Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f0756da-fb9e-3a80-8f15-44d5d5c3530f.roa
File: 4f0756da-fb9e-3a80-8f15-44d5d5c3530f.roa (raw, json)
Hash identifier: pgkpXElZZww31/b9OcJ5zMeVD8jIXxmUsiZyGUbv9Lc=
Subject key identifier: 86:B4:2F:D6:B5:86:5C:DF:93:5E:09:E8:A5:C1:DC:C2:A5:1A:5A:BE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110E3C5A8342800227F580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f0756da-fb9e-3a80-8f15-44d5d5c3530f.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 36618
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0e:3c:5a:83:42:80:02:27:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=64929734-5a44-48fa-9124-1bfe03e922ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:ab:f6:ce:ba:40:71:f7:82:f3:e7:d9:e5:
6b:61:3f:0a:1e:c0:c4:05:b6:b7:dc:2a:f2:be:61:
03:3d:71:0f:84:e8:e8:e7:9a:b4:a7:ef:c9:6b:05:
a4:ce:26:d1:44:ad:40:77:eb:e2:35:af:6f:20:57:
95:26:ce:c8:eb:43:17:5f:61:7f:1a:ae:a5:c5:cd:
a4:0b:d2:96:ee:9d:1c:69:27:ff:2c:52:a9:c6:39:
1b:f9:75:06:3b:6c:9d:8f:51:c6:b8:94:d2:3c:9c:
91:26:76:77:aa:ef:54:91:e0:86:b7:d0:ec:e0:43:
74:a5:ee:5c:93:36:a5:6c:ee:b6:68:79:21:6b:cd:
f8:51:ba:ff:3f:aa:17:b8:c7:b2:00:6b:d4:ab:47:
dc:9b:9e:c5:a4:0e:5e:2c:03:a8:40:45:ca:b5:f7:
2c:09:31:94:9e:28:87:e1:0d:34:09:91:e4:7b:04:
bd:50:d4:9d:44:09:f5:1c:d9:c4:81:50:26:1a:a5:
c8:c4:2d:ee:21:f4:ab:22:ca:d7:75:30:44:5f:01:
d3:30:df:bd:e7:b7:22:ac:e9:cf:72:72:67:be:b6:
4c:43:cc:ab:50:34:93:02:13:b7:26:90:2f:e9:69:
7e:c5:a0:f4:c2:1a:4b:ee:31:ef:3e:c3:6f:0d:49:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B4:2F:D6:B5:86:5C:DF:93:5E:09:E8:A5:C1:DC:C2:A5:1A:5A:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f0756da-fb9e-3a80-8f15-44d5d5c3530f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e0:27:e9:49:2a:68:4a:cb:4a:92:66:1e:cf:47:f0:1a:22:
13:6d:b4:b4:15:34:5a:e9:8d:07:61:4a:eb:cd:49:ac:ba:81:
64:02:d3:c1:da:04:9b:63:99:d7:13:fd:f5:0f:2a:a5:a3:92:
62:d7:40:d9:31:69:72:b3:6d:6d:27:0e:48:da:c2:ce:15:e0:
b9:71:0b:c9:fb:a2:73:89:f3:ee:0b:72:34:9c:ea:f3:9d:07:
eb:fe:fa:94:9f:da:0c:f5:07:95:b8:8d:72:44:e5:ac:1c:dd:
7b:fa:0c:57:59:21:3a:17:0a:7a:f0:7f:3f:40:2e:89:ab:e2:
81:f9:05:61:ce:5c:78:06:d8:e8:63:ec:dc:a7:df:48:ae:35:
29:24:5f:2b:bb:4b:36:43:1d:10:ee:c8:98:54:77:8b:ec:5a:
4b:a9:b1:a2:c3:2d:5d:09:9b:44:1c:92:bc:5c:a7:5e:1d:33:
34:7b:c9:c5:55:20:cf:8d:f0:fa:78:76:ae:13:7e:1e:62:0a:
cf:2d:0c:e9:f6:e2:6a:e1:6d:ab:c5:42:bf:2a:46:90:93:6f:
c2:11:71:75:e8:8d:cd:b4:ab:de:a1:db:18:60:f8:30:06:fd:
06:2f:94:ff:40:18:4c:fe:15:15:ba:55:a2:71:d4:43:ca:78:
12:74:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:07 2025 by rpki-client