Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa
File: 38a85f41-7d00-368f-a88b-da675a578c44.roa (raw, json)
Hash identifier: NvkojDMpYtlMMmT7BUAHCYwjNaHvG3qt04tskVcP2o8=
Subject key identifier: D1:D9:C4:FA:19:54:BE:A3:B8:55:56:16:46:26:0D:80:AD:BE:03:67
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D21116F66201E3C9D1563B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396565
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:16:f6:62:01:e3:c9:d1:56:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=4995de7b-f107-470d-92b7-c466b996b203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:38:18:31:38:6b:dd:dd:e9:7a:41:50:a2:
96:29:7a:4e:29:3e:80:cf:69:8b:71:bf:d5:a0:0e:
e5:b6:4b:c8:1f:f0:1f:43:1f:5f:c9:32:eb:65:1e:
24:e9:69:fc:6d:d4:9e:44:28:7d:0f:d9:8b:f3:c4:
7f:39:5a:3c:a0:dd:12:9b:21:b3:35:92:90:39:8b:
25:c4:2e:12:aa:e2:13:bd:5f:5d:67:bb:2d:3c:03:
0c:e2:8f:8b:2a:ef:7e:73:fc:f2:50:51:62:76:17:
57:37:aa:ac:8b:46:0c:9f:86:68:9f:22:43:00:87:
21:95:09:db:16:44:cd:9c:f1:d4:11:9c:56:cc:c6:
2b:a3:6e:60:4f:13:87:23:b6:f1:3b:2a:f2:23:54:
ec:59:ec:b0:60:dc:60:af:05:b0:4b:87:fb:7e:94:
16:80:7e:59:6c:d5:c4:eb:5b:7f:f7:f8:bd:17:8d:
ee:2c:2e:3d:26:0f:bc:c4:41:18:b3:33:6f:7c:1c:
83:e5:b4:17:1c:60:1c:20:c9:1e:32:2d:50:5f:41:
1d:4f:96:98:33:9c:19:63:a1:01:ca:e0:c1:a9:9d:
fa:61:45:20:81:97:c6:ed:7b:e5:d0:26:bd:74:06:
f2:ff:51:4a:58:0e:e8:ac:28:51:27:74:f0:8b:3b:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:C4:FA:19:54:BE:A3:B8:55:56:16:46:26:0D:80:AD:BE:03:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:4c:a7:7d:21:83:f8:b5:b1:b0:0b:b2:cc:4d:72:c6:c6:88:
a8:c2:9b:ba:46:3e:7d:11:c6:b7:e4:18:96:2b:49:64:07:d6:
f6:74:64:a0:56:7f:b2:25:6d:d8:fa:2c:08:40:92:3d:da:f9:
cf:c5:bb:53:21:18:79:b3:d3:09:90:cc:1a:27:71:3a:a6:91:
6d:67:22:bc:c4:8d:6d:1b:78:e3:cd:d1:2d:9c:d1:af:9c:22:
e9:2b:0c:c9:cb:4c:34:91:85:19:2c:09:72:e7:9b:07:5f:06:
e4:56:a1:20:96:c8:ee:07:d7:24:60:bd:73:f1:e9:c6:a2:d1:
75:f5:1b:62:20:c0:03:09:90:ba:dd:4b:a3:90:56:18:cd:ac:
6f:43:6c:1b:66:69:c9:12:f9:ce:f7:05:5d:c2:35:00:9d:18:
9a:70:88:e0:c0:e6:01:2a:71:4a:a0:e2:02:22:ae:df:2b:f7:
14:54:59:69:6f:71:1d:e2:c0:58:d5:7d:f2:a1:c6:f7:19:d8:
20:18:b4:df:b3:7a:33:08:14:29:94:98:06:7a:26:c9:12:fb:
4c:58:9f:9a:3c:32:5c:21:e1:09:4f:59:77:c6:0a:e7:3a:dd:
db:3d:d2:c3:36:a3:d5:cf:3c:3f:85:19:95:54:b5:09:4e:0b:
c5:04:fb:33
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSERb2YgHjydFWO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NDk5NWRlN2ItZjEwNy00NzBkLTkyYjctYzQ2NmI5OTZiMjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f04GDE4a93d6XpBUKKWKXpOKT6Az2mLcb/V
oA7ltkvIH/AfQx9fyTLrZR4k6Wn8bdSeRCh9D9mL88R/OVo8oN0SmyGzNZKQOYsl
xC4SquITvV9dZ7stPAMM4o+LKu9+c/zyUFFidhdXN6qsi0YMn4ZonyJDAIchlQnb
FkTNnPHUEZxWzMYro25gTxOHI7bxOyryI1TsWeywYNxgrwWwS4f7fpQWgH5ZbNXE
61t/9/i9F43uLC49Jg+8xEEYszNvfByD5bQXHGAcIMkeMi1QX0EdT5aYM5wZY6EB
yuDBqZ36YUUggZfG7Xvl0Ca9dAby/1FKWA7orChRJ3Twizv7nQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNHZxPoZVL6juFVWFkYmDYCtvgNnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhhODVmNDEtN2QwMC0z
NjhmLWE4OGItZGE2NzVhNTc4YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA2TKd9IYP4tbGwC7LMTXLGxoiowpu6Rj59Eca3
5BiWK0lkB9b2dGSgVn+yJW3Y+iwIQJI92vnPxbtTIRh5s9MJkMwaJ3E6ppFtZyK8
xI1tG3jjzdEtnNGvnCLpKwzJy0w0kYUZLAly55sHXwbkVqEglsjuB9ckYL1z8enG
otF19RtiIMADCZC63UujkFYYzaxvQ2wbZmnJEvnO9wVdwjUAnRiacIjgwOYBKnFK
oOICIq7fK/cUVFlpb3Ed4sBY1X3yocb3GdggGLTfs3ozCBQplJgGeibJEvtMWJ+a
PDJcIeEJT1l3xgrnOt3bPdLDNqPVzzw/hRmVVLUJTgvFBPsz
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:19 2025 by rpki-client