Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
File: eda59871-a0dc-3ed0-824a-0ce4665f8984.roa (raw, json)
Hash identifier: CJ+oFvcx53yh1NS5dK+e3fSaktPfEO+f6qG3FQFaO6A=
Subject key identifier: F4:7E:57:F1:43:6A:9B:C3:26:CD:93:91:8C:A5:D0:C3:65:14:28:DE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D9058963F5CDA585C01FB80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 2620:74:36::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:58:96:3f:5c:da:58:5c:01:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=92a4c3c1-5e8b-4e8e-bb99-6fedebd73e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:01:92:c6:b1:16:29:57:45:bb:ed:35:de:
78:2b:e2:36:a4:32:d3:4a:84:78:12:8c:1e:04:16:
e6:94:a8:c5:ce:fe:8a:89:f9:7a:2b:87:2d:36:28:
61:c9:7d:a3:4c:31:99:f3:e9:5f:40:e2:8a:95:cf:
5d:82:c1:05:ce:d7:78:74:03:53:b3:c5:09:fb:50:
06:9e:88:3a:22:7d:fc:32:a8:f3:34:aa:94:41:b9:
82:1e:1b:9e:96:a7:e3:f4:ee:cf:ac:91:5d:e3:66:
42:90:86:2b:71:91:85:11:23:1b:ba:75:40:3d:c0:
8c:73:3a:95:01:0e:3b:d9:4f:51:32:27:b0:8d:6b:
97:20:bc:8f:14:41:ec:5a:3d:f5:76:99:96:63:dd:
f0:45:f8:ee:cc:3b:f7:66:2e:02:b4:0d:61:08:54:
9c:77:30:38:f9:9d:a8:87:88:ef:04:89:08:0d:36:
03:ee:b7:51:2e:d0:7a:9f:55:d3:6d:da:77:22:3d:
78:87:ba:d3:4d:60:02:19:24:bc:a2:63:72:c5:b1:
ba:e1:3a:0c:5c:45:d4:41:20:f2:77:cc:6f:f0:c4:
04:1d:74:42:6b:9c:66:fe:03:84:78:32:18:9f:d1:
7a:eb:9e:a4:b4:d2:25:37:94:d8:75:9b:76:8f:aa:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7E:57:F1:43:6A:9B:C3:26:CD:93:91:8C:A5:D0:C3:65:14:28:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eda59871-a0dc-3ed0-824a-0ce4665f8984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:36::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c7:4d:53:77:e8:e5:c9:5b:2f:b2:51:76:67:ef:aa:5b:ed:
a1:71:43:d1:42:9f:b9:0d:20:a9:38:a6:13:45:70:16:3f:2d:
bd:90:44:cc:f4:09:e2:19:d2:7a:f0:45:c7:e2:c0:8b:c3:8a:
7d:ea:5e:78:5f:bf:3f:cc:e2:0e:53:49:5a:71:33:fe:07:70:
07:a2:5c:e4:92:64:f6:63:69:fa:f8:6a:3e:5f:73:ba:4b:e3:
36:34:7b:7a:56:be:20:1f:6f:a2:ab:3c:16:10:8b:cc:d6:a2:
d6:44:30:eb:f1:6e:c3:14:a5:b3:a8:33:20:ba:f8:30:0d:b2:
c6:a1:04:6d:d8:67:94:1e:62:a6:b0:88:40:ec:b3:2c:6c:67:
29:66:71:26:e9:aa:bc:f4:88:bf:9c:6e:3f:e1:6d:4f:cb:e3:
3a:ac:5f:88:18:11:fb:fc:c9:01:cd:58:ca:c4:b6:ce:cc:16:
88:c3:33:bd:e3:3c:19:be:e1:a1:ba:b2:5a:22:9f:08:13:07:
f4:a3:19:22:7b:ab:8a:11:f6:a0:7b:c0:c6:1a:d6:02:c7:aa:
c4:a2:45:84:1a:4a:83:2e:e5:8f:ad:d2:65:9d:63:96:73:eb:
dc:df:f3:c4:51:21:65:38:f7:88:7c:24:93:55:e7:46:93:fc:
af:23:80:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:17 2025 by rpki-client