Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa
File: c68a42b1-be3f-33b5-a424-037b4328a509.roa (raw, json)
Hash identifier: 9rUIFnMfA/XIY02pCLPKJpKGkKWdZJqFyoGKCwlkeAk=
Subject key identifier: A7:60:03:F0:D0:78:56:44:3F:2E:27:95:E5:1C:04:15:81:5D:E5:ED
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848EF6172B08F6F09FED92C7680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 2620:74:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:72:b0:8f:6f:09:fe:d9:2c:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=c45a8003-92d8-47cc-891e-0dfe5709108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:31:5d:f1:bf:39:0b:84:6e:a7:74:dd:d5:
40:78:56:ff:b1:ec:dd:99:35:5c:44:f4:ad:0b:25:
01:78:53:66:75:7d:bc:c2:92:0e:5d:7b:a1:4a:66:
31:9f:f5:62:3e:d3:df:13:2b:ea:63:29:b2:9b:16:
dd:69:40:e4:3f:10:be:26:f1:8f:5d:88:c1:14:5e:
29:5c:c5:90:58:4d:09:51:d8:90:cc:ba:f8:d8:d8:
91:81:03:cb:6a:97:38:ab:b9:47:92:4b:f2:5e:15:
23:5d:b6:4d:a1:49:3c:e2:b2:2f:da:b5:3c:c1:4b:
38:c9:96:7c:d9:fa:92:41:fd:9f:f6:e3:63:ac:f8:
1a:03:20:7b:b5:24:38:cf:df:71:75:c5:e9:d3:24:
d6:2f:87:8b:e0:a3:91:ed:e6:71:d6:9c:e4:62:a7:
ee:78:2a:b7:14:ec:7f:32:4e:cc:01:b4:20:7d:78:
44:ed:01:b5:f4:6f:5c:9d:72:61:48:d4:10:74:a7:
15:78:99:ba:14:7d:19:4e:20:d0:d6:d3:a6:b6:bf:
70:ca:50:c2:52:f8:46:9d:36:86:b9:15:19:78:5b:
c0:17:47:e3:22:72:ac:f1:1b:e8:e9:3f:67:21:54:
c7:60:17:b1:f3:1b:8f:b0:52:44:6a:7d:96:3e:37:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:60:03:F0:D0:78:56:44:3F:2E:27:95:E5:1C:04:15:81:5D:E5:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:24:06:a2:61:f4:70:71:f9:6b:1b:41:c5:e6:30:37:f9:90:
3a:4c:98:79:ac:35:a8:e7:6c:5c:a2:9f:af:7d:d9:0f:14:69:
de:0f:6b:2a:93:d0:61:61:e7:ec:95:07:a4:69:61:58:b8:72:
34:9e:80:9e:42:b1:a3:1e:31:23:c3:9b:64:f8:55:36:e7:ab:
42:cb:bc:4a:6a:94:63:cd:cf:52:a7:fa:01:6d:40:c1:25:88:
24:8c:f0:ab:d7:a1:8d:6f:a2:bd:27:a4:c8:9f:a1:cf:59:24:
7f:d8:63:7b:59:16:aa:33:ef:3d:e0:81:84:71:c9:72:17:f4:
82:3d:3f:e6:ee:0c:78:5a:94:47:2a:4c:12:6a:42:c0:40:28:
b9:44:f9:6a:cd:93:70:2b:aa:c3:a6:6b:dc:52:27:bf:73:ce:
c3:a2:69:6e:91:23:57:03:6f:b1:4b:73:f0:20:d6:98:da:d6:
65:05:9a:cc:50:80:46:0a:ca:c4:48:04:be:ab:9d:db:d3:c1:
24:59:ab:84:9b:66:03:2a:12:03:9b:6b:93:1a:8f:d0:cf:c7:
34:f0:21:4a:79:5a:56:9f:26:35:67:9a:01:ca:14:09:8b:f4:
e7:a4:84:16:f7:8f:5e:ab:43:4f:1a:89:11:17:76:ac:cb:8c:
d9:1d:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:27 2025 by rpki-client