Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa
File: ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa (raw, json)
Hash identifier: vCzVM7JImpHcgCEgi5ydp8lr9zJ9xJhVtAESGcxuGno=
Subject key identifier: 33:D7:08:1D:6B:93:03:00:2D:1B:88:0D:99:4C:FE:F4:24:FA:AF:FD
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110FF2E5F500BB99306AC8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396554
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0f:f2:e5:f5:00:bb:99:30:6a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=cdb4a32a-9d0f-4c46-a08e-eb225f717974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:b4:0d:9e:ad:ea:e1:78:2c:1e:09:54:5e:
50:0f:d0:ff:7c:5f:51:04:fa:5b:0f:bb:69:85:d2:
c4:c6:09:d0:c1:13:ce:12:fc:d7:2f:13:5b:da:7d:
bb:b3:93:01:c9:c0:e8:0c:3d:d9:cf:d0:4c:f3:15:
71:86:38:cd:cf:42:cc:30:28:8f:4f:f1:47:20:e6:
d1:f4:49:76:c5:39:0b:1d:46:9a:37:45:05:03:95:
28:40:e9:7d:10:7b:8c:bd:f4:ab:b5:cc:15:91:6c:
5c:80:16:de:5c:03:53:c1:68:ee:31:03:21:55:d1:
0d:78:98:35:2a:b0:12:08:0d:db:75:9d:2f:2d:37:
2b:60:20:b2:1d:12:47:1f:c0:5f:69:32:86:dd:cb:
ed:94:cf:4b:08:f0:34:2a:ed:3f:1d:79:89:e7:e1:
1e:ba:8f:ab:5a:11:d5:ec:cd:56:3a:83:f5:47:04:
c2:1a:1a:36:ba:19:07:26:42:4f:dd:84:bf:01:ba:
32:e2:af:90:ac:c2:4a:2f:85:ef:4e:c0:d2:7e:00:
35:52:52:cb:08:ca:bb:2e:9e:7c:ac:d4:70:a5:22:
89:ba:58:18:55:e0:a6:01:bb:94:fe:58:3f:d6:10:
72:f9:a3:ce:64:20:55:b0:fa:fe:17:9d:c5:12:f8:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:08:1D:6B:93:03:00:2D:1B:88:0D:99:4C:FE:F4:24:FA:AF:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b2:ad:9d:9a:16:99:b5:a9:bb:33:63:96:de:2e:04:42:40:
70:5a:84:04:0f:b6:e6:74:08:2c:3c:69:02:09:b4:88:74:0c:
49:24:b4:99:1d:0d:4f:d8:3c:68:15:de:a8:7e:c2:52:c4:cc:
ae:66:cc:eb:86:b6:6e:6e:2c:d1:de:a0:94:5c:df:60:f1:4d:
e5:62:e5:40:38:a1:00:10:61:88:cd:ca:4d:17:5d:ca:cc:5a:
e4:7e:81:d3:b2:0a:05:15:c6:31:66:7c:f2:3b:7c:e0:d2:eb:
bb:f4:64:04:c7:59:a7:81:b3:9a:66:b3:e2:9b:23:dc:b3:e8:
ce:ed:50:1e:7f:43:0d:21:21:85:13:f7:db:39:2b:8a:b5:1e:
e3:46:a4:ce:fb:b3:66:8f:a0:29:d1:85:1c:36:bc:6d:94:90:
b8:c5:6d:2e:3c:cd:c3:02:ed:9c:30:84:c8:99:b7:f2:cd:a1:
06:b6:8f:73:67:4c:8e:60:9c:9a:9c:ff:27:ee:03:ca:31:08:
6c:c0:38:d5:a1:c5:04:61:fa:fc:d8:5d:1d:57:9b:b1:2e:86:
a1:41:b9:95:d8:f7:50:17:f0:38:96:e7:9f:10:60:f1:4a:8f:
7f:10:21:31:a2:fc:c1:54:bf:91:5e:a0:13:32:a1:ce:51:d6:
55:d8:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:38 2025 by rpki-client