Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa
File: da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa (raw, json)
Hash identifier: LC9Pnr0FgynXSKnrto1x2pQ6ybqj73x20cjwZSwypt4=
Subject key identifier: 8D:DA:CE:96:DE:60:2A:83:9D:03:65:B8:2A:58:3E:A0:2E:B0:A1:8E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285847F1551B0EFC7E7579EC6DC8C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 396603
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:1b:0e:fc:7e:75:79:ec:6d:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=3926c297-bdf2-4f5c-9534-a0edd2cb1ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:fc:22:03:e7:1b:88:7c:5e:c7:07:22:61:
c2:13:95:ff:ac:7e:b3:52:0c:4b:a6:d9:0f:e0:92:
b5:da:d1:26:de:1c:f7:81:49:31:58:de:f3:94:66:
1f:3f:26:8f:d4:bf:c9:c4:7e:c1:36:93:6e:2d:54:
ce:1f:99:be:69:a9:4c:72:e9:a3:e0:14:a9:d2:76:
d6:cd:70:64:a7:51:40:af:47:ab:1c:f1:4d:3d:fa:
b7:06:0d:4b:e4:53:88:e9:cf:4d:a6:d7:4c:8e:9f:
3d:cf:58:68:61:53:8a:95:98:dc:a4:a8:d9:6c:25:
48:41:b2:36:8b:97:5c:ce:99:e4:aa:af:da:b6:f9:
a0:ff:36:45:e9:9f:2a:41:27:13:2b:b0:16:fa:5d:
7c:58:ab:60:50:a1:0b:84:96:51:32:5a:14:a3:e1:
b3:58:85:30:7f:99:8a:d5:3a:bd:6d:33:ae:9c:72:
3c:1c:9b:79:b6:9d:6c:33:f5:f9:e2:1f:40:23:51:
5d:22:6c:fd:ac:90:f7:f7:9d:47:b8:56:9f:a3:cb:
d7:e8:03:44:f5:81:7f:70:bd:e3:d6:dc:25:bb:b3:
c0:0f:80:d2:1b:e5:8f:8a:57:40:a3:68:12:90:e8:
1c:b3:e6:92:f5:30:35:a1:1e:39:37:fc:44:1c:e9:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DA:CE:96:DE:60:2A:83:9D:03:65:B8:2A:58:3E:A0:2E:B0:A1:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:84:c7:59:42:a9:09:8c:67:01:15:7b:30:61:74:26:dd:cd:
6b:f2:de:74:fe:8b:8f:31:ce:2e:d9:ab:66:af:0c:14:68:e4:
68:82:e0:2b:69:b1:43:a7:1c:02:c5:37:ee:9e:02:55:db:8f:
2c:72:44:9f:4b:59:ba:00:54:a2:3b:24:1f:55:6b:4b:9e:12:
fc:39:c3:10:31:1f:18:f5:6c:36:f1:39:94:3d:b4:31:a5:e4:
b9:0e:8f:f7:a1:bf:a3:3c:1d:5c:50:1e:00:41:6c:fa:5d:11:
fc:99:74:51:15:fd:0d:1b:91:d3:48:82:97:70:32:5f:83:9e:
11:6f:79:1a:64:9a:47:71:55:b3:d0:bd:20:f1:7b:dd:8b:e3:
4f:f0:e4:f6:b7:09:3d:13:02:4b:8e:bf:f6:52:82:bc:90:1a:
54:43:a8:15:ca:8c:c7:0f:12:77:27:43:3e:26:42:d2:0b:69:
ab:79:8a:9b:a7:61:d0:6a:36:40:41:3a:8b:e7:b5:f9:1c:bd:
cf:cf:5f:b3:e8:d5:1c:a5:1d:9a:59:6c:19:4a:43:dc:a0:27:
1e:9b:33:4e:ca:40:92:b5:aa:5f:0f:54:bc:cd:9f:93:9e:ff:
ba:b7:c1:78:79:fb:86:5d:fa:65:d7:6f:13:58:21:1e:30:eb:
6e:76:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:44:12 2025 by rpki-client