Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa
File: 1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa (raw, json)
Hash identifier: g/kqkQ/M2tAi2DSjjG+WTprCYdD1f7Gkii1nxU/MvlQ=
Subject key identifier: 32:51:C3:4C:3A:06:F6:46:BF:37:C3:77:10:78:FD:66:C5:E2:BE:90
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110B0ADB35E3B278A1C640
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396595
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0b:0a:db:35:e3:b2:78:a1:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=4ec66e5e-6a06-47c3-9d7c-0923ca78fff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:2d:26:3e:4f:c0:a7:fb:23:d1:61:bf:95:
e4:6d:d4:8e:98:6a:7d:d9:3c:64:0b:09:f2:8c:da:
8d:d7:9b:32:c9:bf:99:f8:59:59:d7:38:d4:78:be:
a6:5b:84:64:ee:8b:97:90:5d:75:bb:c0:39:79:e2:
c6:b9:d5:21:29:12:82:77:9e:f1:5d:a7:b5:31:e3:
5a:54:b8:79:69:e3:f9:09:4f:74:ee:82:49:0d:f7:
c1:88:67:0e:c2:55:88:a1:3d:ec:09:2f:9f:cc:f3:
23:c6:b6:e5:3d:8b:2c:d2:9c:ef:c7:fc:4c:e3:87:
8f:ca:b0:94:79:e0:80:66:d4:67:d3:12:fd:40:50:
32:a2:06:dd:13:f6:42:47:14:1e:ed:fe:95:91:0e:
2a:f0:50:5a:59:eb:d9:d7:4f:01:d2:59:b0:a3:bb:
cb:e8:24:ca:f0:e4:ff:43:88:b8:98:8c:9b:1b:05:
c9:31:63:5d:df:3f:b5:2d:b7:d1:a3:f2:31:99:b2:
a3:d4:a2:e6:8c:05:d8:a9:52:5a:e1:d2:4f:2b:d1:
b7:f2:e1:94:fc:2f:df:dc:22:6b:c4:40:f7:fd:95:
92:44:a3:4b:88:22:dd:ee:3d:c6:b0:aa:3e:11:a3:
de:82:22:99:4a:15:62:a2:5c:5f:c2:86:be:7f:bc:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:C3:4C:3A:06:F6:46:BF:37:C3:77:10:78:FD:66:C5:E2:BE:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:18:06:f5:34:3c:4f:f9:af:c1:81:71:58:4e:4e:e2:f3:01:
6b:c6:1d:15:10:81:30:ee:3b:45:bf:f1:0f:0a:11:fe:56:d6:
74:aa:13:cd:9f:3f:61:40:a4:80:97:5a:98:38:46:d3:a0:af:
3a:82:b0:2e:1a:74:a6:89:8d:98:83:44:c4:22:7c:44:e0:d9:
bd:4e:56:ee:30:7a:8c:e8:82:00:a7:e9:2c:74:8b:20:a3:77:
6b:15:f4:51:72:92:46:6b:cb:76:04:79:9a:99:89:2e:a9:ad:
9e:70:6d:f5:ab:55:46:3c:27:c3:e4:ec:f7:83:25:0c:bf:ad:
97:ca:18:a8:f1:60:fa:9d:e3:2c:76:3d:34:2b:04:73:24:c0:
c5:56:b5:51:3a:86:bc:7a:0b:a8:fe:ac:19:97:ea:fb:eb:c1:
df:d0:89:18:8d:a6:6f:ba:e7:0e:0f:26:87:74:eb:a9:2d:ae:
12:b8:7b:0d:f8:03:f6:1c:1d:a7:a7:fb:56:df:40:0c:35:6c:
93:e4:12:c9:d2:ed:27:50:ac:39:5a:b7:f2:c3:18:20:30:10:
a9:49:83:c5:f2:98:19:70:fe:fe:ff:32:70:fd:54:86:b3:ca:
bc:8c:3f:7f:2e:16:fc:bd:db:fd:40:3c:e4:a0:6d:93:c4:3c:
12:17:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:22 2025 by rpki-client