Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa
File: e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa (raw, json)
Hash identifier: FfOFAkj/MHA4MHBX4pqyItL2MY4pmctx1O5PvVpaXFc=
Subject key identifier: 3B:48:FC:CE:CF:E5:E0:58:41:04:74:7D:EA:10:C8:8A:C6:7E:97:4B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A98AEE1E693F2B0E40300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 36627
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:98:ae:e1:e6:93:f2:b0:e4:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=04ec88ab-1728-48fd-88e9-2799eced95cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:5e:30:35:f3:7a:b2:e4:cb:7b:73:2f:4e:
2d:d5:9a:68:ce:99:2c:89:b9:f2:d4:e4:74:71:7b:
16:b8:c1:fe:09:47:ae:42:82:6a:9f:db:a8:b8:a7:
9e:01:90:9b:8d:ee:f1:80:6c:aa:15:a1:4a:a4:03:
0b:a2:2d:cb:71:8a:9b:a6:b3:b9:dc:8b:dd:e7:6d:
0c:d3:d4:1c:2e:af:47:70:30:66:67:b9:6c:91:ba:
90:8e:53:69:13:38:27:52:12:be:92:e3:2d:ac:1e:
5e:b2:a8:0d:db:19:3e:f2:f3:a5:6f:21:b9:af:bd:
14:70:4a:ae:01:19:93:e4:8b:67:3b:69:68:50:08:
13:fc:a6:e6:95:df:c2:99:82:39:fa:eb:10:a9:de:
29:c2:ad:d6:1c:93:3f:c3:c6:b4:97:6e:b2:9b:23:
54:b6:d2:11:18:fd:06:77:6c:b4:d8:4e:0b:88:8f:
73:70:1f:57:1c:a8:19:7f:0e:c6:63:10:ed:21:c4:
37:a6:66:f4:43:e7:5a:ae:dc:31:5d:51:b9:4d:6b:
c2:a7:53:d8:9b:29:28:84:dc:82:34:da:e1:dd:ec:
54:2d:b4:df:4b:e0:12:3b:a4:fb:50:c5:69:ed:58:
aa:c1:32:da:75:f3:1b:5f:3b:67:30:0d:f9:89:dc:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:48:FC:CE:CF:E5:E0:58:41:04:74:7D:EA:10:C8:8A:C6:7E:97:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ca:d5:99:07:67:bc:71:8d:89:8e:8d:22:82:60:e4:2e:be:
9c:71:ab:dc:1b:71:07:1f:a4:9e:80:7b:6e:67:24:c3:a7:f9:
95:61:58:38:71:df:7a:7a:30:c6:9e:a2:31:83:ac:00:4c:93:
a6:8e:6b:eb:7b:13:e4:02:06:f7:8a:83:5b:78:a9:d6:35:1f:
3f:25:3c:dd:7c:cd:6d:a1:87:79:0f:c8:a7:7b:72:32:1b:cd:
7d:30:35:8c:98:55:35:bf:79:86:c7:f3:02:3d:22:3e:ab:ff:
53:cd:a0:ec:b2:5f:13:08:24:30:89:b8:72:c9:3b:1d:d2:fa:
21:fc:b7:0a:db:0c:94:2d:2d:a8:aa:a3:be:b6:43:71:82:e4:
da:1a:9c:a7:1d:b7:ff:da:17:c1:c8:e5:44:08:ab:e4:73:1c:
b7:18:ee:62:ac:8e:e8:1c:8f:4a:d2:b6:bf:40:3d:46:f6:26:
e6:24:0e:79:66:d8:1c:b3:74:7d:ab:52:48:e7:37:30:c5:62:
61:06:8a:33:ab:c1:5c:d9:e5:58:b8:27:24:2c:4a:f2:7c:2f:
6e:57:f0:35:9d:82:9a:0d:41:c9:62:4d:e3:55:76:df:91:1a:
aa:cb:09:be:16:a4:97:8b:2b:d0:17:54:eb:32:ad:96:77:3d:
e4:94:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:03 2025 by rpki-client