Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa
File: 68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa (raw, json)
Hash identifier: RpQqaSslYn2mzklQ9B3hUwGKEibAThHoDX6VpIbf6aw=
Subject key identifier: 49:70:50:36:A3:54:E3:8C:E2:A7:EC:08:94:5E:4D:45:27:EE:4D:38
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848F92689FC72D0A10300A8FB60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 396578
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:89:fc:72:d0:a1:03:00:a8:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=007bf6c3-6a98-4268-9f13-b07970e384e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:30:21:0f:86:8a:90:ef:13:e4:fc:d9:e0:3e:
e0:5c:89:c4:52:8c:a0:ec:9a:fd:d5:1d:bc:7a:d5:
75:de:c2:0e:fa:cb:c6:14:68:7d:d9:e8:23:78:07:
c2:58:5b:fa:b0:65:3b:e2:f4:99:37:5e:8b:b0:5e:
c9:4c:1b:c8:05:d0:8d:a2:33:a9:b7:d4:a2:a5:9c:
37:fb:6c:7a:a5:d5:d4:10:76:22:07:bc:03:c6:87:
43:2b:7c:9f:41:2c:8d:27:ec:37:67:2d:a6:0e:92:
3f:8d:a9:85:d8:e1:8a:fd:50:29:3c:db:8b:5c:c8:
7b:a3:d5:61:d7:49:ed:6c:81:28:b8:22:6a:6e:b7:
91:89:54:f2:57:8e:b2:e0:07:2c:7d:df:f1:34:ed:
c9:28:08:2d:0e:f8:6a:bf:cf:fb:e7:ec:4a:d4:49:
62:77:64:94:5e:18:8d:2a:69:dc:59:26:40:e8:da:
dc:d2:33:39:8a:bd:d1:46:95:41:99:4e:f6:05:3b:
f0:0f:d8:b9:78:2c:12:a0:ee:b4:d5:57:db:12:a7:
87:3c:ab:06:90:a0:70:bb:e3:dc:9e:09:e7:bc:ee:
1c:1e:5e:2a:51:2d:2a:60:47:eb:fd:15:3e:b3:9d:
ec:c4:79:ad:4b:aa:7d:b9:52:04:9d:8c:05:79:75:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:50:36:A3:54:E3:8C:E2:A7:EC:08:94:5E:4D:45:27:EE:4D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f6:0c:d5:7c:50:64:43:1a:0a:60:c3:8d:c2:43:2f:3e:7c:
d1:d9:5e:c7:c6:36:e6:32:64:55:81:72:54:fe:04:6a:e7:fc:
e6:f7:33:04:94:54:a5:25:6e:ba:c2:29:82:e1:94:75:90:90:
b4:c2:01:ea:0b:fa:d7:94:93:04:49:3f:a6:0a:a6:c2:d2:79:
f7:e4:f9:a9:3a:7c:94:bd:d2:21:c8:5e:61:e4:75:f0:04:22:
86:d7:71:9b:72:ce:f6:fd:e0:10:67:9b:f5:cf:33:a3:c8:df:
b1:10:54:89:29:fd:9a:ed:d0:07:89:8c:32:2b:81:7f:e4:06:
b6:aa:20:3d:b4:78:8f:55:d0:74:31:9d:0c:87:ed:67:c6:b3:
51:4b:fe:78:c5:2b:ef:77:50:72:1c:e4:c2:37:d9:28:e7:14:
e5:cc:38:a8:83:93:48:19:48:2d:cc:2a:ba:d4:13:24:13:64:
63:9c:a7:b8:9f:9a:9b:dd:fc:2c:97:bb:30:bf:17:63:50:50:
27:62:d6:69:c6:b9:53:15:15:77:70:c3:13:89:2a:60:7a:80:
19:4b:91:1c:df:ea:99:fc:77:5e:58:b2:b0:52:2b:aa:53:a4:
ca:36:c3:52:7f:26:d0:7d:69:ee:fb:70:71:cb:5b:90:e4:40:
44:48:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:58 2025 by rpki-client