Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa
File: 2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa (raw, json)
Hash identifier: aEwzO50RyR++wftzHfAQktOsRyzoKPfMn9FGdwY3BIc=
Subject key identifier: 2B:98:B3:B5:A9:71:52:AD:C5:5E:D4:B0:A1:61:15:6B:9E:5C:69:DE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848960B6882E3E66EF4681EB2E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 396594
IP address blocks: 2620:74:2c::31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:68:82:e3:e6:6e:f4:68:1e:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=aa04f888-0ec6-441a-abdf-ebb5073fbe21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:1e:52:a1:28:46:29:8f:f1:ff:d5:c9:1c:
3a:f1:7e:05:29:00:0f:f8:52:4c:f5:0f:2b:cb:f9:
0d:df:1d:e1:4a:2b:73:e5:c5:d3:74:99:15:32:78:
ae:30:89:60:5c:32:5f:6a:63:f7:34:4e:fb:1c:e8:
b6:e4:ba:cc:5f:3c:64:70:43:4a:cb:5e:a4:96:d4:
9e:c4:d3:21:bd:01:0b:a9:d2:bb:23:b9:e6:55:46:
f9:96:6e:11:a8:0d:d2:e7:c7:f6:ac:7d:f0:17:34:
cc:cb:a8:97:74:fe:d5:b0:1e:3a:77:39:1e:39:b1:
bd:89:b6:62:88:84:90:ff:1e:60:f5:56:1d:4a:9a:
b5:d1:f6:f3:c8:75:86:35:01:53:94:9a:0c:ed:18:
e1:41:5c:eb:4f:a4:67:2e:11:55:28:4a:d6:1d:43:
df:fe:b8:88:2f:f4:c0:cb:71:d2:82:0f:4d:3c:8f:
5c:0f:ae:4a:86:11:5e:8a:c4:b1:42:0d:bd:3f:3a:
54:78:e4:23:4b:a7:0a:bc:15:39:68:38:21:13:b9:
b9:9c:d4:b3:c8:95:fa:4a:3d:f3:82:48:a2:4d:6a:
0c:55:32:e7:56:c5:c1:d2:06:05:81:08:38:0e:54:
38:e3:36:a3:a8:da:7b:5c:4a:6c:59:f6:cc:a9:b5:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:B3:B5:A9:71:52:AD:C5:5E:D4:B0:A1:61:15:6B:9E:5C:69:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2c:0:0:0:0:31/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:c9:a7:8f:f5:f3:aa:b2:7b:55:e4:3e:1e:eb:9e:2f:a6:d8:
07:80:63:c4:c4:f0:30:7e:7e:5e:87:b3:21:49:16:c8:8c:5c:
3a:32:87:72:4a:a0:b1:94:8e:7c:f0:32:2a:3e:f6:b3:dd:b0:
fd:6b:4d:6e:c9:a6:65:64:dd:cb:f3:10:d3:a2:71:87:59:b6:
8a:2d:61:20:e1:94:bd:c9:50:a0:e9:f3:14:a1:9a:fa:6c:a2:
e5:2b:f9:ab:69:ae:d6:6a:37:c1:eb:71:ec:88:b1:c7:22:34:
a1:ff:ec:67:6f:44:8c:a9:ad:e5:8c:8c:0f:74:b2:2d:87:a1:
b8:c9:fe:2c:95:df:51:07:ec:3e:56:d9:89:62:c2:1f:bc:5f:
2c:8c:93:3f:ca:ee:c8:53:1b:e5:c9:ed:0d:0d:81:68:8b:6e:
e8:19:c5:bc:3d:e6:0a:17:0b:36:7e:28:e4:90:c1:2f:65:02:
50:be:cb:13:ce:b3:80:ff:b2:3d:20:02:a5:c1:3d:10:28:cf:
19:91:22:c6:37:12:ec:bb:b4:1c:48:12:d1:7b:54:3b:9a:1e:
bf:2b:30:a0:1f:75:d5:80:4f:f9:e8:26:a7:92:8f:25:d8:49:
3f:d9:64:54:25:fc:1c:53:23:97:5d:b4:ec:e8:0e:62:92:63:
55:53:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:04:55 2025 by rpki-client