Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa
File: d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa (raw, json)
Hash identifier: wbYCvdDwTm9pe+obIqTLcTnCMq5od+FdG26DSjIW9t0=
Subject key identifier: C1:75:E0:A0:94:21:BE:60:A3:91:17:FD:BB:FB:12:19:5C:DC:AA:78
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110C77B10FF84A6A80B5C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396602
IP address blocks: 2620:74:2b::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0c:77:b1:0f:f8:4a:6a:80:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=db86f410-42da-415b-b13a-b442e7d458c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:ad:c2:0d:1f:a5:22:58:44:fb:e1:78:f4:
14:8e:b5:2a:2b:11:02:b1:fd:6a:cd:79:58:8d:f7:
12:32:93:e1:62:71:36:ba:90:f6:81:a0:76:67:86:
04:45:f3:8f:a5:62:62:a6:28:1e:db:d9:21:8c:c6:
50:8f:14:73:96:f9:61:ef:47:d7:13:41:42:70:59:
88:4e:e1:53:47:c9:05:23:0d:3e:fc:c7:2b:ea:ce:
88:16:c7:fd:d0:96:28:78:e6:63:14:81:8d:54:bb:
95:06:1c:de:82:da:f1:59:af:46:51:b7:27:e5:6a:
dc:3a:89:26:2c:af:ef:ea:9c:e5:f4:76:54:bb:ab:
11:a6:3e:82:67:c4:c7:b9:dd:56:bd:64:e6:61:0a:
fa:cb:ac:2e:c4:f7:da:76:64:b9:31:11:60:93:31:
c8:8e:44:f5:d0:e7:24:07:1d:50:8b:62:05:f2:81:
c5:69:02:45:a4:ca:9a:69:fc:dd:a4:4b:b2:a7:f3:
39:05:53:12:89:d4:17:b7:35:40:f1:a8:6e:bd:1c:
ad:de:d4:14:cc:c4:78:d4:b6:f3:ca:41:d5:2c:d4:
51:8d:96:9f:31:5f:a0:45:7b:cc:45:de:a0:d2:8a:
53:d9:c3:bd:8d:3f:a3:2f:76:bb:b9:ee:b3:77:ba:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:E0:A0:94:21:BE:60:A3:91:17:FD:BB:FB:12:19:5C:DC:AA:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:75:47:6b:8a:60:90:0c:c1:22:e2:d5:e7:e8:8f:d3:5e:2d:
f9:2b:40:af:28:23:9b:bf:f7:de:ee:1f:d2:a8:cf:a4:6d:31:
85:a4:4c:bd:ff:dd:eb:d7:86:90:5c:e8:ad:28:24:55:48:9e:
f1:05:12:96:64:5b:5d:44:c1:49:a1:a8:c2:17:fc:12:71:cc:
9c:9c:0c:4e:b1:78:49:0c:18:14:53:41:09:b6:2d:9b:e3:be:
39:b1:4d:fa:a6:18:c8:d2:46:6b:cf:9f:c0:79:b2:d2:dc:27:
a5:49:a3:5a:4c:8f:e7:45:4d:e8:ee:93:ba:4a:9e:1c:29:1a:
40:9c:c5:82:63:6e:23:30:fe:ae:cd:80:d2:0e:23:a4:b0:78:
1f:7e:c3:0c:52:93:85:85:20:5b:77:49:9d:ac:bf:33:13:81:
60:08:f0:63:2e:47:57:4d:3e:c4:3d:ec:ff:ee:00:73:27:56:
65:06:f6:38:c8:1a:1b:ba:31:c0:a0:4a:95:8b:83:d2:75:09:
9e:38:b9:d5:21:63:ff:2e:20:68:a5:20:0d:d4:bd:1a:83:0e:
e2:ae:df:c7:47:7a:3e:71:27:55:bd:ec:d1:96:c8:59:1e:c3:
8c:08:0d:42:12:c2:25:4b:9a:26:eb:f7:18:36:ee:36:b9:61:
bf:0f:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:55 2025 by rpki-client