Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
File: b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa (raw, json)
Hash identifier: XuJDZZEHPW+KsSh+8FXfUUdOfBvS5XRF3yRPiJHPTkY=
Subject key identifier: 3A:EE:CC:31:03:8C:3F:A8:1D:14:51:46:49:57:A2:15:15:18:3A:14
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E59BDB31D05E4E9C91916600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 396552
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:db:31:d0:5e:4e:9c:91:91:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=a1b90125-5f29-4c69-84cb-215f3aa426e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:ce:25:6a:c9:ae:e5:08:36:8c:b1:1b:60:
52:bc:42:31:00:7d:26:9a:01:e3:46:ea:8a:89:e2:
f4:73:1c:7b:4e:3e:17:cf:63:1f:f2:70:4d:53:f5:
cd:dd:ef:9d:26:0e:ee:3b:85:26:bb:3a:0d:74:82:
a9:77:c3:55:d8:a7:e0:7e:50:d3:15:d0:75:fd:f0:
d8:37:c3:4f:f0:ab:77:91:3c:83:1c:4d:df:e0:e8:
1d:6c:8a:d8:af:c3:bd:9e:79:de:24:0b:f9:d8:14:
7c:2c:b8:4d:6e:e1:f6:a2:7b:ff:aa:9e:92:4c:f3:
cf:ff:da:7e:4d:a3:a5:7c:d5:cb:6d:de:ce:e9:46:
41:e5:6f:3e:ae:7f:66:17:c0:1a:a6:a4:82:f1:66:
8e:a2:b4:83:e1:33:35:47:b7:c1:17:f1:02:0d:a1:
d0:7c:c7:1b:cd:71:b7:16:a2:95:aa:b8:b0:19:c9:
bc:12:26:9a:93:be:04:43:7e:6b:ef:86:b0:a7:5a:
47:93:0a:3a:4b:91:d8:d9:7b:91:46:4d:50:ba:8a:
5a:0f:12:6e:d0:99:e0:a5:02:38:36:a0:43:b4:cf:
80:26:ec:11:cc:34:3a:04:4b:55:c9:d3:e6:4d:8f:
0a:34:42:d9:42:7e:50:0f:86:74:dd:8b:99:42:34:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:CC:31:03:8C:3F:A8:1D:14:51:46:49:57:A2:15:15:18:3A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:28:4c:76:be:0a:7a:3d:7a:70:02:ad:c5:54:8d:3b:d8:2c:
d8:cc:61:ba:99:3b:7a:dc:3c:45:d4:1b:3b:d4:8c:d8:32:1e:
9b:33:2d:db:bc:4d:8d:e8:db:e6:c6:a2:fd:32:e5:f5:73:1a:
f4:62:52:28:b2:f4:41:db:00:bd:aa:fd:dd:7f:70:70:9f:d9:
38:62:8d:fa:ed:6b:74:0d:33:54:ff:8f:55:4c:8a:64:ca:c2:
00:e7:02:f1:cf:98:7b:2e:05:f9:24:fe:b1:96:3b:b1:a6:2d:
29:28:74:1e:08:4a:cb:7d:fc:ff:a1:ab:b3:f6:9d:ed:a5:22:
40:a0:15:43:3c:5c:a4:76:89:19:93:26:42:81:01:cd:90:9e:
15:59:84:20:4e:21:64:52:f0:7e:41:24:ed:41:18:8f:7d:33:
ef:6f:e1:23:9e:86:db:53:d8:5c:b0:56:fd:ba:eb:89:76:a7:
45:4a:9e:d5:22:73:c2:1a:4f:09:a1:2a:cc:5e:de:25:70:18:
be:3b:65:d4:39:dd:e0:5e:49:a6:8a:8a:ac:70:76:03:45:ea:
ca:42:81:e0:4c:04:1f:20:a1:9e:9c:8b:a5:5e:bf:eb:bf:47:
34:2b:3a:62:cf:c1:76:46:4c:53:ab:25:63:e7:f7:9f:cc:36:
ab:5f:56:13
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9sx0F5OnJGRZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YTFiOTAxMjUtNWYyOS00YzY5LTg0Y2ItMjE1ZjNhYTQyNmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFrOJWrJruUINoyxG2BSvEIxAH0mmgHjRuqK
ieL0cxx7Tj4Xz2Mf8nBNU/XN3e+dJg7uO4UmuzoNdIKpd8NV2KfgflDTFdB1/fDY
N8NP8Kt3kTyDHE3f4OgdbIrYr8O9nnneJAv52BR8LLhNbuH2onv/qp6STPPP/9p+
TaOlfNXLbd7O6UZB5W8+rn9mF8AapqSC8WaOorSD4TM1R7fBF/ECDaHQfMcbzXG3
FqKVqriwGcm8Eiaak74EQ35r74awp1pHkwo6S5HY2XuRRk1QuopaDxJu0JngpQI4
NqBDtM+AJuwRzDQ6BEtVydPmTY8KNELZQn5QD4Z03YuZQjRBqQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDruzDEDjD+oHRRRRklXohUVGDoUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxZTZhZmEtNDMyYy0z
ZTk3LWJjY2MtZDNiNDBjMTBkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQASKEx2vgp6PXpwAq3FVI072CzYzGG6mTt63DxF
1Bs71IzYMh6bMy3bvE2N6NvmxqL9MuX1cxr0YlIosvRB2wC9qv3df3Bwn9k4Yo36
7Wt0DTNU/49VTIpkysIA5wLxz5h7LgX5JP6xljuxpi0pKHQeCErLffz/oauz9p3t
pSJAoBVDPFykdokZkyZCgQHNkJ4VWYQgTiFkUvB+QSTtQRiPfTPvb+EjnobbU9hc
sFb9uuuJdqdFSp7VInPCGk8JoSrMXt4lcBi+O2XUOd3gXkmmioqscHYDRerKQoHg
TAQfIKGenIulXr/rv0c0Kzpiz8F2RkxTqyVj5/efzDarX1YT
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:55 2025 by rpki-client