Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa
File: 668c7565-d48b-3581-8b27-87e2b0cf2875.roa (raw, json)
Hash identifier: GJjHqtQT6Z/8QB3P90uoHFEZLD6cfJIbeTDxObFJUwE=
Subject key identifier: 84:7F:64:63:D0:89:99:05:23:44:F6:20:BC:A3:03:28:37:0F:C3:FF
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858490E16CF33F79097F5F22F6C00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 7342
IP address blocks: 2620:74:37::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:cf:33:f7:90:97:f5:f2:2f:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=14389cc0-d2bc-45f4-b25a-3b695bcbd26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:7f:5b:f5:83:a3:1c:00:fb:f9:82:f9:1c:
30:67:ab:4b:0a:f6:8d:69:e9:bc:10:4f:06:bb:23:
13:05:f6:41:3c:17:b4:76:96:28:20:3e:87:1e:13:
34:6d:95:64:ed:30:e5:34:9c:c3:33:e5:26:d7:b5:
19:59:51:e9:2a:2c:51:61:f0:23:2c:b8:72:9d:4c:
f1:f1:a8:3b:73:c5:73:40:80:c1:2f:87:3e:10:59:
47:3f:c8:c7:bf:73:29:c6:35:e4:62:30:f4:c4:d9:
a6:11:2b:80:20:6d:25:8c:4b:6a:96:f8:62:ca:6b:
ee:03:78:56:ba:3c:90:89:a4:bf:98:0d:8c:84:9b:
e5:6e:fd:b9:47:d0:94:0b:60:fd:ae:09:5a:46:96:
74:a1:d4:eb:e2:85:7c:1c:0b:e4:3a:32:e2:1c:b9:
94:69:a0:89:5e:99:bb:26:04:5e:b9:d6:2b:77:70:
33:d6:e3:2d:41:93:05:6b:85:33:43:d5:e1:2d:f5:
a4:97:26:0a:69:b0:06:9e:7b:b5:3c:83:2b:fb:00:
f1:2e:5a:49:19:e5:ba:d2:55:32:da:f4:e4:30:be:
0e:33:40:89:d0:a3:5b:9a:75:e2:5b:5f:91:2a:4e:
47:ff:61:55:a3:86:f0:be:ef:91:38:bb:a5:7c:72:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:64:63:D0:89:99:05:23:44:F6:20:BC:A3:03:28:37:0F:C3:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:37::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:e2:16:43:06:4e:78:86:7b:83:76:50:5f:72:0a:1a:6b:43:
4e:fe:12:81:ab:f2:03:2d:0e:c6:37:2e:9d:b8:c9:f5:b8:8d:
97:cd:b2:7e:5b:ca:17:95:57:a3:b8:61:59:ab:56:cb:29:a2:
17:89:ef:f6:84:db:f6:c4:82:10:a6:8c:67:cd:02:00:fa:53:
0f:b7:11:4b:28:53:99:3a:11:ef:3d:b1:0d:ba:c1:35:76:22:
f3:63:c1:47:ed:95:3e:cc:3a:f7:11:e3:6f:35:2b:ec:bf:f1:
5f:6f:09:47:76:77:bc:6d:ed:59:3e:64:ac:ea:8a:cc:bb:d6:
70:de:c7:61:44:74:48:7c:70:be:ca:b5:04:90:24:25:b3:47:
7e:e4:c1:47:97:2e:a7:de:1c:6b:95:e0:18:f7:6e:91:5a:7f:
5e:c5:c1:0b:94:37:ee:3c:23:4d:15:da:53:e4:7e:3d:9c:e2:
ea:eb:a8:88:d0:18:f6:3f:67:5e:25:b1:7d:0c:ba:23:7c:b8:
f8:a4:19:9d:98:2c:54:74:2f:21:c2:75:bf:af:dd:10:bd:c5:
0e:f7:01:04:1d:3e:e8:f5:ea:55:02:e0:31:fc:52:b4:1d:8a:
a7:31:08:93:96:9b:e0:7c:93:6f:dc:c6:2d:c8:b3:db:2b:cb:
e6:01:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:10 2025 by rpki-client