Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa
File: c1f640a7-5a4a-357a-8532-645c9226a461.roa (raw, json)
Hash identifier: 5G31Q+Tp+XzoGn4Nj6Y9m0fn2R3Js6ZHriO+j4mx4dE=
Subject key identifier: 8E:8D:14:85:41:3A:BE:8E:E9:D4:9C:F8:A5:FE:D1:EF:8C:72:A8:AD
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B6D261FF00D9064F36080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 396567
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:6d:26:1f:f0:0d:90:64:f3:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=a6e02947-f3e2-4430-9f10-11bc5165a07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:94:31:6c:61:38:99:b0:55:68:8f:5a:ef:
9e:e8:6c:79:b2:70:c9:18:b3:95:fc:48:60:a5:73:
a1:aa:54:dd:60:5c:46:58:6c:11:41:fc:1c:7f:a9:
90:c5:b4:c8:79:44:90:4d:23:07:1b:8e:55:97:04:
73:3d:68:43:f8:e0:c3:b9:70:c7:74:d4:72:83:28:
f0:94:55:a4:03:cc:80:3d:be:8e:c3:95:d7:75:4d:
e7:c0:b6:08:3a:f1:ad:6a:3e:fb:d0:65:f1:a5:3e:
fc:61:66:e3:5a:9f:42:ba:37:97:e6:cc:4d:59:e8:
18:5b:e5:23:bb:8c:fd:cf:1f:df:44:2b:1a:e6:09:
cc:8c:9a:2d:09:bb:bc:7e:93:48:7d:83:0e:35:7b:
5e:3b:29:47:89:c6:fc:90:d5:56:29:b6:0b:2b:78:
7e:09:de:3a:44:9f:f6:73:51:bb:7a:2f:89:fe:5e:
e5:cb:3f:e5:0f:5a:b8:40:f1:69:ef:56:40:8c:84:
3d:20:44:cd:af:79:0b:59:7d:81:04:0c:d1:50:01:
c1:24:25:bb:dd:22:22:a4:4e:f4:98:d6:0d:ca:84:
33:7e:54:92:f7:f6:ce:82:09:28:81:90:b7:74:6e:
05:fe:bf:2d:a0:50:91:73:82:5e:b0:68:ec:fb:f7:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:14:85:41:3A:BE:8E:E9:D4:9C:F8:A5:FE:D1:EF:8C:72:A8:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b2:74:de:30:00:fe:72:24:fc:f6:b3:98:df:9e:8a:33:24:
11:8b:31:01:14:5b:a5:ac:dc:1a:b1:cc:1c:c6:13:db:76:08:
09:9f:22:19:cc:fa:3c:76:d6:c4:0e:04:29:e3:0e:a9:aa:ab:
40:aa:14:3f:a2:8a:77:8b:e6:9a:70:47:30:55:a3:35:4a:d3:
c2:d7:80:cc:04:c9:41:1d:99:87:67:f9:a5:13:98:86:4c:8a:
59:9a:20:a7:75:17:40:f9:32:9a:54:0c:ae:82:d5:92:5a:20:
91:d4:18:fe:7c:6b:d9:4a:7a:87:73:b9:5a:4a:a3:a8:19:4f:
4e:f0:fc:19:d3:b5:89:ec:82:52:43:a2:e1:f7:bb:05:ad:55:
1e:9a:b5:62:1b:75:ce:b3:a6:2e:07:d4:59:4f:71:98:ae:3a:
2c:5e:53:f8:9b:e8:49:b7:e0:c6:f9:b1:27:fa:1e:f4:00:39:
ad:0b:99:60:b2:57:3e:36:eb:11:0d:07:74:01:8c:05:ea:a2:
65:38:30:d8:4e:44:de:6f:ae:cc:8d:87:d7:25:b2:1d:00:cc:
41:41:77:a4:bf:09:77:14:42:0f:88:7c:d8:02:5c:10:41:c5:
24:a1:77:c5:51:27:94:5a:44:77:fe:90:a0:fe:2f:2d:ee:0d:
57:35:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:07 2025 by rpki-client