Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa
File: 3ab73f9d-44f7-3713-aada-20aa6abfe251.roa (raw, json)
Hash identifier: cE6OdxaW/YXRorVLa3H+1tPumzaSTeji+K5S4WN1JOc=
Subject key identifier: 1A:7D:D6:31:79:C2:C4:E7:AD:AB:F3:D2:44:C7:B4:24:00:55:90:72
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848F92688455BE03D217C18F000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397205
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:88:45:5b:e0:3d:21:7c:18:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=86481209-75d3-4f36-82db-5452595e9e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:86:4f:5e:ed:66:71:bd:de:9c:32:99:41:e5:
1f:bc:70:5f:43:37:e5:67:7f:55:99:09:d2:a2:2f:
f1:62:1e:49:44:01:c2:f0:9f:ab:99:51:46:45:b9:
57:1b:a0:e7:c4:51:11:4c:0e:44:47:6a:33:7a:af:
d2:d9:33:f4:52:32:ba:46:63:f8:0a:97:d8:ef:6a:
1e:82:ed:38:f9:55:53:f8:bb:d1:9e:91:ff:b1:8f:
9e:a4:3c:ed:8e:4e:77:14:2a:6b:af:84:bc:f2:fe:
c8:5d:eb:92:2a:d5:ae:b8:96:fb:59:b0:c3:0c:6a:
ba:8a:ab:ad:30:27:1e:83:22:d3:ec:f9:ae:3e:85:
18:60:f6:fe:9c:10:cb:13:d1:67:68:2b:50:00:1c:
19:a3:cb:49:91:93:b9:07:95:a4:0a:45:63:51:26:
7c:fb:05:ae:8d:de:66:1b:06:7f:da:21:73:88:b1:
a1:45:00:22:31:07:37:3c:87:8a:9a:eb:a2:7a:de:
27:66:d7:be:83:ed:e6:c9:63:9b:fa:d1:00:92:a9:
94:ff:92:e0:7a:26:01:9b:ae:05:a4:90:9e:bd:48:
92:a9:91:95:18:68:98:e1:9f:67:d2:7b:53:56:57:
e6:d6:5b:6a:05:f2:b0:ec:7c:bd:2f:b8:d0:61:f5:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:D6:31:79:C2:C4:E7:AD:AB:F3:D2:44:C7:B4:24:00:55:90:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:47:7b:e0:fc:d4:ce:34:43:da:a2:99:d6:5e:aa:eb:94:6f:
4b:36:db:21:15:90:ff:95:29:cf:fb:3b:76:92:48:ef:2f:17:
c4:d3:ca:8d:6d:79:11:b9:44:56:db:a0:2d:f3:e9:52:52:2a:
99:e5:a6:75:b8:00:68:e2:c3:d8:cb:5f:50:66:c3:95:6f:09:
6b:32:27:c0:b3:bc:0c:93:5e:60:69:1b:5d:cb:af:5f:0c:f1:
29:f1:ff:9b:02:30:7f:05:94:ba:1f:7d:c4:aa:41:8a:8c:be:
ae:b7:68:aa:12:f9:de:49:f4:7a:da:a6:55:8d:3d:b4:b5:b2:
f3:7f:28:d4:1d:0b:de:f8:b3:65:43:b3:39:46:5b:8b:f3:52:
4e:e5:c9:8c:b2:82:77:30:02:af:20:73:bf:5b:92:e7:53:57:
d8:df:1f:06:5e:bb:bc:b6:4e:f5:df:bd:c3:48:8a:f3:f3:fd:
70:e4:a5:2f:92:ba:cc:88:05:ad:5a:09:a3:dc:92:c0:b9:03:
6a:a3:fd:71:20:78:93:39:64:09:1d:e6:dc:d3:12:5c:5b:3e:
ca:dc:4d:83:3a:7f:00:d6:0f:22:67:51:8a:5f:3f:33:0a:43:
61:a2:24:83:db:84:a3:74:5f:f1:85:17:03:ff:33:61:04:60:
28:28:0b:d7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JohFW+A9IXwY8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ODY0ODEyMDktNzVkMy00ZjM2LTgyZGItNTQ1MjU5NWU5ZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYZPXu1mcb3enDKZQeUfvHBfQzflZ39VmQnS
oi/xYh5JRAHC8J+rmVFGRblXG6DnxFERTA5ER2ozeq/S2TP0UjK6RmP4CpfY72oe
gu04+VVT+LvRnpH/sY+epDztjk53FCprr4S88v7IXeuSKtWuuJb7WbDDDGq6iqut
MCcegyLT7PmuPoUYYPb+nBDLE9FnaCtQABwZo8tJkZO5B5WkCkVjUSZ8+wWujd5m
GwZ/2iFziLGhRQAiMQc3PIeKmuuiet4nZte+g+3myWOb+tEAkqmU/5LgeiYBm64F
pJCevUiSqZGVGGiY4Z9n0ntTVlfm1ltqBfKw7Hy9L7jQYfVuaQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBp91jF5wsTnravz0kTHtCQAVZByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FiNzNmOWQtNDRmNy0z
NzEzLWFhZGEtMjBhYTZhYmZlMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBUR3vg/NTONEPaopnWXqrrlG9LNtshFZD/lSnP
+zt2kkjvLxfE08qNbXkRuURW26At8+lSUiqZ5aZ1uABo4sPYy19QZsOVbwlrMifA
s7wMk15gaRtdy69fDPEp8f+bAjB/BZS6H33EqkGKjL6ut2iqEvneSfR62qZVjT20
tbLzfyjUHQve+LNlQ7M5RluL81JO5cmMsoJ3MAKvIHO/W5LnU1fY3x8GXru8tk71
373DSIrz8/1w5KUvkrrMiAWtWgmj3JLAuQNqo/1xIHiTOWQJHebc0xJcWz7K3E2D
On8A1g8iZ1GKXz8zCkNhoiSD24SjdF/xhRcD/zNhBGAoKAvX
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:30 2025 by rpki-client