Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa
File: cde7ec80-ef62-3187-bdd3-52d126a43896.roa (raw, json)
Hash identifier: p5E1YyudsLwPwzS4KzOLZOb7zAytBu/q94gQEzLXVXU=
Subject key identifier: 28:B7:2A:F8:65:D6:BE:FD:95:66:FA:0A:5E:10:C0:F4:59:A3:97:DB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858494CC94B8C67AEE89BDFF29A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 2620:74:b0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4b:8c:67:ae:e8:9b:df:f2:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=b9415c04-19c5-4cdb-818c-08b8c74b9c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:09:97:3d:91:ce:69:ec:50:5e:a1:1b:d6:
e6:62:fe:2d:5f:8c:8a:5c:15:f8:e8:9c:c8:fb:30:
62:b9:cb:f9:2e:7d:f0:6f:49:81:02:e9:8b:bc:9b:
5d:9e:8f:0c:a4:9e:e7:d6:6e:2f:c6:8a:97:37:1e:
d8:83:4a:d4:33:41:9b:bc:2e:cc:7c:96:d4:04:dd:
01:a8:d9:0d:c4:7f:7a:20:59:a4:12:1b:fe:53:88:
18:1d:b3:9a:28:e5:a3:86:18:be:3f:fa:ce:b7:90:
6b:16:3c:52:98:a2:c5:14:92:09:fb:9a:8b:d3:85:
d3:2a:39:60:47:14:e9:e6:d6:38:d9:60:f8:cc:90:
70:6a:42:b0:e7:18:26:19:00:2b:32:0e:fb:0e:0e:
7b:15:d7:fb:f0:64:67:07:51:9f:9a:1f:4c:6e:5b:
b3:ba:9d:65:f9:ee:a8:24:3e:42:d5:3e:cc:b5:ae:
35:b6:ff:f4:be:3e:db:c7:6c:a7:bd:e1:b4:11:7d:
b4:89:9f:ab:3b:bb:b1:73:33:18:7e:c0:d0:b2:00:
e7:17:47:c2:ae:3b:e8:99:2e:3d:15:7c:3d:c4:c1:
74:c5:52:e9:5c:99:7d:d1:8c:92:bb:e6:19:52:ed:
64:53:f9:7b:75:2f:3e:d3:c4:ba:7c:ba:05:c4:3c:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:2A:F8:65:D6:BE:FD:95:66:FA:0A:5E:10:C0:F4:59:A3:97:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:be:71:72:df:2d:81:76:65:6b:61:b2:e8:cf:b3:fb:a8:b3:
35:c1:af:54:c4:db:9c:8f:f5:b0:ba:70:72:94:bf:d1:a9:28:
0f:93:d0:38:07:e7:1a:4b:0c:c2:89:2d:ae:d6:b4:81:ec:95:
05:db:82:c5:a9:b0:b2:9a:51:65:69:48:5b:51:f1:b6:e5:81:
f5:ff:c1:98:7d:fb:5f:15:c7:f5:4c:28:3b:5a:41:02:84:f2:
56:29:19:36:e2:0b:6d:61:4e:bb:8f:80:0d:76:53:18:e0:16:
69:09:38:5c:2a:53:36:75:43:6f:5d:ac:a8:c5:1d:33:7c:2d:
35:61:6a:86:54:44:4d:11:e9:91:7f:2d:8b:6c:73:1e:fd:9e:
33:f4:af:2c:d9:eb:e6:3c:2b:1d:92:0e:cc:b9:46:15:5c:a4:
59:85:fd:06:6c:59:2a:1a:03:7e:c7:7c:f7:b9:97:97:80:7c:
db:0f:b7:a4:43:0b:6d:bb:35:a1:87:89:42:87:84:93:80:8b:
a5:84:75:de:e1:61:e2:1d:74:ca:26:77:9b:f7:86:16:c0:df:
93:5e:84:79:57:aa:52:3d:97:17:f4:fa:02:4c:f3:8a:84:9a:
4d:de:c9:0b:24:99:b6:b3:0c:4b:34:d0:06:dc:99:2b:6d:d4:
f3:18:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:02 2025 by rpki-client