Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa
File: e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa (raw, json)
Hash identifier: Pz+slciSeyWpTnxxXjHqccEm1j2zx9uJ/w6e2j0t3w0=
Subject key identifier: B3:AB:D5:EB:1E:E7:3B:3C:F4:6C:54:AC:9A:E6:2D:0E:0A:36:A7:90
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B6A5496A59886E8F81A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 396551
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:6a:54:96:a5:98:86:e8:f8:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=a374df07-8e7a-48c5-b367-982d36f1d60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:b5:0b:10:7f:da:79:3b:52:19:3d:68:30:
45:88:68:27:93:a8:18:16:eb:ae:f3:35:d5:ba:8d:
ee:3c:8d:41:76:a8:87:08:a6:20:9d:12:f2:10:63:
c5:02:e7:1b:d2:c6:b0:ad:5a:94:a2:6c:c1:25:ab:
e0:42:b5:72:95:4a:f2:fd:68:2d:0a:47:e0:52:0b:
65:09:8e:17:1e:a8:34:40:06:8e:3d:6b:65:e9:d0:
90:d9:37:77:55:bb:e4:8d:07:fa:db:78:97:9f:07:
a0:73:7b:e9:0d:d5:fc:75:82:d8:35:81:cd:b6:ff:
7c:5f:b4:aa:23:28:b0:9a:30:72:ab:8a:24:dd:2e:
4c:14:3a:fa:28:0c:20:1d:38:a5:8e:ad:63:1b:6c:
d5:f4:e3:87:8a:86:2b:75:bc:24:11:66:90:22:f9:
76:83:1b:d6:9e:fd:ae:86:b6:5f:ee:8f:12:87:f1:
e9:25:db:bb:b0:ec:cc:6b:fa:44:3a:74:c4:61:70:
a4:1a:7a:bc:dc:b0:b3:09:4a:65:78:8e:9f:e2:d7:
08:07:3b:39:56:f8:9d:18:01:07:34:5d:c5:cf:b6:
59:e4:5a:83:b1:59:13:5a:9c:8e:07:89:f3:da:c4:
8b:f8:24:7d:4a:c9:db:ee:e0:a4:7c:c5:38:ff:5a:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:D5:EB:1E:E7:3B:3C:F4:6C:54:AC:9A:E6:2D:0E:0A:36:A7:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:87:cf:fc:13:82:c7:18:05:c8:33:1f:07:6f:e5:9b:88:fa:
ca:0b:19:cd:81:b7:3a:28:04:44:68:d3:b1:ac:05:9b:41:28:
2b:6b:5a:9d:93:ae:39:b3:9d:6b:e4:26:0f:1f:c1:bd:b4:64:
10:f7:0e:8d:b6:25:b4:04:51:61:d7:0f:15:7a:5e:04:8a:b9:
0d:50:77:b0:91:4c:d4:d3:66:ed:e6:99:d6:c9:dd:5e:d9:80:
dd:c8:99:f8:cb:de:a5:db:70:e0:50:3f:63:3f:aa:64:ae:c7:
30:4c:00:88:23:e9:67:17:89:f9:cc:e4:95:3e:33:7c:b8:67:
20:c3:d1:47:95:5b:f9:bf:ed:fb:92:c3:8b:77:cf:98:77:ca:
d0:ce:89:c2:79:69:13:cd:e7:73:14:3b:37:48:10:38:6c:0d:
48:33:38:42:49:86:2f:0d:11:37:67:31:18:88:8a:82:56:16:
fa:c8:87:e9:b0:e9:4a:d5:16:17:5d:39:d5:b5:1a:c8:d7:ea:
bb:f8:a2:1d:67:25:e4:fd:35:b3:cc:1e:8d:d3:4b:e4:b8:c6:
cc:e2:0d:2e:99:e6:f2:c9:14:2e:75:b0:dc:7a:a7:20:e5:b7:
e1:e2:9d:b1:88:2d:0f:3f:72:c5:78:d3:09:ff:82:fc:4b:61:
31:65:0e:44
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiWC2pUlqWYhuj4GoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
YTM3NGRmMDctOGU3YS00OGM1LWIzNjctOTgyZDM2ZjFkNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyge1CxB/2nk7Uhk9aDBFiGgnk6gYFuuu8zXV
uo3uPI1BdqiHCKYgnRLyEGPFAucb0sawrVqUomzBJavgQrVylUry/WgtCkfgUgtl
CY4XHqg0QAaOPWtl6dCQ2Td3VbvkjQf623iXnwegc3vpDdX8dYLYNYHNtv98X7Sq
IyiwmjByq4ok3S5MFDr6KAwgHTiljq1jG2zV9OOHioYrdbwkEWaQIvl2gxvWnv2u
hrZf7o8Sh/HpJdu7sOzMa/pEOnTEYXCkGnq83LCzCUpleI6f4tcIBzs5VvidGAEH
NF3Fz7ZZ5FqDsVkTWpyOB4nz2sSL+CR9Ssnb7uCkfMU4/1rrgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLOr1ese5zs89GxUrJrmLQ4KNqeQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRkNGM5MmQtMzcwNS0z
YzIyLWFhZGUtN2E5ZGQ0ZjZlOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB5h8/8E4LHGAXIMx8Hb+WbiPrKCxnNgbc6KARE
aNOxrAWbQSgra1qdk645s51r5CYPH8G9tGQQ9w6NtiW0BFFh1w8Vel4EirkNUHew
kUzU02bt5pnWyd1e2YDdyJn4y96l23DgUD9jP6pkrscwTACII+lnF4n5zOSVPjN8
uGcgw9FHlVv5v+37ksOLd8+Yd8rQzonCeWkTzedzFDs3SBA4bA1IMzhCSYYvDRE3
ZzEYiIqCVhb6yIfpsOlK1RYXXTnVtRrI1+q7+KIdZyXk/TWzzB6N00vkuMbM4g0u
mebyyRQudbDceqcg5bfh4p2xiC0PP3LFeNMJ/4L8S2ExZQ5E
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:48 2025 by rpki-client