Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa
File: 42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa (raw, json)
Hash identifier: DCs229sgep/m8P+vYJHGCwZOqshyKztrGn8bpufr828=
Subject key identifier: 8A:F4:F1:FD:84:69:9F:47:E1:42:5D:A0:1B:98:CA:D8:69:D7:D1:50
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285849194199277CB1532E02A6B080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 396564
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:99:27:7c:b1:53:2e:02:a6:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=ef8536cf-0a92-458c-8d33-9edfff0920b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:3e:11:74:2a:2e:fa:3c:a1:0a:2b:f8:e0:
3f:44:69:d7:f5:e4:a4:e7:83:d3:33:dc:c2:6a:89:
d8:a9:84:92:04:f7:50:85:af:32:98:e1:ec:5a:ab:
48:dc:9f:fd:c9:19:d5:a3:7c:f5:ef:43:b2:c1:a6:
b9:cc:ac:20:df:c4:bb:4f:ac:3c:85:8a:d7:40:40:
1c:bd:11:0f:9c:00:bd:58:34:66:05:8e:8e:8b:c2:
6a:27:6c:72:08:cc:c3:03:49:5c:73:1f:e5:bf:2a:
53:fb:7e:44:f6:c8:21:ad:90:a4:98:56:d8:a0:ba:
d3:e4:c8:c1:c5:bb:6a:3a:b6:fc:40:ed:24:ca:2c:
b9:88:47:61:7a:41:5d:68:e5:90:0d:b2:6b:a0:49:
50:60:aa:8b:1e:f8:ef:6c:0d:03:d0:f8:b4:04:bb:
c4:23:88:52:15:1b:8d:61:a4:ce:6a:aa:a1:07:7b:
ea:d4:e3:7b:21:87:26:97:f7:27:53:b3:80:6d:8a:
83:b5:10:3f:05:53:c5:e6:b8:2e:db:a6:9f:12:6e:
ab:96:b3:d3:bc:a4:d4:59:6c:96:45:c0:5e:c8:b9:
66:f7:0b:e9:21:3c:1d:78:a2:e1:82:ff:05:55:c9:
77:dc:7e:06:c4:e2:49:c1:00:16:14:1c:91:98:d4:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:F1:FD:84:69:9F:47:E1:42:5D:A0:1B:98:CA:D8:69:D7:D1:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:3a:cb:b3:f6:61:5b:3f:f4:f4:d6:ad:3c:9b:da:3c:d9:00:
a0:99:55:d3:e7:0f:96:c6:32:0b:7c:06:12:dc:53:a9:38:67:
41:2a:cc:39:b5:45:5f:30:e1:ef:72:7d:23:89:78:3f:92:b2:
6a:51:a0:3e:98:78:1b:e6:97:86:ac:fc:33:2c:01:8b:e1:b2:
3d:e5:e6:6e:d6:30:65:33:9e:9b:16:2b:e9:64:b6:7b:94:79:
30:c2:c4:f9:3e:c1:a3:1a:90:6b:0b:7e:38:d8:d6:a2:63:93:
64:1f:89:95:d1:9f:44:c6:eb:dd:78:df:62:06:40:f7:d1:d6:
52:f9:04:ff:23:d0:0d:c5:f2:d4:d5:8c:88:bf:15:a4:7c:8d:
96:48:85:c5:cd:f4:32:bd:4e:26:aa:91:44:94:01:59:62:7f:
11:64:a0:af:f4:2d:5e:22:70:ed:22:ff:85:09:9a:14:3a:8d:
08:fb:f6:7b:25:a6:dd:ab:b1:ce:74:59:44:94:51:d8:7f:88:
bb:54:d9:1a:d4:bb:a7:3b:96:29:99:18:05:fd:04:01:2e:ce:
d2:8b:b8:b9:10:e3:5d:ab:68:17:b6:25:6f:c1:7d:70:88:cd:
84:41:fe:55:2b:05:7b:75:70:e4:b0:36:b6:46:30:6d:9e:b7:
b8:f7:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:50 2025 by rpki-client