Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa
File: a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa (raw, json)
Hash identifier: nc9QqU6/Twb0obUY62ESLHOGEQHhxnBD0oDVHmxj/dM=
Subject key identifier: 6C:B6:04:C5:A1:9A:2F:6A:8C:B1:F5:D8:E7:0B:B1:2F:42:B3:23:54
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858494CC94B1528E842B87452F980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 2620:74:c::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4b:15:28:e8:42:b8:74:52:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=df7a69b8-32cb-4a70-acfd-e311fddb41de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:2d:99:09:35:c9:b1:0d:14:15:22:4f:2b:
5a:32:48:36:3b:5f:52:1a:dc:16:a0:e9:d6:e3:2f:
e3:e5:7c:f1:96:e7:37:bb:b0:1b:ba:51:7d:fe:c9:
ee:38:f7:13:3c:13:e9:2a:ac:4b:ac:84:25:7a:0c:
05:91:6e:74:44:c3:87:9c:d1:bc:e0:6b:98:5a:80:
9f:27:2f:41:b0:c5:47:f8:b5:56:22:05:4a:94:72:
41:82:03:9e:61:f4:6e:0d:ac:4c:3a:6e:2e:4e:d8:
2c:df:72:c7:89:34:d3:57:4e:57:82:d8:2f:b5:df:
ae:c0:28:41:5d:cf:af:4a:9b:c7:b2:36:fb:c7:f0:
e5:42:3c:41:bf:05:43:0f:f7:ec:02:cf:90:10:c7:
03:78:f8:05:5a:41:8f:6d:38:e0:17:83:9f:88:89:
02:e7:c9:72:2a:b6:af:12:d0:4c:62:2b:48:7d:c1:
06:a6:ff:b9:b4:37:7e:94:5f:61:f9:61:09:a8:95:
b2:09:45:a0:47:6f:f4:74:be:63:6e:5c:1a:54:0f:
08:98:16:23:89:e9:8e:9d:f2:7f:d6:46:10:26:19:
52:a1:b6:3a:e8:0e:b4:f3:b7:dd:d7:13:1e:4c:2f:
9e:f4:bd:91:94:63:9a:28:c8:59:9e:94:95:a1:ae:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B6:04:C5:A1:9A:2F:6A:8C:B1:F5:D8:E7:0B:B1:2F:42:B3:23:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:c::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:d0:b6:74:13:da:44:9d:6c:90:be:d2:8f:0b:dd:d5:e0:11:
05:19:6f:6c:f3:92:a6:41:82:4b:37:01:cf:cf:29:10:2d:88:
4a:11:a7:13:79:ac:64:c3:b6:c9:0b:9c:68:f5:60:c6:2a:8d:
25:7e:4a:17:74:95:12:0d:de:2e:a4:b9:9b:80:92:07:f2:c9:
65:fa:11:34:18:9a:c7:fd:e6:48:61:9c:14:be:13:10:4a:91:
c8:fe:66:30:ba:fb:04:c9:8e:60:6a:7c:53:97:64:f7:cf:d7:
a3:a0:d8:92:1c:82:3e:e0:37:8b:64:d0:32:e7:3f:c0:8b:2a:
ad:b6:bc:0e:6f:84:c1:41:d3:8b:e4:4b:a7:f9:72:65:18:12:
8e:8b:5e:ef:25:16:dc:49:e9:d3:0d:72:eb:ae:71:47:9e:c2:
05:78:b5:c1:18:dc:fb:ed:ea:d2:9a:af:af:3b:e9:8f:d3:2f:
20:65:8e:0c:13:a3:24:77:1c:c8:c8:73:d9:44:59:ec:cd:9f:
e6:90:0c:21:18:13:de:e6:91:90:5b:fa:99:38:4a:1d:6c:59:
22:08:63:d6:dd:c8:6c:c8:0c:9e:d2:ca:f2:4d:4a:23:70:3b:
66:38:6d:3a:be:71:c9:03:46:bd:b9:97:6e:07:b5:73:71:43:
5e:2a:73:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUsVKOhCuHRS+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZGY3YTY5YjgtMzJjYi00YTcwLWFjZmQtZTMxMWZkZGI0MWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL0tmQk1ybENFBUiTytaMkg2O19SGtwWoOnW
4y/j5Xzxluc3u7AbulF9/snuOPcTPBPpKqxLrIQlegwFkW50RMOHnNG84GuYWoCf
Jy9BsMVH+LVWIgVKlHJBggOeYfRuDaxMOm4uTtgs33LHiTTTV05Xgtgvtd+uwChB
Xc+vSpvHsjb7x/DlQjxBvwVDD/fsAs+QEMcDePgFWkGPbTjgF4OfiIkC58lyKrav
EtBMYitIfcEGpv+5tDd+lF9h+WEJqJWyCUWgR2/0dL5jblwaVA8ImBYjiemOnfJ/
1kYQJhlSobY66A6087fd1xMeTC+e9L2RlGOaKMhZnpSVoa6LYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGy2BMWhmi9qjLH12OcLsS9CsyNUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQxMWUyYzYtM2FlNC0z
MDQ4LWE2YjktMTBiOWY0NGVjZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABrQtnQT2kSdbJC+0o8L3dXgEQUZb2zzkqZBgks3Ac/PKRAtiEoR
pxN5rGTDtskLnGj1YMYqjSV+Shd0lRIN3i6kuZuAkgfyyWX6ETQYmsf95khhnBS+
ExBKkcj+ZjC6+wTJjmBqfFOXZPfP16Og2JIcgj7gN4tk0DLnP8CLKq22vA5vhMFB
04vkS6f5cmUYEo6LXu8lFtxJ6dMNcuuucUeewgV4tcEY3Pvt6tKar6876Y/TLyBl
jgwToyR3HMjIc9lEWezNn+aQDCEYE97mkZBb+pk4Sh1sWSIIY9bdyGzIDJ7SyvJN
SiNwO2Y4bTq+cckDRr25l24HtXNxQ14qczE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:59 2025 by rpki-client