Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa
File: 7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa (raw, json)
Hash identifier: hREGXDx2l5bGNcvk0D6iMIUeRxaGkfjUAqgatJ//lzE=
Subject key identifier: 55:51:52:B9:3A:26:84:BA:2F:2C:6A:1D:67:36:B6:51:4E:CC:D8:36
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848F9268C8D8387C22296A64200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 396574
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:8c:8d:83:87:c2:22:96:a6:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=048755c7-a598-4552-a274-88816dd9a113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:a0:ee:a9:21:93:d4:6d:6f:d2:53:6e:2d:
c7:14:7d:a8:dd:e2:46:c6:d6:4e:7d:78:c1:01:9b:
56:92:8e:d6:54:64:82:73:02:27:f1:35:ee:ba:bd:
4c:a5:cc:91:38:ea:ab:40:bb:ac:bd:13:83:55:38:
bf:93:b0:11:c6:9a:36:dd:29:70:db:21:92:62:ab:
8a:83:7e:95:97:5b:02:45:c0:8b:99:0b:e3:56:27:
83:bd:06:f6:b6:48:fc:9a:2b:46:8c:0c:26:c4:a1:
f1:0c:aa:2c:53:1c:59:14:48:83:cc:42:db:4d:59:
b0:45:34:3d:91:2e:a8:2a:65:22:ec:ed:3c:39:71:
0e:22:89:61:e3:ac:a4:33:58:a5:6c:23:10:c7:d4:
8b:15:15:16:da:7a:ad:22:0f:21:e8:34:1e:52:67:
fa:63:15:7c:cf:c5:97:ae:d1:5a:a3:e1:60:45:64:
ea:b3:5f:10:c3:c0:be:99:86:3c:3c:d1:d4:93:7a:
5a:f7:38:9f:74:02:6b:ec:b1:59:b9:29:a7:62:26:
ff:39:55:d9:6e:6c:0c:fe:b9:a2:02:78:3f:6b:b2:
f7:2b:79:27:09:cf:e4:75:f1:a4:ca:91:59:0e:3a:
02:b3:01:e3:72:6d:11:89:80:9e:b6:4e:75:e6:cf:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:52:B9:3A:26:84:BA:2F:2C:6A:1D:67:36:B6:51:4E:CC:D8:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b8:ca:80:a2:56:f6:bb:ec:a8:cc:50:2f:80:b9:a9:9e:ae:
c5:f5:70:ec:f2:56:be:a7:bb:e1:c9:83:3f:25:ee:51:35:7c:
27:21:08:2d:76:e0:2f:66:d7:1f:40:c4:83:db:95:dd:cb:3f:
76:dc:36:c6:3c:52:a3:67:03:ab:4d:8c:11:13:2f:57:67:3a:
37:59:cf:b8:0e:33:c6:1f:f7:89:d8:5c:4c:d8:2a:f5:b1:af:
1d:25:c2:27:fd:f1:43:3f:39:b5:f0:53:8b:05:65:77:53:92:
47:44:9a:5b:40:ac:19:8c:ad:50:29:1e:af:04:62:3e:a6:03:
45:5e:78:eb:5b:f5:ae:c2:fd:84:ad:c3:4d:7a:6e:cd:85:a6:
d0:23:57:b7:fd:49:e4:e7:18:75:aa:2d:e8:3d:a4:ca:9f:c3:
98:a0:ab:57:7f:96:87:ae:28:92:2c:10:8b:2d:50:58:26:e7:
a2:2f:02:2c:2e:42:76:06:6d:d3:fe:2a:0d:d9:8b:e9:e5:79:
a5:2f:1f:74:8a:ff:27:06:33:fc:10:14:45:1f:c8:fc:14:c6:
24:03:31:1a:7c:9f:60:6e:cc:a3:d0:46:93:1c:1a:cc:8e:ce:
8b:0a:d9:17:08:0f:88:0e:a9:bb:48:83:42:eb:6d:85:1a:15:
33:57:38:a5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JoyNg4fCIpamQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDQ4NzU1YzctYTU5OC00NTUyLWEyNzQtODg4MTZkZDlhMTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfug7qkhk9Rtb9JTbi3HFH2o3eJGxtZOfXjB
AZtWko7WVGSCcwIn8TXuur1MpcyROOqrQLusvRODVTi/k7ARxpo23Slw2yGSYquK
g36Vl1sCRcCLmQvjVieDvQb2tkj8mitGjAwmxKHxDKosUxxZFEiDzELbTVmwRTQ9
kS6oKmUi7O08OXEOIolh46ykM1ilbCMQx9SLFRUW2nqtIg8h6DQeUmf6YxV8z8WX
rtFao+FgRWTqs18Qw8C+mYY8PNHUk3pa9zifdAJr7LFZuSmnYib/OVXZbmwM/rmi
Ang/a7L3K3knCc/kdfGkypFZDjoCswHjcm0RiYCetk515s+gQwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFVRUrk6JoS6LyxqHWc2tlFOzNg2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y1N2ZjZDUtM2QyNC0z
YmRlLWI2NGYtMGJhZjYwYTJmYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAsuMqAolb2u+yozFAvgLmpnq7F9XDs8la+p7vh
yYM/Je5RNXwnIQgtduAvZtcfQMSD25Xdyz923DbGPFKjZwOrTYwREy9XZzo3Wc+4
DjPGH/eJ2FxM2Cr1sa8dJcIn/fFDPzm18FOLBWV3U5JHRJpbQKwZjK1QKR6vBGI+
pgNFXnjrW/Wuwv2ErcNNem7NhabQI1e3/Unk5xh1qi3oPaTKn8OYoKtXf5aHriiS
LBCLLVBYJueiLwIsLkJ2Bm3T/ioN2Yvp5XmlLx90iv8nBjP8EBRFH8j8FMYkAzEa
fJ9gbsyj0EaTHBrMjs6LCtkXCA+IDqm7SINC622FGhUzVzil
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:56 2025 by rpki-client