Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa
File: da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa (raw, json)
Hash identifier: Rb2/4F2OmJnF8kodEyG6Vmk0LzNgQrPBgHCNfzWTAoQ=
Subject key identifier: A0:0C:D7:9E:9D:4F:2B:69:50:3B:33:C2:96:47:15:3A:7B:EB:85:0C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110915FD13C47FF2D67100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396603
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:09:15:fd:13:c4:7f:f2:d6:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=72c8dab5-d10b-4c2d-af88-bc01245d7fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:1b:9c:d5:19:3c:7a:74:46:98:eb:60:3e:
99:5e:ce:1d:f1:fe:38:84:9f:73:2f:c6:8d:a5:8a:
72:db:68:ad:82:dd:88:ae:13:0f:52:e7:75:2a:46:
72:d3:cb:52:ce:d3:4b:1f:18:23:fa:0e:0e:ad:dd:
11:a8:f6:a6:8e:3f:d5:77:de:6f:f6:7d:0b:25:68:
d7:20:70:8c:65:84:c2:c7:bf:0b:03:1e:cc:7a:7a:
9c:4e:ea:10:e0:db:b6:2f:21:30:63:b4:da:66:72:
18:28:c0:ec:aa:fd:82:1a:cb:94:fb:56:d6:41:44:
b9:fd:77:6a:99:b4:e7:23:d2:3b:e4:0a:58:f7:03:
02:29:e0:8c:6c:24:49:02:8d:b2:54:41:60:1b:c2:
14:99:4b:eb:f8:5b:55:d0:4a:45:91:b5:db:e2:45:
29:9f:9e:f9:2b:69:43:79:cb:54:55:90:31:8d:66:
79:82:b7:91:21:da:a7:85:7d:ec:f6:45:e6:4f:47:
ab:54:fe:fc:21:59:23:42:94:bd:18:40:93:d1:f2:
58:da:08:81:0a:4f:45:bf:76:e5:5b:34:a2:88:e8:
e1:e2:3f:a0:ee:02:19:2a:6d:40:d4:1e:91:af:31:
12:34:b8:a0:4b:f1:4d:b7:b3:1c:f6:ba:49:46:45:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:D7:9E:9D:4F:2B:69:50:3B:33:C2:96:47:15:3A:7B:EB:85:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d8:40:1f:80:61:2b:cb:81:1d:f1:e7:b5:8a:18:78:74:87:
8a:a1:d9:85:53:df:6e:86:e1:13:86:b2:89:23:aa:10:90:0a:
ce:24:bf:77:9f:c9:4d:52:ce:ed:25:b8:aa:5e:91:cf:b9:24:
7a:72:36:43:2d:43:89:a9:bb:bf:65:65:28:c2:6f:1f:d6:ed:
18:51:6a:dc:cf:ba:5d:c3:fe:51:95:99:de:ce:1a:16:b2:e3:
be:a6:18:36:42:f5:84:4b:81:35:fe:4d:67:35:6d:14:2c:82:
c4:e5:8b:77:ba:1b:c0:0f:e3:cb:af:07:b4:c3:48:ae:63:3b:
4c:05:0f:c7:33:86:b3:4f:3a:1d:34:2c:3b:4f:42:2c:2a:52:
25:1f:a9:79:e3:09:d8:65:12:8a:90:c5:b1:90:ab:5f:f3:ae:
a0:13:f3:10:db:9e:0b:db:7a:24:5c:31:66:58:da:66:8d:6f:
0a:09:38:52:4e:fb:b0:76:59:43:69:aa:08:ac:25:f2:5d:e3:
50:31:b5:d0:de:5d:90:27:8b:6e:29:01:f2:03:46:0d:12:d7:
80:ad:f6:87:3f:1d:76:61:bc:2a:9a:3d:7d:ea:ef:f0:de:d2:
24:c5:f7:ed:e7:4c:0f:f6:b7:b6:89:eb:eb:2a:1a:71:66:b7:
13:71:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:27 2025 by rpki-client