Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa
File: 3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa (raw, json)
Hash identifier: jOGkxcX0YR68PQtSFbT/YKqXLWPZnJcytniG4zChly0=
Subject key identifier: E3:AF:F0:CD:06:D5:D0:12:6E:70:A2:39:0C:D2:97:00:F6:4E:E8:E5
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858488280A6A1BCE53813940958C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 396560
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:a6:a1:bc:e5:38:13:94:09:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=5dfaf7b7-d636-4946-93a8-ea436bd0e44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:3c:91:9f:a6:0c:f5:74:33:f9:d4:a1:07:
8a:2d:86:f7:1b:f5:ae:04:da:03:3d:38:f0:d2:71:
8a:a4:7b:77:93:bc:d0:b1:d0:58:3d:9f:7e:c1:45:
2e:b0:43:d6:f7:a7:26:23:1d:21:54:d4:a0:8f:37:
f7:77:d8:ec:32:49:0e:db:04:91:0f:5c:f1:8f:4e:
eb:2c:5a:aa:48:e0:f7:8a:d6:72:32:c8:ff:05:cb:
d2:14:de:38:ce:3e:a0:a8:7a:84:78:43:cd:36:17:
11:1d:52:fd:d8:71:55:70:fe:f1:8c:65:43:9f:c5:
b0:c0:a4:20:7f:dd:07:89:d5:01:67:85:b4:f1:f6:
34:9d:8e:d7:fe:f0:a6:43:e6:69:bf:55:1b:7a:3f:
18:38:47:4a:f7:89:63:dd:3b:67:3e:a2:13:89:ec:
f3:5c:a6:0e:fc:47:78:6f:6c:b5:2c:02:79:2a:2e:
67:8a:28:ba:a2:dd:ca:1f:18:7f:dd:57:98:ea:53:
41:89:46:62:64:9f:19:3d:09:45:32:30:b2:92:e8:
42:e5:c5:2b:8d:f6:fe:7a:92:bf:87:09:71:c8:1a:
5f:f1:37:54:57:cd:86:72:08:ad:17:99:2a:45:39:
3d:88:0f:91:3e:22:7d:61:da:59:4c:ae:73:29:a8:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:F0:CD:06:D5:D0:12:6E:70:A2:39:0C:D2:97:00:F6:4E:E8:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:07:f6:a8:d3:56:1e:20:d3:3a:3f:ee:7d:bc:e8:e3:83:1e:
cb:31:71:1f:82:c1:2b:eb:a6:a4:02:dd:d4:84:66:a2:1e:6d:
ce:6d:77:de:32:b1:f7:66:e7:af:fd:85:5c:8f:c8:96:98:e4:
ca:13:9b:95:07:cf:f5:ce:dc:80:8e:4d:4c:31:a1:62:8a:61:
b3:d5:3f:53:19:8f:5d:24:0d:9d:b7:50:76:b1:db:1d:eb:8d:
5a:48:d8:7d:71:6d:b4:7d:6f:dc:24:0b:ed:a6:e9:91:92:2d:
c1:08:39:1a:fb:e4:5c:43:15:8f:3c:71:a1:4f:9e:04:32:ce:
68:8a:67:7b:e3:3a:b2:06:fd:c9:71:a0:17:be:e9:29:79:6b:
f2:da:b0:4c:98:a0:98:0c:49:35:2f:15:ff:fa:87:c6:9d:7d:
56:4d:d4:6a:71:d3:77:24:a7:60:72:0a:c2:a2:83:9d:8c:d0:
15:a2:95:38:af:f8:03:68:00:94:5c:df:46:3b:cb:92:80:25:
cc:03:a2:83:1f:1c:67:2e:60:1c:17:fd:2d:f7:c0:8a:f9:cd:
45:e7:c7:77:3c:f4:5f:00:dc:da:b5:97:73:f2:96:0e:9d:2f:
d7:f0:34:6d:db:83:b0:a5:68:c7:4c:f0:20:76:ec:0d:e5:d0:
ea:ef:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:20 2025 by rpki-client