Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa
File: c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa (raw, json)
Hash identifier: hdzxTU+VD+h248Yr4PqtmHauV7JenELgHXqNPlc2vCQ=
Subject key identifier: F3:F3:68:DB:63:4A:A8:54:42:B5:83:4C:6C:DF:5C:68:00:42:95:B1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285849194195E5BA5367EED424AF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 397205
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:95:e5:ba:53:67:ee:d4:24:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=f605c414-2090-45e9-8ab5-d13d94c489ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:27:4a:ed:0b:b7:37:f7:dd:de:bb:8a:57:
1b:f5:64:bc:4c:93:4f:e2:bb:d5:77:89:ba:8e:7c:
36:98:0c:40:7e:7c:55:76:d3:fd:20:5f:62:49:c2:
f8:4c:3e:a3:26:17:59:ac:61:cf:b7:21:a2:cd:01:
ac:84:71:22:5b:b4:f0:c4:9f:b4:09:12:75:c4:0c:
51:37:31:79:7d:7f:f5:76:01:49:46:9b:54:9e:4c:
f4:48:a4:bb:f7:2f:46:52:3a:b4:2e:bb:15:83:1e:
9f:8a:96:b5:c8:af:a2:e1:d6:7b:57:1f:a0:0e:c4:
e7:38:93:e0:a8:30:d4:a2:14:23:73:b8:3b:4d:df:
2c:ab:52:3e:3d:a8:89:06:5b:34:38:83:18:24:2b:
53:ba:ac:01:9c:ed:6d:b9:10:20:db:94:14:7e:3e:
9d:74:23:fa:71:6a:f5:ed:1a:be:34:78:60:d0:f9:
df:4e:f3:3a:d8:fe:a6:0f:de:c3:21:b0:13:f5:27:
d6:c8:cf:b6:36:96:01:5c:f2:03:20:29:c2:e1:40:
2a:f9:f3:81:81:dd:eb:90:03:43:b4:f7:7e:c8:d5:
bf:14:93:87:bc:c5:b3:33:ba:0d:62:b5:d4:31:91:
3b:e1:e0:4a:cc:81:c9:50:c2:a1:1a:34:ef:d8:a7:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:68:DB:63:4A:A8:54:42:B5:83:4C:6C:DF:5C:68:00:42:95:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:3f:ec:05:2f:b5:1a:5d:d0:67:e2:25:5b:d5:0f:2e:18:81:
59:e5:30:77:bb:99:f8:dd:b3:9a:6d:6e:92:82:eb:cb:f2:cf:
56:b3:a6:ee:79:05:db:c3:f7:3f:10:7d:d1:e7:3c:4d:bd:0f:
1f:15:05:d0:44:93:27:a1:2a:00:82:f6:b1:d4:07:12:32:9c:
44:e3:c9:1f:94:60:2c:88:79:58:b6:fc:53:58:ce:b0:a7:90:
04:c5:53:4c:11:39:c4:37:83:74:85:c7:60:09:24:c7:7a:0a:
2b:a6:2d:0f:5e:c4:ac:a1:15:61:a2:0c:97:f5:86:77:12:c1:
8d:35:04:85:f2:80:96:d7:55:bf:06:ee:82:39:6b:fc:5e:db:
2b:63:07:9d:d4:c8:81:90:7a:a9:12:0f:bc:9b:54:49:cf:59:
60:4d:49:27:4f:bf:2b:0c:0d:c5:ca:fa:57:5d:ad:77:31:41:
83:77:0b:56:3c:f5:e1:1e:07:a1:94:03:28:e0:98:ac:77:30:
b6:e2:7f:c2:4c:3b:c6:7c:f7:78:82:72:9b:d8:6e:21:94:2c:
05:50:e5:37:47:81:65:29:5c:b9:c1:7a:e4:c3:c1:35:da:e0:
40:35:35:59:cd:c1:d3:97:fa:85:64:dc:25:4d:3f:59:aa:db:
c2:b2:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:31 2025 by rpki-client