Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa
File: 87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa (raw, json)
Hash identifier: 3xATxj9XWBhi7rSBYND4bxktUYzaDLS0+I0lHCEI3y8=
Subject key identifier: 1F:E0:69:29:FE:AD:4E:50:E7:29:32:43:47:44:BD:22:B7:DB:70:B4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E59BDF680B86EFB900527880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 36624
IP address blocks: 2620:74:2a::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:df:68:0b:86:ef:b9:00:52:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=2b7408a3-4f38-490e-8fc5-684083b42f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:8d:96:92:92:8f:a5:d3:92:51:ef:e7:49:
8b:2d:a2:23:57:cc:ab:a3:a4:f8:1e:6b:7c:85:2c:
ed:22:12:b1:49:0e:8d:f4:9b:06:cc:86:f7:6f:1a:
fe:c7:ba:6e:1d:9e:05:d5:46:5f:c3:4e:22:67:cd:
d2:c2:3c:8f:18:46:99:e7:72:fa:1d:a3:d1:c0:dc:
5c:86:97:47:a1:aa:8c:1c:08:37:2c:99:c4:8f:3b:
2e:44:1b:83:a7:f7:d0:56:c4:00:c9:02:3d:f7:bc:
5d:b0:86:ba:18:c8:d4:d9:23:40:46:fc:25:ef:d0:
b9:c2:00:5d:35:bb:0d:c1:7d:93:7a:f4:28:55:3a:
02:ae:54:b4:fc:ea:ea:91:1f:1f:f4:06:2b:09:76:
f9:38:26:d8:19:b1:3b:b0:18:f2:5f:6e:16:fb:60:
65:8c:87:c0:a4:7e:ab:78:c5:07:4a:7f:0d:f9:82:
3c:43:00:1e:7e:11:d4:98:ff:32:d0:1b:83:33:dd:
3a:a2:57:04:ff:98:32:ab:60:15:aa:8b:c3:9c:44:
ad:8b:90:76:aa:2a:18:a2:6b:96:14:c2:aa:e6:bb:
f2:c3:6f:e7:ad:a1:11:b1:02:80:a8:e8:78:67:c2:
87:84:73:38:b8:1c:f6:00:46:2c:a4:91:b6:fa:9a:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:69:29:FE:AD:4E:50:E7:29:32:43:47:44:BD:22:B7:DB:70:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d3:a0:6d:84:3a:5f:83:45:23:79:b4:e5:d7:ad:13:90:5c:
1e:dc:48:3c:7f:e8:a7:42:50:59:56:d6:5b:8d:c4:af:f0:37:
bd:71:19:36:82:28:6a:32:49:f3:e2:dd:ff:bc:a2:41:07:60:
94:24:82:12:a1:3c:a4:ce:98:cd:30:7d:9e:71:52:75:55:2d:
07:b1:40:fc:22:a8:d6:c8:cc:2c:3e:0e:41:7e:2c:bf:d7:58:
64:96:38:dc:60:49:e4:0c:62:43:d0:70:3d:56:e3:22:e6:41:
77:ef:f4:0e:cb:57:9d:56:ff:b7:7c:df:41:84:e9:62:3e:a5:
f2:c7:0c:6f:86:f6:1d:9b:5d:b2:08:85:4b:a4:36:22:84:6b:
6e:c5:63:28:ed:1d:c0:40:53:e4:48:0e:08:a8:52:06:cd:1f:
d6:b4:a8:12:b0:c2:0b:7f:3a:29:b6:6a:8e:3a:3d:b2:f5:6c:
20:ea:36:d5:ed:86:fe:78:6f:5b:33:f1:65:45:e5:9d:7d:fa:
0f:7c:b7:2d:ec:68:df:ca:8d:57:2a:58:e2:01:1c:72:38:32:
82:d2:52:d5:10:44:d0:cc:68:2f:19:55:3b:25:43:c3:45:a5:
f3:f9:4b:be:e0:8d:f7:02:fd:ef:5a:aa:d2:26:d2:7a:4d:d4:
c1:da:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:05 2025 by rpki-client