Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f771a25-4b10-344b-bcab-36085b86cfb4.roa
File: 4f771a25-4b10-344b-bcab-36085b86cfb4.roa (raw, json)
Hash identifier: X0cnMnWLQoP/YC3A0BFTFwVT+UR4WWSCREzihuGgJvg=
Subject key identifier: 01:83:BF:77:82:5C:79:67:55:45:AC:F6:8C:A1:7A:C9:A5:8B:EC:0D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848F22A7E4922790EFFFABAE900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f771a25-4b10-344b-bcab-36085b86cfb4.roa
Signing time: Thu 20 Feb 2025 13:58:08 +0000
ROA not before: Thu 20 Feb 2025 13:58:08 +0000
ROA not after: Wed 21 May 2025 12:58:08 +0000
asID: 0
IP address blocks: 2620:74:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2a:7e:49:22:79:0e:ff:fa:ba:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 20 13:58:08 2025 GMT
Not After : May 21 12:58:08 2025 GMT
Subject: CN=55e0616c-4489-46f2-9fd8-905eb8f0bcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:97:3b:7a:d7:a2:4d:11:f8:3a:b9:02:7e:
1e:cf:58:32:d0:d2:9f:65:87:ba:a5:d6:4b:4b:c9:
7f:03:2c:91:59:35:7b:94:f3:ce:8f:b8:1e:32:b7:
16:32:15:c1:09:f8:7f:02:1a:56:74:7c:3a:56:f8:
50:0d:e7:b8:e1:3f:aa:6d:57:1f:11:d3:ea:28:e8:
fd:b0:a3:dc:3e:14:27:e2:c1:4b:fe:ea:80:e8:d5:
8e:80:0a:93:d4:e0:32:e0:01:da:e8:35:38:4d:ef:
e8:e7:03:dc:cd:61:ce:37:f3:75:aa:ac:3b:e0:ef:
95:7e:80:d8:2f:4f:6a:71:6a:60:36:ab:bb:f3:1c:
9f:49:ea:5d:31:fd:3a:66:52:73:c7:48:62:e6:01:
ef:c7:55:33:bc:8d:fe:5b:4e:4d:a2:8d:8c:e8:47:
ca:66:90:70:c8:6d:a0:70:b3:00:74:96:62:92:dc:
e3:98:5c:bc:a8:69:94:40:eb:ee:94:99:43:5d:06:
48:0a:ac:bb:68:cb:6e:a8:82:81:e8:77:40:8d:62:
26:38:6b:b9:68:dc:73:06:98:67:41:3f:b2:ef:d1:
77:54:22:42:51:d1:b3:00:1b:ff:0a:51:2c:ca:21:
74:a3:3b:46:5e:ad:ff:09:34:fb:69:8b:ac:37:1d:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:BF:77:82:5C:79:67:55:45:AC:F6:8C:A1:7A:C9:A5:8B:EC:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f771a25-4b10-344b-bcab-36085b86cfb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c1:68:86:63:13:d0:66:6e:3a:0d:8e:a1:f1:30:80:89:22:
a1:df:8a:6e:7f:c6:a7:8e:9e:69:11:1f:4a:3e:ad:1e:e4:a8:
ac:8d:9a:fb:c3:16:85:08:6b:e1:9c:e6:7c:da:88:28:43:0b:
f8:3e:8c:92:8b:17:70:ee:87:63:f1:50:15:72:a1:00:95:54:
b6:d1:72:60:f1:42:a0:eb:c3:1e:34:59:ec:20:08:22:83:e9:
fc:b5:91:a3:ad:3d:b7:44:b8:76:39:77:de:e7:cd:10:45:3f:
18:f6:a9:2e:12:ce:09:e4:4f:dd:70:7f:c8:ad:6e:d9:81:b6:
7b:d8:d2:ec:08:cc:a1:2c:69:d2:7b:51:c3:6c:47:0a:9a:76:
c1:0b:70:bb:59:59:85:35:a0:71:f3:91:e1:8b:ab:0c:ca:c1:
66:e8:fb:61:13:81:aa:37:b2:4e:85:74:14:06:22:7f:c4:cf:
43:4d:8f:a4:cd:8d:ac:46:5e:8e:cc:e6:66:0d:ec:73:2a:28:
5b:a1:31:2b:99:61:0d:bf:d0:3a:27:4b:3d:94:c8:6d:88:f9:
92:35:6c:4f:4e:08:ec:09:74:31:6f:cd:48:09:50:97:81:23:
97:57:d1:37:a5:3c:fc:c8:11:9f:7b:24:48:e4:fb:4b:ea:89:
c5:fb:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:04:22 2025 by rpki-client