Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa996cd9-ed0f-3f72-8e8d-c3b9efe08397.roa
File: fa996cd9-ed0f-3f72-8e8d-c3b9efe08397.roa (raw, json)
Hash identifier: IUH9HsfGV+InCsTtXMi8HZG8ayy9f/U3sNgNLkJjV9Q=
Subject key identifier: 4A:96:2C:DC:D7:72:ED:C0:36:6D:86:1F:0D:5C:51:BD:BE:22:60:76
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858488280A2261C3BC629B667BA40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa996cd9-ed0f-3f72-8e8d-c3b9efe08397.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 397208
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:a2:26:1c:3b:c6:29:b6:67:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=f4372b2b-368d-45d9-9857-7fff9b251026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:06:87:e1:a8:69:b0:23:24:6d:58:1f:70:
b9:ce:3a:a8:2e:f1:a2:7f:6c:19:5d:cc:bf:6d:f4:
ee:13:00:f9:43:17:64:c1:a0:7f:71:b8:7b:f9:c8:
28:2d:3b:f0:3b:c9:fe:17:81:f1:19:39:d8:bd:c9:
1c:d0:07:c0:12:47:80:da:47:b9:f4:1d:69:e5:bf:
be:35:08:de:c1:c0:c5:20:e1:03:b9:3e:ab:45:e9:
2b:75:cf:1b:77:9a:57:10:40:27:cf:0c:95:66:27:
b1:df:10:0c:2e:70:39:05:22:7f:90:bd:a9:5a:45:
2d:90:fc:d6:99:89:b6:4d:6f:33:e3:ea:61:a3:df:
f8:6e:25:29:c2:d3:17:b4:42:e7:ba:d3:8f:0e:00:
14:21:b9:ba:3e:9f:ec:67:c7:b1:7c:7d:25:d2:f5:
22:99:24:6d:32:8b:c7:4c:7b:db:22:e1:26:51:4b:
a6:e3:88:01:04:37:ca:dc:f6:b4:8e:50:c8:c8:49:
62:f7:9d:ef:95:30:dc:27:bf:20:63:e9:09:a6:29:
36:b3:51:52:3f:a4:65:12:5e:8e:27:4a:6f:ad:c1:
53:8d:43:c5:e6:3f:d2:e3:80:a4:90:59:8a:64:6b:
93:31:84:81:7b:7b:f6:79:7d:c3:23:28:06:da:fc:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:2C:DC:D7:72:ED:C0:36:6D:86:1F:0D:5C:51:BD:BE:22:60:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa996cd9-ed0f-3f72-8e8d-c3b9efe08397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4d:f8:f4:b1:8f:d6:9f:99:9c:6e:41:d9:4c:85:0d:7c:04:
49:15:59:58:47:9c:a3:1e:42:48:f0:d5:a5:e7:51:a4:f0:4c:
3d:ba:8e:46:fa:25:d7:92:6a:5d:25:4d:6e:2a:8f:41:b6:4b:
0a:b9:ea:25:94:14:a9:9a:e1:ea:99:25:89:16:c2:55:62:4d:
84:81:c3:1f:08:70:e1:de:ab:e4:88:16:99:b3:a2:30:5b:ac:
81:77:54:8c:d1:6c:be:74:36:05:6b:40:ec:5d:74:2d:ef:cf:
40:27:15:1a:76:78:f6:82:ee:70:58:21:29:10:8e:03:85:3a:
78:8d:53:3e:a0:04:da:da:47:cb:4a:93:1e:2a:13:c4:85:fd:
49:7a:be:c4:c4:da:99:ad:8e:21:1d:58:d5:8d:b1:1e:8d:14:
d0:7b:10:0d:2e:02:7c:ed:a8:16:54:31:b9:8a:7b:74:ca:f4:
a0:66:14:08:6c:87:f0:9d:c8:1c:4c:dd:16:c1:1b:2a:14:f7:
9c:17:1e:40:25:69:43:81:d8:bd:0a:dd:50:43:da:bb:5f:31:
a4:5e:91:bc:84:40:47:05:0a:b5:cc:ea:cd:e7:2c:5a:3f:a2:
af:ed:76:04:d1:57:b0:04:38:5c:22:8a:31:9f:ed:38:0c:6c:
27:9c:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:55:03 2025 by rpki-client