Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa
File: 529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa (raw, json)
Hash identifier: Wxga6wOwp5fHLk6pnU3ax/hwXN+lj8kxPTvJ32gDiDs=
Subject key identifier: 5F:19:1B:1F:7D:B8:77:A0:C9:66:77:62:D4:FC:EF:45:5B:2E:3F:26
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858494CC94B349DDA7FFE6BBB0380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 2620:74:18::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4b:34:9d:da:7f:fe:6b:bb:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=50eaf3aa-a380-4c45-9a5a-409bb542550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:f5:61:8e:79:ce:de:de:c6:06:3f:16:db:
37:4b:3f:7b:05:0e:52:25:97:3b:66:05:a5:68:5a:
97:0a:80:b2:7b:95:0e:2a:8a:f0:35:76:12:46:61:
25:6f:9c:89:7d:58:e4:36:d2:66:03:cc:13:cf:11:
26:df:58:0a:21:0e:a7:dc:8e:74:93:6d:0b:fe:88:
10:d4:06:9e:27:c7:68:a1:b4:d4:8a:6e:bd:3f:96:
a4:3d:50:67:b3:16:54:0a:63:a9:45:d2:4f:6c:5c:
d8:75:b4:74:ab:af:c3:bb:7b:06:73:ec:6b:83:c6:
fe:37:47:35:a9:2a:0b:4e:65:6d:35:0e:da:4c:b7:
43:ef:6d:2d:de:85:82:a8:0e:4d:6d:c8:e4:28:ef:
36:fc:07:16:f2:c1:12:7b:32:a3:23:25:79:c9:b2:
c9:7c:87:41:67:4f:f5:b5:48:f8:f8:d2:f6:58:62:
6f:64:02:22:f8:49:51:02:28:7e:0c:a6:13:ac:91:
4d:95:da:eb:62:f1:83:70:32:e4:6f:a9:cf:dc:57:
25:1b:59:b7:c2:36:96:08:2a:59:99:2e:42:51:3d:
c2:75:c8:9f:fc:c6:16:b4:18:b5:3b:92:1e:fb:ab:
af:4f:15:04:d8:24:85:bf:06:38:d7:76:d9:d6:04:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:1B:1F:7D:B8:77:A0:C9:66:77:62:D4:FC:EF:45:5B:2E:3F:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:18::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:62:ce:09:e1:c3:fb:0d:3c:0d:84:a1:00:5b:d5:ad:89:11:
3b:65:92:89:64:1d:af:2d:51:a4:e6:4a:ea:af:e6:c6:8a:40:
e9:50:25:ea:93:9c:a4:5a:57:50:63:a6:b6:a1:ef:2d:1f:24:
f8:a1:7d:2d:57:e8:9f:dc:f3:4c:b3:ad:6a:80:21:67:ad:77:
13:16:e4:43:ac:6c:93:6b:eb:aa:fb:a1:ce:bd:05:46:b7:d6:
41:c2:15:11:86:22:3a:d1:ea:69:e5:e4:70:ae:e8:b0:ab:1f:
d4:e2:72:00:6b:c8:3d:24:19:bd:09:23:79:b3:25:f3:7b:fd:
d6:03:75:04:4b:fc:28:1c:a5:36:55:d7:1a:9a:95:3d:68:31:
d1:98:4c:8c:06:d6:a5:e0:4b:c5:8d:59:85:55:94:cb:3c:e9:
33:70:18:05:bb:ee:a4:cb:95:e9:00:f8:89:b2:94:86:8d:14:
5f:50:59:16:a3:8e:68:7c:6e:66:a8:e2:f3:a7:dc:ae:0e:7a:
8e:e2:2a:63:e0:34:47:ee:ec:e1:ef:c6:1b:aa:1c:20:81:30:
fd:3a:75:00:56:8e:31:ff:80:04:8f:c3:2d:f1:6e:ff:10:1e:
70:9d:c9:b6:7a:87:59:35:5f:a6:01:33:e1:22:04:49:9e:3c:
f6:51:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:01 2025 by rpki-client