Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa
File: b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa (raw, json)
Hash identifier: 133LdP/shJ9l+53bRRYdchmPO8NftLH9u3AsGJV7qiI=
Subject key identifier: AE:9D:63:06:F9:3C:AB:59:B0:71:78:95:3A:5A:60:50:5E:AC:17:BF
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858488280A23665C98B4878987B00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 396605
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:a2:36:65:c9:8b:48:78:98:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=84604bbf-b1b0-4e65-b26c-bde03c528c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:50:dd:91:f4:e6:22:ca:43:bd:42:49:f6:
b0:40:13:db:6e:d2:0f:b4:5b:a4:6f:69:3c:44:4e:
3a:eb:9a:e9:41:40:bc:c7:95:81:fe:aa:41:48:17:
e0:66:02:9a:57:cd:4f:f1:b7:0e:d5:04:45:eb:e3:
ef:7e:fe:03:81:52:6b:6c:3f:4d:6c:ce:64:23:6a:
23:8b:31:54:4b:06:6f:b3:33:d9:3d:d4:04:5a:76:
c5:08:98:a6:f9:4d:26:83:ee:19:1c:d8:15:72:16:
bc:cd:4c:c7:62:b0:6a:2a:6c:73:e2:8f:be:22:db:
88:43:2a:99:45:87:6d:20:45:29:84:d2:8f:d9:b2:
5a:e9:e8:0b:4e:37:11:ac:96:5e:c4:86:37:bd:c3:
63:ce:29:ee:69:66:73:74:36:61:bd:f4:84:7f:af:
2f:9e:ee:ab:c9:41:6d:8b:90:17:ed:55:9c:bc:ed:
de:5a:1a:4d:90:49:bb:b8:74:19:d2:d0:98:c9:6f:
f3:65:bb:0d:6c:5b:ab:7f:13:fc:26:c0:5f:59:a9:
c1:18:3c:59:8a:53:8b:f3:eb:22:2c:50:e7:9f:ab:
a5:d7:f2:83:99:b2:af:8e:49:8f:cf:8c:76:13:4b:
9b:5c:e0:90:d9:e3:ed:c5:78:35:3a:2d:44:0e:5e:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9D:63:06:F9:3C:AB:59:B0:71:78:95:3A:5A:60:50:5E:AC:17:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:82:9d:f2:b4:af:98:22:1b:b6:58:db:5a:65:b9:c4:80:45:
cd:41:c2:97:4a:32:71:5e:df:0f:4a:11:6e:95:81:22:3a:18:
27:fd:16:47:c5:1c:d9:6f:21:f8:91:b4:9b:f7:0f:9b:7e:4d:
12:33:9b:26:1b:30:ab:f8:ca:fa:a9:01:05:68:bf:78:ef:59:
bb:4f:0f:cc:1b:be:90:f8:ae:a4:7b:cb:dd:0f:3c:4b:86:16:
a1:d3:e0:50:0b:12:d3:a9:ff:35:42:8e:38:65:ec:f4:53:18:
77:70:b9:07:98:5c:96:e1:e2:82:2d:72:40:38:94:ac:94:ae:
fe:41:f2:5e:d1:8f:fc:84:95:1b:c1:03:e9:f1:a8:50:6e:d1:
69:ef:f6:fc:f0:59:24:34:a8:08:56:62:74:50:26:8a:38:a4:
e5:83:d2:21:bc:00:6f:0a:ef:1b:e7:27:11:6a:35:61:16:a6:
a4:16:98:1d:d6:45:1f:7f:ef:11:c0:ac:05:8b:5b:37:5b:83:
39:9e:71:5b:fa:b5:b9:b3:86:34:c6:4d:03:4f:b4:30:55:2b:
10:10:19:f0:ca:a1:41:98:fb:d0:8a:4b:33:18:60:85:97:c6:
e4:1b:1e:0c:25:e9:82:ff:de:e3:af:b9:16:9b:77:2c:62:46:
b6:87:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:36 2025 by rpki-client