Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa
File: a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa (raw, json)
Hash identifier: xKdAX9vAUE6Il/Un3SOQ3In43c+QoHC8WUouZ4ucvYk=
Subject key identifier: EC:22:D9:5C:A7:45:E7:45:7D:3D:06:9E:D5:9C:DB:94:C7:F1:B5:D8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110C19F355285C16BE5D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396559
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0c:19:f3:55:28:5c:16:be:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=1271b3a5-db59-4f5a-90b5-0b2d54590f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6d:e1:bc:4b:d4:eb:17:97:2c:5f:b2:2a:b8:
64:11:8a:57:23:76:9c:e6:02:16:fb:22:49:86:bf:
3d:ca:cd:35:47:9d:e2:58:e6:9e:70:96:83:c6:a4:
f0:ec:ae:67:1c:e0:e9:6f:08:d9:1e:c0:4a:3b:23:
00:c8:fc:bc:92:43:e2:32:53:82:d4:e7:45:52:0e:
44:62:04:f9:50:47:5e:79:f0:83:10:7a:cb:ce:92:
6c:01:7c:77:49:da:d7:5c:36:68:91:db:7a:96:28:
49:44:c5:de:78:1d:71:28:09:61:af:34:5f:4d:6b:
d2:78:e9:5d:e4:d1:0c:92:0e:e2:22:fe:a3:19:2f:
e5:97:e7:c7:91:c6:b3:17:0a:ae:4c:ac:eb:0c:34:
03:63:06:29:56:68:33:8c:54:df:61:9c:7c:5b:f9:
9b:a2:60:66:7c:1a:f3:95:6c:0a:d6:5d:b0:b8:b0:
91:d3:b1:e6:8b:11:2b:bd:eb:61:2c:38:75:c0:73:
cf:ad:21:4a:5f:e0:b7:b2:5e:64:1c:2e:36:ed:b2:
42:97:72:e9:2f:71:c5:c2:dd:ce:66:4c:7f:5b:95:
ec:d3:82:20:95:d0:a7:9f:54:3e:24:59:c7:cf:ee:
8d:4d:a8:81:84:2c:3a:f9:ee:af:28:1c:3a:19:82:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:D9:5C:A7:45:E7:45:7D:3D:06:9E:D5:9C:DB:94:C7:F1:B5:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a9:3b:00:78:f6:ae:de:93:a6:17:6f:2e:bc:17:71:65:3c:
50:91:45:3d:42:9d:5e:94:4e:f0:d6:89:2d:dc:65:02:52:dd:
1d:ff:0c:cc:ef:45:c7:9f:f6:ff:1a:11:f7:46:49:e7:dd:24:
c6:70:f0:0a:a3:ab:68:06:8e:a5:f0:49:6d:56:39:53:2c:01:
c5:66:75:d6:22:a0:ea:42:8a:ef:3e:cf:ce:cc:0c:84:6e:91:
1f:d9:7a:fb:de:ae:7b:40:66:b6:40:1b:0c:3a:ec:93:a7:53:
c2:20:2e:fa:7c:ae:62:84:89:f7:cb:cd:5a:25:e7:89:0c:7f:
74:d3:e1:61:ec:6e:88:4e:75:c5:21:ca:a8:64:9f:47:2c:82:
3e:2a:e5:2d:8b:e2:85:72:13:50:54:e8:01:af:bc:c0:d3:72:
79:15:fa:74:1a:c9:44:62:58:7d:60:81:c6:a3:b8:6c:51:af:
06:d7:5d:95:a8:f8:a7:4e:af:ef:f1:10:eb:b4:2f:af:e7:ef:
f8:7f:de:aa:74:76:66:ce:7b:d6:2e:8a:d7:b8:4c:69:28:9c:
8b:8a:e0:32:25:41:aa:df:bd:81:fe:e5:52:d5:cf:80:47:e7:
3e:30:26:79:0d:64:14:50:c4:34:a4:80:fa:eb:06:e9:8c:36:
2b:84:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:39 2025 by rpki-client