Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
File: affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa (raw, json)
Hash identifier: IlhIjlfkkA+QYi4hTt2gXTEZnpVYBVq2VM8aPnV8IK8=
Subject key identifier: C4:47:28:3C:BE:94:65:0E:15:21:9A:0D:AD:CE:4B:EC:F8:CD:7E:B4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D21113305BA94C2F599E4880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 397211
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:13:30:5b:a9:4c:2f:59:9e:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=2134f9b8-e97d-4ff1-ad8c-415d0bc38309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:d6:48:8e:08:9d:5a:9d:66:2a:e5:ce:3f:
44:6e:75:1c:78:31:7e:ba:0b:a0:5a:e3:0a:a8:41:
94:69:fc:2f:55:cf:2f:dc:f0:74:0c:b3:a5:ea:6f:
60:4b:4e:84:04:fd:b0:3b:f4:11:03:b0:f3:dc:11:
ed:b0:6a:54:87:5d:c9:8a:b9:21:91:5c:ab:cb:7d:
6d:df:7d:d9:ee:e4:c6:88:6d:c7:50:d7:c0:70:c5:
47:70:9e:de:2d:ae:a7:97:fd:0a:24:05:8d:09:d3:
bc:8b:68:ee:67:06:c3:0e:4a:f0:da:d3:b9:e4:2b:
e7:ac:57:df:c7:f6:a7:11:41:12:ea:2b:6d:8b:fd:
85:0e:99:70:d2:65:9c:b2:26:bf:f5:17:f7:e1:94:
ba:b2:36:76:bc:b5:43:c1:6b:d9:a9:9b:bc:37:05:
5a:db:5a:e9:3a:6d:d9:35:4b:55:24:7b:1f:ff:56:
57:49:f5:2c:0e:0f:59:b7:fc:dc:a9:e8:ac:44:14:
24:d3:62:83:b2:c8:dc:9b:c6:6d:5e:16:b7:94:8c:
23:db:31:fa:79:aa:fc:56:76:38:29:28:b7:85:13:
f0:ff:98:e0:b7:6d:dd:14:3f:0f:db:8e:53:cc:44:
e6:a2:03:38:90:85:8d:58:d2:d6:49:b8:22:06:7e:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:28:3C:BE:94:65:0E:15:21:9A:0D:AD:CE:4B:EC:F8:CD:7E:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:27:a6:bf:c8:07:f8:50:db:00:07:69:61:0c:f7:3f:a2:13:
de:fd:ef:26:b2:9e:ce:37:ce:c2:a6:45:ee:89:c9:89:ae:00:
98:9a:46:b0:fa:7b:e1:b3:3b:6c:c5:13:94:67:a5:ba:8c:23:
9b:d4:2a:69:87:16:f8:dc:11:0c:7c:a1:7e:89:45:66:f5:f6:
f9:a4:33:77:e6:6d:34:e3:b0:62:08:30:2b:4c:f4:ca:3c:e8:
6b:bb:a8:e0:2d:1c:b0:59:5b:61:39:28:b0:c1:99:29:13:a2:
6c:5b:63:cc:03:5a:9d:a6:a1:5a:c6:d8:9a:97:e2:6b:f2:00:
b4:f9:43:7b:be:1d:01:53:a2:c8:40:f7:e2:9d:7b:b3:40:5d:
a9:f2:6b:18:ae:e9:d2:00:20:76:8e:79:57:cb:51:06:c1:08:
c4:4d:65:44:de:4a:96:ed:3e:ac:f7:dc:d1:cd:33:8c:14:62:
a9:24:1a:f4:05:85:d2:6c:ae:25:64:a6:d1:04:8e:46:7f:fc:
21:35:02:d2:40:82:ed:e1:7c:2a:f1:cb:8b:31:29:ab:e1:08:
29:83:7c:cc:3c:3b:d8:36:46:64:8d:42:3f:8f:71:5e:0a:38:
42:8b:c9:d5:ce:8d:29:48:86:ef:5d:89:3f:01:5f:f3:23:59:
bb:7a:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:59:01 2025 by rpki-client