Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa
File: 4548f520-15a9-3a02-9b0b-596986e2e25b.roa (raw, json)
Hash identifier: Lqo3NCUJDvPhPYm5qiEUWARPZ2mLUID+BM9bHqhx9U4=
Subject key identifier: 14:25:EB:3A:F2:64:25:9F:77:E6:1F:98:64:3C:95:02:80:E5:2E:CE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584855D5A4100795B1B79887C600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 0
IP address blocks: 2620:74:ef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a4:10:07:95:b1:b7:98:87:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=3a56de12-01bd-4afb-9c7f-49e5afa927ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:f1:bc:63:91:49:8a:8e:85:6c:44:5f:81:
f5:96:f3:4a:eb:69:bb:46:f2:cc:1a:75:56:08:01:
67:7b:e5:f1:b2:5a:52:f8:a2:3a:14:9c:05:ad:e1:
2a:f6:02:a9:cf:21:3c:91:13:77:5c:67:77:48:0d:
c0:6a:ac:b8:89:f3:3a:a8:fb:43:17:36:01:87:0b:
84:4c:a6:0c:02:b6:f7:09:55:76:3a:6c:26:1e:ad:
c1:73:de:27:45:9f:bf:3c:d5:1f:be:59:39:37:8d:
c3:ea:dd:d6:7c:08:87:56:58:48:9b:bc:4d:95:77:
d3:54:fd:3a:71:25:b0:c1:1e:15:ba:ed:d5:6c:4b:
e1:5d:99:18:d5:0d:61:8d:81:d5:b8:f0:b2:4c:4c:
18:bd:20:60:f2:86:12:b3:19:14:13:a1:d9:75:d7:
94:ca:78:ad:98:25:2e:40:7c:57:b4:d2:f0:25:df:
07:43:2d:c4:f6:99:8c:c5:19:43:57:fd:55:80:74:
a3:e7:a9:ee:b0:b1:d9:ff:26:a7:de:eb:69:77:f6:
86:90:12:ac:42:0f:7b:f5:5d:02:27:c6:17:ac:f7:
54:a7:3d:2e:59:df:ec:30:4e:98:b8:04:82:87:f4:
1e:59:4e:84:41:66:24:e6:a7:ef:c6:77:61:70:32:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:EB:3A:F2:64:25:9F:77:E6:1F:98:64:3C:95:02:80:E5:2E:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:ef::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:20:0e:4d:c7:3b:66:e2:bc:f1:20:0b:7f:69:3d:c9:4b:d7:
7a:f8:29:36:e0:7f:dd:5b:32:09:b2:98:5a:38:7a:73:6d:ed:
68:4c:4c:b6:c4:e8:07:03:b9:3a:22:d5:92:1e:5a:31:23:a4:
a2:e5:52:a6:78:79:47:91:6a:5f:93:05:b8:e5:2e:12:bf:22:
2a:73:04:f4:1f:ca:a8:a8:e7:c2:88:78:a2:f3:76:b9:2c:64:
bc:f1:9c:48:c1:c4:12:71:a5:a3:7d:cd:e6:8d:8d:7e:2e:65:
ef:60:89:fb:02:d3:89:5e:11:b9:55:02:6f:ea:e2:07:98:9a:
e9:fc:7d:d7:ea:ff:9c:cd:c6:4b:e9:a1:b8:1b:28:46:b7:b6:
ca:c1:38:fb:9f:6f:9d:95:62:26:3f:52:a8:0a:88:6b:8c:84:
7e:6f:65:cf:23:46:6b:d1:d3:76:9d:db:73:8c:9a:dc:13:b5:
15:d3:63:2d:9e:e9:df:cf:8a:ac:66:09:b2:cc:66:7a:2d:e1:
a5:73:1f:86:96:46:ed:20:97:03:99:15:14:fc:c7:84:c3:f4:
e8:dd:8f:6a:48:82:6b:41:d6:62:54:d2:41:72:8f:fc:aa:89:
f3:b1:f2:fc:18:3d:db:5d:8c:d2:ad:ee:0c:2c:e1:4f:51:46:
cb:70:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:20 2025 by rpki-client