Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4059d5-1f4a-39f3-8de5-3195440c432d.roa
File: 4e4059d5-1f4a-39f3-8de5-3195440c432d.roa (raw, json)
Hash identifier: GWoTtmFynOJp1kYC6Jg95Re2xoOaUkPMt+a+EA7glMg=
Subject key identifier: CD:3A:2E:5F:DB:3F:86:46:22:16:38:85:AB:8E:50:8B:B7:EF:6E:14
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849124712A2B0A19D0E40C86400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4059d5-1f4a-39f3-8de5-3195440c432d.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397229
IP address blocks: 2620:74:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:12:a2:b0:a1:9d:0e:40:c8:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a80cae66-bc07-4343-97e6-e228edbe8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:5f:4c:eb:4a:01:74:f3:f0:98:69:bf:ca:
a9:92:c7:6e:b9:7c:a8:f0:9b:43:e4:46:b1:60:b3:
71:a0:34:03:fb:37:88:ef:9f:6c:4e:b7:0f:c3:da:
d5:9a:a8:9b:d9:5a:39:0a:d4:b8:1b:b7:d8:85:ec:
3f:22:dc:68:01:48:42:26:d4:02:ee:cc:10:d5:4c:
4f:73:ae:01:47:b8:99:c8:d9:f9:5c:88:f1:6a:3d:
4f:c4:1b:f9:b8:49:e8:11:9a:df:87:18:68:38:29:
a3:77:d6:64:f7:da:15:3f:65:b7:d8:b1:d9:73:b5:
36:c9:98:e8:4d:b7:f7:27:1f:ef:09:24:4f:d9:64:
0b:79:01:b4:8a:d1:13:56:a2:47:a0:c7:e8:bc:db:
23:0e:c9:2f:b0:a6:6c:80:ff:3f:16:57:4f:20:5d:
93:91:1e:78:d2:56:33:7b:10:89:cc:85:8c:6a:6c:
6e:47:e6:f4:ab:17:46:18:05:6e:ed:42:57:69:3c:
16:b9:27:5c:34:3f:88:7a:ed:7c:12:53:af:1f:97:
54:35:e8:4b:42:62:70:3b:7a:ba:04:e4:7f:8d:3a:
1b:9d:25:17:c0:19:e9:ff:4e:57:62:9f:84:59:af:
cd:52:14:15:64:a4:32:49:17:33:d0:e4:86:12:28:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:2E:5F:DB:3F:86:46:22:16:38:85:AB:8E:50:8B:B7:EF:6E:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4059d5-1f4a-39f3-8de5-3195440c432d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:82:6a:21:ce:e2:a1:a4:d5:a7:96:25:be:a8:5d:c8:75:d2:
20:89:fb:bd:7a:1f:38:62:e5:c9:7c:4a:13:7d:ed:23:82:bd:
4d:76:28:78:cf:8a:5d:d4:58:48:b6:ce:fd:7a:f5:30:b4:63:
5d:3b:15:a8:5d:24:62:6d:8e:8e:d9:ef:9f:20:1f:4c:c0:32:
03:1c:56:88:51:c6:db:98:d0:ad:7c:02:99:62:82:07:1b:45:
37:c5:91:d5:27:a4:0b:90:c8:9b:da:2f:71:f6:1e:d3:94:64:
9b:c6:a4:3e:0a:4f:06:89:bf:af:5a:1d:aa:75:07:5c:31:19:
d5:7f:ea:2d:41:5e:6b:10:bb:5b:ad:d4:81:ee:40:10:35:9e:
f7:27:d3:db:37:d2:c4:85:e6:ca:4a:00:83:61:63:7c:6c:58:
ae:a1:39:bc:cd:46:99:21:6b:2e:e2:cf:22:a4:5f:18:59:db:
61:59:e5:4e:21:d6:1f:e0:e3:19:3e:0c:77:e1:25:e9:04:f6:
35:bc:b8:56:66:e6:aa:25:4e:ae:c0:a8:f6:54:b7:e2:7b:bb:
7f:e4:c0:ed:79:82:28:f5:2d:d8:3b:16:ad:34:25:d0:e6:85:
cc:93:57:71:b9:7c:41:dd:45:76:11:de:67:44:01:57:2b:f4:
71:68:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:42 2025 by rpki-client