Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14879e6d-1335-3c93-aff6-bf7c7563697f.roa
File: 14879e6d-1335-3c93-aff6-bf7c7563697f.roa (raw, json)
Hash identifier: y4ZVqssawHiy9B4D4tjZ/rALzP8sHuE/daeMZdhLgM8=
Subject key identifier: 5E:8F:77:8E:8F:FE:D6:D7:7D:89:43:16:28:85:E9:0D:C3:C9:D4:68
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858494CC94C3EC8DAF30C2BAC3F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14879e6d-1335-3c93-aff6-bf7c7563697f.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 2620:74:48::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4c:3e:c8:da:f3:0c:2b:ac:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=1c8a4c86-bcc2-456c-b143-b7c44984eb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f8:26:1d:c0:12:6c:3c:20:aa:81:25:a5:e8:
3f:e8:93:9b:30:bb:01:fe:64:c5:fa:3c:08:4e:e8:
b8:40:19:19:b0:91:c8:01:50:31:43:a6:10:13:34:
25:87:59:73:ec:88:53:38:61:aa:e9:99:2e:a9:aa:
5a:be:f4:a8:a3:a4:e7:5f:f6:8d:3d:6b:a4:aa:e3:
f8:46:31:ac:a0:4f:b6:0b:20:da:77:27:90:11:62:
32:a3:bd:30:22:5b:11:75:ac:16:66:25:32:b4:21:
d4:46:ae:46:77:57:b3:b1:ed:04:d4:cf:5a:d0:14:
a8:1a:7e:e4:bc:69:31:0b:15:d1:2d:cd:7a:ba:0a:
0c:48:e5:22:48:0e:c5:d2:a3:a2:25:5e:53:e0:87:
2e:12:e0:42:e3:c1:98:d5:43:9a:7f:07:ec:ff:f3:
f7:83:54:8b:43:d8:02:bd:c8:12:15:d2:a1:41:14:
23:f3:2c:72:0b:02:c4:fb:4a:57:05:03:cf:7e:67:
e5:c4:6c:dc:85:86:03:af:c6:5a:48:54:01:6e:09:
65:2a:ad:22:ae:9a:6d:55:db:1d:75:53:e7:a4:46:
1c:1e:00:5b:52:6b:f1:01:87:ae:ba:3b:c1:d5:3a:
2f:e9:03:66:7a:27:f9:4d:f1:35:1e:3a:d5:8d:63:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:77:8E:8F:FE:D6:D7:7D:89:43:16:28:85:E9:0D:C3:C9:D4:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14879e6d-1335-3c93-aff6-bf7c7563697f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:48::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:1d:4a:94:9b:43:53:4e:df:57:cd:69:b5:d6:f3:6c:27:23:
c0:14:aa:40:3a:b4:f0:97:7c:8b:49:68:2e:e8:75:a8:87:6b:
71:ff:a7:0f:49:cd:24:6a:93:c2:eb:6c:0c:fe:37:14:09:be:
56:d0:dd:67:e8:93:8b:03:9d:d6:95:ce:95:b8:8f:13:b7:dc:
97:98:31:d5:de:51:71:95:be:6c:35:c7:58:08:ae:40:b8:9c:
16:b0:2c:ca:56:2b:c5:24:3c:91:e4:dd:10:de:3f:77:4d:39:
ab:97:b8:fa:81:b8:41:ba:d8:80:c9:98:cc:7f:6c:cd:02:95:
eb:4a:d5:d7:05:7f:20:7d:57:17:22:8c:a1:cc:29:19:dc:ca:
19:2b:7f:81:25:48:05:25:65:35:4a:72:af:3e:e1:e3:54:66:
85:35:13:fd:52:37:96:41:4b:60:b7:b2:4e:c9:9c:42:65:29:
fc:7b:c7:b5:0e:2b:f7:0f:bc:1a:95:bd:25:91:83:83:e6:bb:
bd:96:c9:c3:42:a3:3d:f1:f5:b9:cf:63:13:c1:4c:87:a4:b8:
2b:07:28:64:06:71:e3:81:4b:23:cd:45:50:82:0a:f2:52:49:
59:3c:2c:c8:b1:3c:18:89:84:dc:95:77:b6:88:f6:83:68:4b:
a2:bf:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:57 2025 by rpki-client