Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d99b6e0-0240-38d5-b8e5-ac0435ec5a49.roa
File: 0d99b6e0-0240-38d5-b8e5-ac0435ec5a49.roa (raw, json)
Hash identifier: 8Mk3oleR2OwX5Ak1IprslOBeTMT2THpbq00QDbHjHHc=
Subject key identifier: AC:53:E7:A0:A1:6C:AD:B2:6F:82:A2:19:E3:77:4A:DA:21:3B:AE:BB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D21110E8788EF0218E5742A8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d99b6e0-0240-38d5-b8e5-ac0435ec5a49.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 36628
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:10:e8:78:8e:f0:21:8e:57:42:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=21cd0583-a704-40b0-88ab-360f474b06ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:05:7f:4c:d0:e5:7d:6d:22:23:71:fc:bc:
56:3e:6e:4c:c2:04:99:4b:1c:02:9c:f6:3e:e1:80:
40:28:80:a0:93:a9:72:c3:19:2c:42:9e:2b:ad:89:
12:53:bb:65:31:3b:e9:ed:ae:68:6d:9b:83:d9:12:
52:53:ff:e3:8a:6b:e2:28:a5:4f:d8:8b:90:c6:be:
3b:3b:d3:d6:0a:b9:e8:ec:86:3f:ce:ec:47:f0:f2:
c9:98:f6:97:c5:14:76:02:f8:de:50:52:4b:6e:33:
0a:c1:b4:68:c6:f7:d1:62:a6:6f:7a:aa:e0:23:bd:
51:85:71:a6:2c:5c:65:9e:45:46:0b:ae:da:4b:e8:
ef:67:5a:2c:76:df:c5:c3:f6:df:06:5f:a7:18:29:
14:66:46:d8:63:8b:2c:4f:68:19:e3:b1:89:40:db:
51:a6:e7:00:2d:9c:1e:b6:f2:4a:1d:71:58:ec:bf:
06:aa:d2:95:32:96:73:fd:b7:0f:68:b2:f7:48:c3:
27:1e:e4:b2:4d:f9:5b:a5:b4:a3:33:97:c0:a2:53:
f4:34:cf:da:ef:9b:65:37:b1:3b:85:62:8e:b9:fd:
54:d7:5b:26:eb:99:35:83:0c:db:c3:d0:6a:97:0f:
a3:87:53:eb:63:64:8f:ae:4c:25:36:8d:78:68:80:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:E7:A0:A1:6C:AD:B2:6F:82:A2:19:E3:77:4A:DA:21:3B:AE:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d99b6e0-0240-38d5-b8e5-ac0435ec5a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:1e:a6:a0:4a:e4:f5:1e:70:46:78:96:e4:a1:7b:e4:8a:c0:
ec:23:2d:55:a9:a0:85:2e:fe:8f:91:89:20:87:80:9c:c6:72:
95:9e:23:09:b2:16:ee:14:6d:62:6f:8f:a6:36:0f:2b:1f:fe:
cd:49:52:b5:5a:cb:f6:6f:be:d8:f0:b0:b1:f7:d9:af:a8:45:
34:fc:ab:2c:3e:c0:20:8f:9e:e0:3f:55:21:58:5f:66:e9:36:
c6:98:71:59:7c:20:52:8b:be:77:fd:97:fb:be:1e:c5:9d:fe:
d2:19:b2:44:a9:30:2e:14:19:d7:8e:18:9c:34:35:78:f9:ec:
11:7f:ec:15:45:81:a4:b3:ef:3b:96:ac:68:01:5b:46:53:b3:
dd:e7:94:ec:69:b3:e4:0e:7d:7a:7e:ca:24:8f:71:2b:f4:77:
cb:77:27:2f:3a:b3:f6:ec:8e:e5:3f:f0:75:6d:ef:1c:08:9b:
e8:f0:3e:85:4f:9d:bb:c2:c9:ed:bb:16:36:5e:72:22:23:0f:
94:3d:1e:e9:36:a2:cc:3c:f1:a6:56:17:79:72:aa:bc:54:8d:
17:71:0c:1e:b5:de:d3:ba:11:10:f0:6b:c7:95:4e:db:2c:d3:
b1:6d:9b:26:51:e4:ba:d2:22:9d:8a:dd:42:31:7b:65:84:43:
07:53:c7:09
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSERDoeI7wIY5XQqgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MjFjZDA1ODMtYTcwNC00MGIwLTg4YWItMzYwZjQ3NGIwNmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+4Ff0zQ5X1tIiNx/LxWPm5MwgSZSxwCnPY+
4YBAKICgk6lywxksQp4rrYkSU7tlMTvp7a5obZuD2RJSU//jimviKKVP2IuQxr47
O9PWCrno7IY/zuxH8PLJmPaXxRR2AvjeUFJLbjMKwbRoxvfRYqZveqrgI71RhXGm
LFxlnkVGC67aS+jvZ1osdt/Fw/bfBl+nGCkUZkbYY4ssT2gZ47GJQNtRpucALZwe
tvJKHXFY7L8GqtKVMpZz/bcPaLL3SMMnHuSyTflbpbSjM5fAolP0NM/a75tlN7E7
hWKOuf1U11sm65k1gwzbw9Bqlw+jh1PrY2SPrkwlNo14aIA8pQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKxT56ChbK2yb4KiGeN3StohO667MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQ5OWI2ZTAtMDI0MC0z
OGQ1LWI4ZTUtYWMwNDM1ZWM1YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBjHqagSuT1HnBGeJbkoXvkisDsIy1VqaCFLv6P
kYkgh4CcxnKVniMJshbuFG1ib4+mNg8rH/7NSVK1Wsv2b77Y8LCx99mvqEU0/Kss
PsAgj57gP1UhWF9m6TbGmHFZfCBSi753/Zf7vh7Fnf7SGbJEqTAuFBnXjhicNDV4
+ewRf+wVRYGks+87lqxoAVtGU7Pd55TsabPkDn16fsokj3Er9HfLdycvOrP27I7l
P/B1be8cCJvo8D6FT527wsntuxY2XnIiIw+UPR7pNqLMPPGmVhd5cqq8VI0XcQwe
td7TuhEQ8GvHlU7bLNOxbZsmUeS60iKdit1CMXtlhEMHU8cJ
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:46 2025 by rpki-client