Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4059d5-1f4a-39f3-8de5-3195440c432d.roa
File: 4e4059d5-1f4a-39f3-8de5-3195440c432d.roa (raw, json)
Hash identifier: gYgYRNaYPd9ewUs5CttjyJBnOf9ZbEreYICBXWyEp84=
Subject key identifier: 70:F6:62:A3:AD:41:77:D1:1A:A4:0A:77:13:DD:49:88:3E:07:B9:6D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F00293C5398B1BA71BE500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4059d5-1f4a-39f3-8de5-3195440c432d.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397229
IP address blocks: 2620:74:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:02:93:c5:39:8b:1b:a7:1b:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b11efc1b-edd0-4c46-816d-fb6d5ba1033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:4f:61:8e:09:fb:91:ea:3d:8b:48:b2:3d:
0c:72:c6:96:02:75:b1:73:27:a7:ca:47:eb:5f:71:
9b:8a:b7:e2:22:42:01:62:17:a1:04:92:22:53:b5:
03:70:00:b0:81:1e:2a:1a:f8:50:4d:5d:85:64:63:
c3:fe:09:a5:b8:c5:b5:2b:e8:f3:4b:a5:77:f6:a9:
8b:b6:6b:3c:61:05:e5:01:71:0c:79:d7:19:ed:d5:
71:21:1f:75:cf:13:8d:f5:23:27:04:be:eb:88:6b:
83:3f:71:91:51:15:76:b4:01:7e:73:8d:32:33:e6:
69:26:51:b5:9d:38:e7:14:a7:c4:cd:dd:34:42:8b:
3c:23:ee:dd:9f:14:a1:62:1d:96:08:b8:d2:69:35:
c7:37:00:c0:4d:9c:c3:ca:e5:b5:1c:db:6e:68:8b:
de:f8:40:85:60:55:c3:2a:14:a5:81:20:1a:30:e7:
84:fc:ef:fe:f6:5c:9d:08:e7:ef:6e:f6:78:73:cf:
11:44:a2:93:1a:32:7f:2d:dd:2a:47:00:8e:46:f4:
20:10:f6:5b:58:91:9a:2c:9a:1b:e6:dc:3f:04:3a:
b5:50:8e:0c:ca:a8:a3:50:06:d3:c0:1a:fa:54:c8:
e9:03:6d:82:2f:da:bb:ca:83:b0:85:a7:e0:dd:8e:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:62:A3:AD:41:77:D1:1A:A4:0A:77:13:DD:49:88:3E:07:B9:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4059d5-1f4a-39f3-8de5-3195440c432d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:40:ba:83:0f:49:c9:e2:a8:d1:35:1b:e6:09:1e:55:36:b0:
a4:f0:d9:96:0d:e2:7b:5c:39:d4:04:5e:76:17:04:34:15:49:
fe:6d:37:e8:b0:93:ba:b9:26:00:d0:be:96:8c:9a:51:ed:6c:
c0:c5:74:b6:5d:45:aa:ea:f6:72:c4:ac:96:b8:3b:d4:bb:83:
13:3b:03:a5:b8:38:c4:1e:d2:b4:30:0f:22:fb:47:bd:58:19:
3d:59:12:94:53:82:9d:f7:08:4f:4a:a0:86:cb:97:c5:a8:55:
30:ee:43:4c:84:7d:b4:2c:c6:2e:62:bc:d1:5a:fd:b8:35:de:
d8:9c:15:de:17:e8:8d:4e:16:27:18:0e:e5:17:54:f2:01:f6:
cd:94:5d:06:a8:82:70:da:d3:5f:79:19:f2:e7:67:9a:64:3d:
05:44:67:45:8c:a9:1c:a4:23:75:31:4b:95:bf:e8:3a:10:3c:
6b:12:65:d8:c4:2d:bb:51:2e:fa:a6:6d:50:8a:2c:48:de:fc:
a3:7a:37:9e:03:70:1c:96:97:7d:12:03:88:0a:3f:58:76:2f:
84:9f:d6:a7:d7:3a:a9:ba:40:77:a2:7d:3e:0f:ac:f5:23:51:
85:4c:8f:4d:02:51:48:c0:a9:3f:57:6f:a1:a6:e2:f0:d5:75:
28:cb:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:50:04 2025 by rpki-client