Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa
File: 67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa (raw, json)
Hash identifier: 6O+ZqWiegWFq3AJbVgbT9Tz2GTdDbDSoXMKXvKzclzs=
Subject key identifier: 2C:13:9A:9E:ED:EA:09:46:69:B2:FC:B0:7D:9F:36:EE:E0:C1:7D:A9
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285849194195A5B73968F0CBE04B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 396584
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:95:a5:b7:39:68:f0:cb:e0:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=6d4a90e8-06a3-47b0-ad76-58b0cc05888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:b7:fb:69:ae:40:ec:b3:d7:2b:57:6e:b4:
94:39:1b:c5:2c:77:d7:76:5a:2d:f1:ea:e0:f8:3f:
f3:d1:bd:5f:97:cc:86:8f:c1:58:4d:66:f0:2e:ac:
b0:d1:35:10:3d:66:e7:bd:a1:2d:89:df:52:a8:e9:
53:3e:8e:24:b0:8c:9a:32:e1:5b:f0:cd:5f:e6:d8:
01:9a:8f:85:17:5c:4c:7e:f4:20:84:e9:97:be:fb:
a7:de:f8:5d:38:63:34:56:5e:ad:f4:c8:c5:9e:89:
45:e1:66:d0:df:be:86:e9:69:3a:89:5c:ef:49:b3:
74:35:80:7a:24:12:3d:48:df:1c:0f:cc:8c:d4:6b:
4e:4f:d4:4e:d5:39:9c:ff:5b:f3:d1:f6:33:41:ea:
63:18:2b:d7:9f:af:dd:d2:76:07:5b:d8:84:38:76:
72:d1:38:f8:3f:bc:85:61:4a:3e:51:99:25:78:b9:
0d:9c:70:49:b4:b1:b2:f5:a1:65:86:b9:0d:96:dc:
ee:2a:0d:e8:54:43:c6:49:5a:53:d1:c6:c6:ca:77:
78:f2:27:64:bc:9b:a0:d1:ae:79:07:78:54:99:ac:
24:d2:08:02:7e:ee:f4:97:a8:c8:4f:e1:98:3d:95:
22:89:07:18:c9:2f:fb:cf:1a:83:94:66:af:f0:0a:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:9A:9E:ED:EA:09:46:69:B2:FC:B0:7D:9F:36:EE:E0:C1:7D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d2:59:5a:ac:69:85:75:87:18:a1:83:d7:d3:a5:9d:ef:46:
77:a2:8e:0f:99:ef:b6:7e:07:b2:53:d1:b9:6f:a9:16:5a:05:
d6:bf:e0:08:46:4d:8b:d5:62:1b:dc:d0:6e:1b:65:d7:46:62:
3a:00:f7:e6:97:5a:5b:ab:b7:fe:79:14:3b:3a:8f:e5:d6:63:
3c:d9:b2:5e:80:35:ae:f8:da:76:29:2c:38:2f:b5:fc:c4:db:
e1:43:6d:71:cd:ca:16:cb:cd:27:2f:02:a0:00:97:24:dc:de:
a9:1b:ad:63:b1:db:67:43:1c:ab:45:cf:42:3f:e1:bc:b1:72:
24:42:62:4f:1d:74:76:ad:3a:d4:79:0c:09:0e:bf:5c:0d:f1:
24:05:78:40:12:f8:b0:62:46:f6:cb:07:d7:b4:4e:31:e0:c1:
5a:b4:5c:e7:cb:dc:d9:94:ad:01:f2:42:d0:4e:1f:12:fa:d7:
ce:08:9c:a6:c9:e6:20:ce:ce:bb:80:32:a6:fc:a2:4a:37:88:
20:69:21:29:db:00:bc:2d:4f:f3:de:ae:08:aa:ac:e2:00:c7:
61:60:d9:ad:56:67:72:d3:e5:5a:36:25:6d:46:13:35:13:97:
ac:d3:b5:58:14:94:22:56:6c:55:2e:60:15:24:d6:84:ab:67:
e8:db:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:46 2025 by rpki-client