69:e6:b8:8a:80:87:6c:89:eb:
ea:2e:13:dc:a2:10:75:2d:c3:6a:03:20:6a:f5:2a:
38:60:99:3c:bf:6c:62:e0:0b:83:50:0e:f1:2d:5f:
1f:92:1f:37:1c:b9:d0:f1:37:a7:0f:13:cc:37:8c:
6d:09:78:09:3a:6f:3f:77:be:d5:52:49:c9:9a:66:
f7:81:34:a2:28:2d:1a:86:2f:5f:23:b2:c9:79:6b:
9a:f7:20:2c:43:ea:3d:39:0b:2c:90:65:f0:3c:08:
2f:7d:bc:04:36:66:0a:30:16:0d:ca:07:bc:fa:7b:
60:25:ae:35:18:be:bd:e6:8a:44:06:7e:ec:20:d3:
25:5f:c2:f3:32:09:64:74:b7:30:40:2b:3d:34:57:
f4:c1:15:c9:54:bd:f6:18:b9:ba:91:5f:32:95:3a:
a2:88:55:a0:aa:b2:af:49:c8:4d:76:c0:a6:04:27:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:B4:3A:A9:16:F9:7D:CB:C6:66:90:90:6A:25:01:9D:9A:7B:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:54:fc:7d:b1:aa:fc:38:d2:25:43:92:a8:0f:c1:3e:40:71:
82:84:99:f4:79:90:af:8e:13:ab:ab:96:97:a9:c7:c1:e8:72:
69:af:c8:be:0f:14:40:95:a9:5b:bc:a4:bc:0a:f4:8c:11:25:
9f:7e:4a:ec:fe:52:bd:e8:e1:32:c3:99:71:79:d6:6f:40:4e:
e4:2c:52:1f:a1:de:f7:e1:9a:3d:3f:57:9d:76:b6:03:bb:12:
43:3e:01:70:ff:dd:fb:76:af:78:61:0c:47:c5:44:a5:38:6f:
2b:a6:e1:f5:f1:c8:5c:54:af:9a:33:40:7c:13:da:2c:6a:34:
be:7a:0f:ea:b1:29:58:56:62:92:43:b7:9e:9f:37:84:22:5b:
0e:b6:46:dc:51:7c:5b:12:bb:ca:f5:4b:1d:9f:82:01:ed:a7:
01:77:f1:ab:6c:03:cc:7d:49:39:4a:d7:8a:0b:9b:2b:33:6c:
84:35:21:2c:85:eb:54:8b:7c:28:b7:6f:88:b7:92:ee:85:c4:
ea:23:fd:56:78:0d:72:da:53:8e:fa:93:d5:58:7e:f9:98:b4:
d3:1a:82:08:2a:ad:20:3d:99:56:33:c8:a7:81:5d:e7:c0:34:
d4:18:61:d1:85:cd:40:87:1b:56:b1:7a:bc:b6:b0:fe:e9:fc:
1c:79:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:43 2025 by rpki-client