Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9829d784-3d29-3474-8e16-a6975f237ae9.roa
File: 9829d784-3d29-3474-8e16-a6975f237ae9.roa (raw, json)
Hash identifier: OlBDhs6OtN4TkJGFvclTyJd4UGwptc3Qa+jR5oLPr5g=
Subject key identifier: 04:CC:68:AE:81:53:EE:6E:73:44:CF:93:D5:C9:14:2B:38:AA:E7:AA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849124711DBBAB2789033904140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9829d784-3d29-3474-8e16-a6975f237ae9.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397214
IP address blocks: 2620:74:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:11:db:ba:b2:78:90:33:90:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f13749c3-4f08-4a95-8d0b-5c9e99cab7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:b0:40:38:6d:f1:60:28:e8:2b:f1:b1:6f:
ce:2d:0c:81:ad:f8:c6:b6:8a:3d:31:0d:81:eb:d0:
35:ec:80:c2:f1:77:e2:5c:97:a3:15:7e:5a:36:53:
42:0f:b6:a1:6c:cf:95:01:a5:de:98:33:f8:cd:b7:
75:0a:ca:c7:52:a5:e4:96:3e:2b:b1:f9:c9:aa:6a:
20:dc:f4:04:fc:36:d1:cc:35:3b:17:01:5e:bf:87:
7b:45:ea:4a:0c:2f:c2:c6:88:11:d9:1b:41:80:04:
22:db:0e:1f:8a:3f:fa:ce:7d:e5:e4:fc:66:7b:8a:
12:37:7f:5e:bb:3f:98:67:d2:9a:b9:1a:46:8a:6e:
8b:03:05:04:e1:ec:47:8b:0d:fc:29:4e:a4:ac:37:
2f:63:5d:b0:ce:4b:fb:fa:1a:4f:31:64:24:16:38:
ce:54:99:cc:07:0b:d5:d1:87:ab:3c:15:68:e9:fc:
cb:ea:4f:ca:24:27:13:8f:cb:5b:c0:bf:3f:13:24:
68:dc:60:7a:f8:a0:09:25:f1:d6:f4:7a:41:28:99:
ed:3c:1f:57:47:fe:41:95:f2:5d:80:36:78:81:5f:
82:4a:41:fd:8c:cc:30:e8:1c:5c:9c:59:69:54:92:
a5:0b:b0:d7:06:69:55:56:a3:1a:da:73:df:cb:ea:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:68:AE:81:53:EE:6E:73:44:CF:93:D5:C9:14:2B:38:AA:E7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9829d784-3d29-3474-8e16-a6975f237ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:be:7a:a6:b3:ed:87:58:f8:65:45:74:3b:29:b0:45:80:af:
9b:13:87:b9:6a:1d:3e:de:92:52:a5:72:b7:85:99:85:bb:51:
df:44:04:96:55:02:84:c2:a5:76:ab:87:33:a5:d8:d9:34:8c:
02:01:6f:46:76:4d:b1:bb:a6:b3:44:fc:f6:69:12:e4:23:bb:
0f:bb:3b:3a:f3:f3:78:bd:b8:55:4f:72:a1:b5:2c:71:27:1b:
5a:1e:35:aa:b2:70:c5:c0:e9:ac:da:bf:8e:a5:42:a4:88:93:
3b:7f:75:0f:30:f5:21:00:cf:96:3a:80:d8:7c:b9:03:f6:b3:
af:c2:b2:af:75:00:70:1e:21:ab:7e:78:d4:47:fb:dc:58:13:
2d:51:18:13:fd:2d:cb:d1:a5:a3:18:33:34:52:7d:af:1c:41:
1b:6a:6e:42:86:fe:ec:07:a0:16:7f:42:f3:52:00:bf:a6:f6:
c8:4c:01:fe:cd:22:76:51:9f:06:70:86:94:ed:20:c1:d9:d8:
46:34:40:43:fb:48:77:0f:da:a1:16:b4:4f:5a:34:3d:99:b4:
6c:be:24:bb:d3:31:11:53:5e:44:7b:94:59:00:7d:77:b9:ba:
05:5d:af:cd:1b:72:69:7c:31:07:7c:b3:a6:dc:6c:2d:89:d3:
a5:5c:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:59 2025 by rpki-client