Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
File: 88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa (raw, json)
Hash identifier: Lb3qUjjEAquOP9XqZtsdM8NmVpUcvlw5qe6Dj/EHWbE=
Subject key identifier: 79:F9:DF:38:D6:BB:1B:14:9A:FB:C4:2F:58:AE:D8:29:3C:82:CC:70
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858488280A4BEB5962D6B0D9E0B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 20431
IP address blocks: 2620:74:2c::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:a4:be:b5:96:2d:6b:0d:9e:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=e08a420b-bf06-4b01-9e8e-01bf11249f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:92:07:02:30:29:b0:62:db:e6:ad:4f:6d:
5a:ae:49:53:0a:40:90:23:f3:06:e1:43:52:b9:46:
bf:1a:dc:6d:54:4b:d0:71:98:f7:2e:b5:12:d3:f0:
79:5e:34:50:cd:88:4b:38:bc:e0:0f:fe:71:22:10:
2b:40:84:14:ef:19:28:25:5c:fb:ca:d8:37:b7:2b:
69:69:a2:c6:73:76:be:1c:f6:cd:5b:c0:fe:18:20:
9c:f7:dd:41:54:e5:c2:11:b1:a7:73:e2:bf:e9:3d:
31:96:05:3e:79:81:35:08:78:72:f0:b5:32:d5:82:
f8:d1:90:f6:72:1a:df:c8:df:bd:c6:d1:1b:db:16:
d9:9e:bd:f1:4a:0d:ef:23:31:8e:95:a3:38:92:7f:
9c:d0:7a:d9:ab:f1:a4:8f:db:da:09:bb:be:82:3b:
20:5c:c7:a4:f1:61:34:0c:86:38:dc:71:d8:c2:bc:
e1:f9:c7:f5:ad:16:60:08:54:f0:46:7b:e3:86:de:
d4:bb:64:1f:60:de:3a:05:a4:a1:64:3c:cc:5d:7f:
ca:96:b6:36:37:fb:8f:a7:36:3b:dc:76:50:66:3a:
c1:88:3d:77:04:71:16:41:5f:6b:f2:50:2b:cd:2e:
c2:94:50:d5:7d:8d:3f:ff:ab:13:76:b8:c9:55:4c:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:DF:38:D6:BB:1B:14:9A:FB:C4:2F:58:AE:D8:29:3C:82:CC:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:30:68:bc:df:af:6d:ae:7b:73:9b:2b:7a:ec:be:7d:4f:1a:
b8:c4:87:18:aa:9e:41:cc:90:0b:4f:2b:14:9d:f1:d6:ef:b5:
32:11:87:50:09:d3:74:ac:fb:61:c9:7e:76:73:a8:60:96:15:
96:0b:bc:d0:17:b9:04:51:14:98:19:dd:f3:62:0f:1d:15:54:
4e:07:07:10:07:44:2e:d4:3f:f0:6b:af:4f:49:52:8d:93:04:
d1:59:e8:1c:31:d6:53:ff:d5:0f:3e:09:20:c7:d1:7c:d6:54:
2e:c4:1f:0d:e6:6b:2c:2a:69:8d:68:f0:51:46:1d:24:43:25:
17:0f:94:c8:94:95:d0:3a:86:29:be:e7:5c:fa:43:18:ce:fb:
1e:49:51:6a:e2:4a:3a:bc:8e:41:58:4c:f5:d4:9c:2f:64:9e:
cd:9e:89:d3:7f:4f:f8:44:0f:2e:58:75:85:4e:25:2a:ed:8a:
cb:16:a0:ce:66:a5:da:d7:a1:6f:04:de:6c:29:72:18:8f:01:
93:1e:ca:d2:6c:e7:3a:8d:29:16:b6:3e:e8:cc:22:ad:a0:0c:
ed:dd:2f:1d:50:8d:77:5c:8a:de:1a:68:0f:3c:17:81:ef:b1:
7e:a5:9d:71:90:eb:54:a8:b4:8a:0f:39:62:d2:69:49:37:fd:
ec:df:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:11:59 2025 by rpki-client