Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbb7e22c-422a-357d-801e-f151e2f43a1a.roa
File: dbb7e22c-422a-357d-801e-f151e2f43a1a.roa (raw, json)
Hash identifier: KW7N8l/DFFyNMv8Eq3sd0g4uggUZU1GpIn4/1v7aerQ=
Subject key identifier: 40:39:C2:38:4A:3F:EC:25:0E:E8:C2:37:7C:FA:A6:14:CA:45:AC:66
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848D2110B5A8AF64AFAC1ACCBC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbb7e22c-422a-357d-801e-f151e2f43a1a.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 396555
IP address blocks: 2620:74:2b::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:0b:5a:8a:f6:4a:fa:c1:ac:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=fb693bf1-062d-4e30-aab4-061b721839a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:53:5c:94:6b:fd:6f:f3:66:69:d8:6d:48:
e0:09:7f:bf:49:c6:0c:4b:a5:da:96:d6:46:e4:36:
19:11:11:90:59:bd:75:5d:c7:2a:6f:f7:12:fb:08:
28:10:b9:b9:52:9a:43:69:27:ed:11:55:1b:a5:1e:
94:d4:55:e8:d7:9d:28:e0:45:22:b9:82:fe:87:28:
f5:5b:30:37:23:e9:e1:9c:b5:06:71:5a:02:a6:d7:
f3:d7:ef:70:85:0d:d3:03:88:ee:b6:a1:a4:9c:a5:
00:2f:53:75:0b:5f:3b:a1:2e:ad:d5:87:f6:83:53:
95:cd:b5:1c:5c:64:41:43:69:07:6c:73:6f:9b:fa:
5d:03:ee:ff:20:0e:35:ea:be:02:9f:b4:b0:a5:e2:
51:08:18:fa:f0:1d:6f:02:db:41:6a:a3:ab:13:53:
41:e0:54:3a:bc:54:7d:07:a7:bc:52:bc:97:ff:05:
04:1a:e0:32:d3:49:5b:08:43:35:b8:15:e5:2c:88:
d5:72:62:68:83:33:e3:9b:69:d0:36:78:25:95:9d:
94:79:4f:f8:f6:93:8c:e6:eb:a5:bc:a4:6f:18:f9:
6f:05:72:c7:6a:f5:14:57:f6:2a:25:f9:30:c0:d5:
05:b2:42:68:9b:82:e0:82:df:fe:03:50:ad:79:5c:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:C2:38:4A:3F:EC:25:0E:E8:C2:37:7C:FA:A6:14:CA:45:AC:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbb7e22c-422a-357d-801e-f151e2f43a1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2b:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:7f:00:4f:d1:8d:26:65:23:2c:d5:e9:bd:2d:06:bd:cb:63:
c5:a1:79:88:66:79:c5:a5:21:0a:c4:6f:cb:b4:de:e2:20:19:
59:9a:22:4c:c7:26:6e:ee:8d:6d:58:95:a5:7c:bb:6a:b3:3a:
2a:f9:e8:72:33:94:26:5b:8c:9e:6c:23:f1:44:3e:46:b9:c0:
d1:07:4b:f5:d8:f4:73:e0:9a:1c:cb:99:fd:3d:02:d6:aa:53:
ec:6c:4c:52:d7:69:3b:86:90:95:39:32:5e:f3:08:8b:0b:05:
e1:bc:3f:49:42:85:08:6f:4d:ab:74:ba:c6:8f:6a:5a:6f:32:
90:dc:30:39:7e:37:14:be:12:84:3d:3f:90:8f:87:67:89:65:
78:09:ac:07:90:11:41:26:00:01:b6:72:55:8c:26:46:d9:d5:
41:90:3c:69:18:62:40:ed:6e:47:93:6c:d5:da:62:78:f0:8f:
95:48:07:82:f9:59:c4:b1:57:66:cd:e7:f4:92:67:c3:e7:5c:
e7:ca:b8:01:97:6e:d3:4b:3f:45:b4:86:17:97:f8:99:e0:d1:
b6:fa:37:16:42:36:05:38:3f:8b:a5:2d:e3:7d:7d:b7:1e:c8:
08:87:b6:17:50:f6:8e:b6:d9:06:f0:9c:ce:94:89:ee:58:81:
b4:85:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:52 2025 by rpki-client