Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7350f02d-2c52-352d-95fa-97a25efe5a41.roa
File: 7350f02d-2c52-352d-95fa-97a25efe5a41.roa (raw, json)
Hash identifier: ajsfsIKSkGRlJvibZF16fAFU+UT0bQahpNs+dn03l5c=
Subject key identifier: D1:31:AC:C1:49:92:A2:17:6A:92:BA:9B:49:28:FA:F8:A9:CF:EE:6E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E59BDCD8178A49B6B01F0D40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7350f02d-2c52-352d-95fa-97a25efe5a41.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 396557
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:dc:d8:17:8a:49:b6:b0:1f:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=99b5e035-71fa-491e-a9de-d237ad0efe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:b6:ed:6e:f0:78:43:f2:e6:71:fd:00:b0:
56:84:42:f8:e7:52:04:4f:a4:cf:b7:c6:71:42:7e:
c8:31:be:51:09:01:8e:42:f9:95:d6:74:90:90:43:
3a:71:a0:76:b2:ff:f0:bb:18:7e:26:f7:b2:ad:b7:
d4:bb:50:56:cd:3d:b7:f8:c0:04:ec:ae:4a:50:29:
9e:01:27:7b:87:6a:8e:74:5b:bc:5b:3d:3c:c1:a0:
b2:e3:c0:bf:78:df:1c:08:c5:c5:59:49:b5:f3:25:
0d:ae:5b:69:8d:67:fc:67:a2:a2:dd:56:e5:53:f7:
f5:a7:87:54:f8:ca:b7:68:f8:b1:84:9a:77:67:37:
97:73:86:98:c1:9a:ca:80:2c:2c:2b:1a:b5:de:ce:
00:c1:06:35:d0:18:83:40:e6:98:b9:f9:78:f7:15:
32:08:44:be:35:eb:95:52:88:a9:84:8b:2c:f9:83:
75:2f:29:71:ad:2c:f7:5f:a3:16:8a:70:58:d3:8b:
b1:8b:6b:a0:f8:de:05:fc:12:05:1a:1c:f5:38:4e:
28:ab:44:98:67:54:46:be:34:00:2c:02:40:03:61:
c4:4c:22:35:85:17:9d:98:19:2a:5a:aa:bf:57:0d:
a4:18:38:6d:d6:5a:11:69:3f:fd:40:f9:c6:58:ba:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:AC:C1:49:92:A2:17:6A:92:BA:9B:49:28:FA:F8:A9:CF:EE:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7350f02d-2c52-352d-95fa-97a25efe5a41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:cf:08:dd:27:34:83:a5:d6:e3:32:3b:97:45:93:77:1d:93:
05:63:db:7f:f4:ed:24:81:41:b8:ad:00:7d:2b:cf:82:5c:d9:
a9:1f:f5:67:0e:82:b3:27:af:e8:a3:1a:a4:57:7f:6f:09:8e:
1b:32:37:e7:90:ba:b7:d8:20:f0:87:fa:01:db:12:c2:de:5f:
e2:3a:b8:33:c3:c4:20:be:1c:fb:e3:8b:c0:ae:7c:0c:a7:1d:
d2:d6:83:cc:ad:27:6e:e8:df:19:50:01:d1:9f:93:52:be:80:
8d:46:e8:58:3f:1e:14:85:4c:78:df:54:76:32:da:b6:88:82:
56:10:f6:d8:da:1b:84:ae:d6:36:9d:f5:8a:db:be:59:99:c5:
63:06:ce:e9:2e:35:08:3f:55:f7:81:3f:04:bb:82:48:15:02:
71:4a:3c:86:25:cf:f9:4b:bc:b5:d9:19:94:36:cd:09:8f:bf:
17:a3:86:6a:7a:cb:11:15:c1:59:89:a4:e3:2a:e3:8c:05:da:
8f:ff:05:5b:fe:8d:13:d6:af:89:23:c8:cc:74:5b:9b:64:3d:
55:a6:5a:f0:6b:97:7a:0e:94:7c:ae:aa:8b:14:d6:59:eb:e6:
5f:f9:d2:28:b8:cb:eb:92:ce:2b:31:74:20:d7:c9:b4:c6:83:
0c:63:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:06 2025 by rpki-client