Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa
File: a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa (raw, json)
Hash identifier: wgb0rpUs+JrmzuiZh9AMxt5tVCqK8+yzIwge+IR3qs4=
Subject key identifier: 11:BC:23:20:56:30:0E:A9:B3:2B:22:02:FC:78:67:94:95:C1:68:CC
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848F9268B57F761C7EE43445200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 396587
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:8b:57:f7:61:c7:ee:43:44:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=d2e910da-be3b-459c-8383-d2fa4b3b3802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:02:3b:3d:b8:9a:f6:c6:c6:5d:c5:94:a9:
7c:0c:3f:c4:48:50:f7:c9:0a:9b:72:10:fc:db:94:
9f:91:3f:94:db:9e:d4:20:69:c4:7b:0e:71:25:b4:
ec:81:ba:6f:11:f8:e8:e0:6f:cf:ee:36:80:1c:c4:
8f:af:54:9a:3e:46:1d:3d:29:46:16:ae:38:df:ba:
f5:f4:91:79:24:59:e4:f7:d3:07:a7:90:a8:d5:ba:
45:5d:d4:fd:4e:25:bb:41:9c:58:b7:1f:f0:1c:04:
eb:e9:81:84:6c:7c:18:49:a7:4f:97:c1:99:03:cb:
b3:6e:02:de:f6:37:3a:71:a6:74:4a:5f:e6:d1:a4:
31:b0:25:d1:4e:85:4e:31:45:37:1d:91:e6:f5:f8:
34:3a:09:ee:e2:f0:8e:6a:38:bc:d3:72:c4:72:41:
a0:31:4e:f8:aa:db:ba:79:af:34:65:3c:40:1d:a3:
81:81:75:38:46:17:bb:a4:9a:cd:44:0a:20:be:37:
a9:13:d4:ab:7d:e9:e1:3f:9d:b8:16:4e:d0:df:b6:
d4:b9:1a:36:cc:fe:db:69:3e:b6:2f:f1:c6:bc:ad:
7f:8f:28:de:82:43:1f:bf:7d:d2:a7:fc:a8:78:70:
66:62:e9:f6:3b:a0:48:77:99:68:3f:a3:a1:88:f0:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BC:23:20:56:30:0E:A9:B3:2B:22:02:FC:78:67:94:95:C1:68:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e2:ad:0f:47:14:75:3a:de:26:7a:5f:af:45:fa:b5:a4:56:
f7:8a:d3:89:15:1d:01:93:7b:c5:9f:a6:00:d1:84:15:26:07:
1e:03:39:1d:40:cc:80:07:e0:a0:c5:3d:8e:73:6c:56:3e:34:
e3:ec:73:ca:a5:8f:10:1d:f0:34:f7:b4:2a:27:d1:a0:ff:2b:
8b:5e:5e:73:68:d1:c8:4f:e9:f2:64:3f:ab:65:e1:5f:b1:35:
43:f9:ff:bf:e2:9c:85:b0:97:02:36:70:22:f9:d2:23:1f:22:
68:01:5a:17:45:ea:f0:cd:24:5e:58:ab:b2:13:0c:08:4b:1d:
6d:2a:9d:3b:8b:7b:a9:d2:7a:80:a3:d5:d8:15:6e:dd:e3:3e:
2d:c2:16:3b:e4:aa:0e:0e:35:5d:23:f2:ec:2d:07:7b:26:fa:
28:dc:8e:34:d9:b2:1c:67:10:02:5a:49:40:a6:88:a5:a6:2a:
a1:d8:cb:fb:14:95:75:fb:48:c5:af:8c:2c:fd:5b:7c:3d:70:
b2:95:44:8c:34:7e:cb:07:85:46:95:0e:8d:94:c7:8b:4d:0e:
3b:52:e8:1d:d3:1e:14:11:17:1f:e0:c1:10:01:54:45:2a:b7:
60:3d:6d:95:28:f3:47:09:bd:3d:b4:58:f5:e4:53:6a:6a:d5:
4c:bb:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:37 2025 by rpki-client