Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa
File: fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa (raw, json)
Hash identifier: VojrjV6MwQhgKkNitBNbJ+HLncRx+RnBbJm9GREvw6s=
Subject key identifier: 3E:73:9A:70:C1:61:F1:A6:36:13:C7:30:4E:C4:66:35:D8:24:5D:88
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D905816466F740923561C60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 2620:74:ae::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:58:16:46:6f:74:09:23:56:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=a01d57a7-fcff-48e8-8245-1feb279d7c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:85:68:ba:30:3b:65:c4:d3:71:0a:6f:5d:
91:c2:ca:60:8b:4a:aa:66:a2:51:ed:cd:0b:99:5f:
72:a4:4e:a1:93:d9:35:7c:21:0f:e3:66:33:00:ac:
fc:7d:ea:4d:65:09:23:4a:a0:2f:fd:54:86:ec:a3:
09:20:6c:24:fe:05:a7:67:1f:c1:c0:da:d0:09:ea:
2a:45:b5:17:29:ae:5a:0b:eb:20:4f:45:d9:bf:de:
1f:aa:8b:75:91:98:ed:fb:ec:02:89:32:c7:79:a8:
69:4b:6c:58:a1:a8:0f:6a:66:d0:9f:1d:3e:8b:e6:
ee:3a:0d:d7:20:d8:54:27:54:7b:52:46:6e:10:76:
ea:dc:4f:fc:5b:fc:f9:8f:d8:51:8f:c5:d6:40:3f:
99:54:38:a2:d3:c1:9d:e4:a9:3c:14:ca:b1:1a:83:
0b:22:8d:44:63:98:53:25:59:fb:3f:f7:6a:b6:dd:
1e:5e:62:36:49:cf:20:f9:e7:4f:bb:10:19:c8:1b:
db:22:d9:b4:b7:c8:b8:1d:f8:cd:a9:6f:c9:91:0f:
9d:6d:d3:3b:ff:cf:88:6a:bd:f1:23:d2:f9:7c:17:
79:a9:bf:7e:22:17:05:e7:ef:9a:15:74:df:08:ab:
0a:97:d7:23:04:cd:b5:81:d1:93:01:cf:76:a7:71:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:73:9A:70:C1:61:F1:A6:36:13:C7:30:4E:C4:66:35:D8:24:5D:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:ae::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:97:23:43:e8:52:6e:eb:76:10:e8:ba:0b:ff:19:43:70:0d:
b5:f9:12:77:62:ed:ae:a9:68:23:4a:a8:16:ab:f5:c3:a6:b8:
3e:f8:ec:b8:55:da:03:c6:b6:41:96:55:7e:51:3d:c7:b2:32:
ce:49:9f:33:c2:49:a7:e7:62:2f:bc:44:f7:94:3c:35:8d:f1:
a0:bd:b5:4e:7c:bc:8c:d6:f7:83:e8:da:8e:98:fc:cf:4c:e4:
54:05:45:1f:b3:cb:a5:03:e3:9a:6a:ad:96:b4:3d:f2:6e:2d:
3e:f1:69:1d:8b:98:bd:01:17:4d:5b:b8:91:9a:ce:25:39:4e:
1f:3e:b7:bf:9c:19:ba:17:c5:41:53:4f:c3:e5:5d:4f:ce:d3:
9e:9e:b4:05:df:6a:a8:07:e7:81:f6:92:96:67:56:7d:96:4c:
b5:95:61:6b:6c:7c:20:d8:89:bd:97:ba:d6:91:a2:2e:7b:e1:
ba:75:90:b9:44:2d:63:54:ed:3f:c1:cc:4b:64:27:45:3f:e1:
5b:7e:d2:fa:54:89:a4:2a:0b:74:3f:c5:fd:9f:ce:93:ad:65:
76:d5:58:68:e1:2a:39:34:24:81:22:38:42:4d:ef:d0:34:04:
7a:8b:05:d8:c6:cb:a0:f2:01:bb:92:b0:a4:c3:d3:ae:11:25:
5e:fb:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:24 2025 by rpki-client