Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa
File: a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa (raw, json)
Hash identifier: HdBeUkBP8MwW7WDwg+HS/oeBWhOn/qfe+HEnigqOYOY=
Subject key identifier: 3A:74:D4:E6:05:B4:A0:1E:2B:7C:CD:2C:8B:EA:59:B0:0B:59:1E:C0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110B4AD4CD270608F18720
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396552
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0b:4a:d4:cd:27:06:08:f1:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=f92f71ab-b1e3-48fb-8000-b4b453284101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:cd:7e:55:17:41:9b:44:6b:15:e5:59:76:
fa:d6:d7:95:4f:ca:ce:2b:06:76:f0:cb:c0:8c:a7:
18:fd:f3:49:af:55:94:aa:e9:e8:f0:31:2e:df:6f:
89:89:97:3e:07:8e:61:c5:87:3a:5e:34:38:6f:92:
5d:c4:82:fc:14:88:e6:14:0e:37:4a:b2:41:97:fb:
54:a2:9e:1d:d0:e9:f6:63:27:b8:14:cc:bb:aa:9f:
1f:b7:9e:c3:69:d9:cd:a0:3a:17:17:cc:94:f0:ff:
40:48:f1:f1:7c:d5:87:04:09:3b:1e:0b:b1:f2:71:
b4:0d:b1:af:ca:63:af:72:bb:4c:54:06:d5:19:92:
b0:3f:b1:85:c7:9b:3b:77:99:bd:ea:5b:1b:9a:d7:
ed:83:67:22:82:40:bb:96:c8:9a:7c:ff:34:fd:24:
39:35:f4:d9:34:d9:9f:02:00:26:50:af:68:df:82:
a5:b2:36:79:19:20:e5:35:b1:b4:81:98:dd:53:18:
63:d4:44:bc:e1:76:c1:d8:ed:6d:3a:3b:46:cf:b0:
b2:e0:d2:ab:61:30:c3:8d:a6:64:63:40:23:7f:24:
9b:c3:27:c7:87:4b:63:2b:6b:98:bc:c4:40:d1:70:
b1:13:e1:20:56:3c:84:16:71:dd:77:54:59:47:6d:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:D4:E6:05:B4:A0:1E:2B:7C:CD:2C:8B:EA:59:B0:0B:59:1E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:15:aa:5a:84:a9:c1:71:ec:5a:a7:25:8e:a1:29:9b:fa:64:
8d:92:26:5b:37:67:93:3a:37:57:a6:a6:cb:29:e3:6f:a6:9a:
bd:97:bd:fe:3a:e1:ab:50:ce:92:e7:6f:8e:e1:7e:33:02:11:
ad:80:9a:48:67:22:b7:a1:8d:e4:48:e7:e0:19:17:c4:88:c9:
25:64:8f:65:f7:4f:c2:95:7c:41:59:26:1d:ff:85:33:92:48:
fe:30:2b:cb:b2:2c:5e:36:7f:4d:c6:26:4d:dc:a9:22:0a:63:
88:b7:96:a2:71:d4:24:da:cd:22:a5:a2:26:db:b3:21:b7:2f:
5d:1a:b0:d3:39:a3:55:1d:0c:04:e7:6f:c7:70:91:df:03:bd:
dd:15:5a:61:da:81:df:fc:44:33:43:fc:5b:22:14:36:12:e2:
51:da:82:d7:0d:58:d2:7f:a7:09:8a:1d:89:1b:12:42:5e:02:
b9:5d:e7:12:75:4d:95:42:48:7a:e1:3d:64:54:a7:d1:f0:9d:
88:ea:02:69:b2:6e:fa:b7:39:f5:9b:2d:b0:27:d9:6f:bb:72:
2b:46:fe:17:77:88:5c:65:aa:fc:5c:7d:40:de:95:ec:fe:d7:
35:4f:07:c3:00:e5:44:ff:4a:b6:03:3f:b3:0b:3b:9e:c8:d8:
40:e5:c7:db
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQtK1M0nBgjxhyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjkyZjcxYWItYjFlMy00OGZiLTgwMDAtYjRiNDUzMjg0MTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kvNflUXQZtEaxXlWXb61teVT8rOKwZ28MvA
jKcY/fNJr1WUquno8DEu32+JiZc+B45hxYc6XjQ4b5JdxIL8FIjmFA43SrJBl/tU
op4d0On2Yye4FMy7qp8ft57DadnNoDoXF8yU8P9ASPHxfNWHBAk7Hgux8nG0DbGv
ymOvcrtMVAbVGZKwP7GFx5s7d5m96lsbmtftg2cigkC7lsiafP80/SQ5NfTZNNmf
AgAmUK9o34KlsjZ5GSDlNbG0gZjdUxhj1ES84XbB2O1tOjtGz7Cy4NKrYTDDjaZk
Y0AjfySbwyfHh0tjK2uYvMRA0XCxE+EgVjyEFnHdd1RZR21QDwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDp01OYFtKAeK3zNLIvqWbALWR7AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdhNjcyMzEtNGFkNS0z
MmQxLWFlZDktMTk0ZGQxZWYwZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQANFapahKnBcexapyWOoSmb+mSNkiZbN2eTOjdX
pqbLKeNvppq9l73+OuGrUM6S52+O4X4zAhGtgJpIZyK3oY3kSOfgGRfEiMklZI9l
90/ClXxBWSYd/4Uzkkj+MCvLsixeNn9NxiZN3KkiCmOIt5aicdQk2s0ipaIm27Mh
ty9dGrDTOaNVHQwE52/HcJHfA73dFVph2oHf/EQzQ/xbIhQ2EuJR2oLXDVjSf6cJ
ih2JGxJCXgK5XecSdU2VQkh64T1kVKfR8J2I6gJpsm76tzn1my2wJ9lvu3IrRv4X
d4hcZar8XH1A3pXs/tc1TwfDAOVE/0q2Az+zCzueyNhA5cfb
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:20 2025 by rpki-client