Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2e8e34-fa52-37ca-9998-c1cb0803c301.roa
File: 4d2e8e34-fa52-37ca-9998-c1cb0803c301.roa (raw, json)
Hash identifier: w0HY0yef4+YflpWbcO702lcsTJSiFsvnfZTFVfl4JOY=
Subject key identifier: 47:06:84:B7:7C:32:71:04:8F:E2:70:5C:8D:26:E0:FE:F5:93:0C:8E
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848064515A98C009BE868B3A6A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2e8e34-fa52-37ca-9998-c1cb0803c301.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 20431
IP address blocks: 2620:74:2a::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:15:a9:8c:00:9b:e8:68:b3:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=478cb620-b0ad-4612-b0a6-d1390643ed8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:3e:7d:ca:8f:5a:c7:57:87:83:a3:77:08:
9b:87:d2:b0:f5:f4:dd:1a:75:00:f0:2e:ce:51:5a:
7e:7e:01:1b:aa:65:e9:dd:d1:f6:9e:9f:51:d3:8c:
f2:9c:32:f9:c4:bc:95:ad:dc:89:82:6b:df:7e:54:
5a:31:88:4b:6b:72:65:ea:44:9f:99:d2:b5:8e:92:
3a:a5:46:fd:46:6a:7c:fd:a7:be:77:0f:7f:b6:7c:
ba:67:cb:ce:20:3c:8b:69:3c:c3:60:54:7d:36:dd:
8c:47:05:37:48:28:f4:29:08:5c:33:7d:38:ea:ba:
20:c7:79:17:72:6d:fc:a7:b5:a5:ce:b5:a1:9c:34:
fc:e2:89:ef:22:f6:f8:20:c9:7a:42:1f:57:73:cc:
02:73:23:f9:fb:89:28:5f:b8:9c:2c:56:f2:16:28:
a6:79:33:c2:6e:c3:48:55:ab:0d:23:67:ae:2d:f0:
d6:fd:21:1e:95:3a:be:66:ce:6b:23:f5:b7:0e:46:
38:d8:46:87:dd:a0:58:e5:5d:a2:60:67:3f:bf:c0:
27:c1:c7:0f:82:e0:4f:56:44:58:cc:5e:1f:45:57:
62:07:76:e1:b6:f3:30:82:36:ce:7a:33:b7:0a:ef:
08:10:de:20:21:c0:59:19:a4:38:21:ae:36:2b:47:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:84:B7:7C:32:71:04:8F:E2:70:5C:8D:26:E0:FE:F5:93:0C:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2e8e34-fa52-37ca-9998-c1cb0803c301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:2a:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:58:12:76:7f:19:a3:28:e5:e2:b6:4f:1e:97:55:31:07:f5:
05:23:5a:c6:89:05:4b:e1:57:e3:43:97:b9:a7:6a:65:8d:cb:
3a:13:52:ed:51:3f:47:41:3d:d2:e5:68:34:f1:c1:1b:0a:48:
18:93:97:2c:bd:fb:6c:4d:1c:c6:88:4f:eb:79:76:6b:47:87:
85:dc:71:ab:dd:1d:19:e2:29:ed:1f:a2:5b:65:09:c2:d6:ff:
0c:89:53:69:05:de:d1:d1:3d:9a:de:01:47:15:a8:c5:42:c3:
bd:ec:72:ac:a3:18:ae:37:9b:14:1c:d2:91:f9:ec:a0:8b:47:
2e:b6:19:f0:5c:91:d4:73:45:65:eb:25:a3:d0:c9:5e:0a:a7:
d2:dd:1e:85:f3:43:70:74:72:db:f4:e6:51:fc:1a:44:f0:59:
b0:e2:de:c0:da:6b:73:c5:d6:8d:ff:ac:f0:fe:a2:61:6a:98:
45:90:66:c4:fa:15:2f:b8:bc:d4:c2:b2:e8:cd:57:bc:fd:a3:
99:8f:27:cf:a0:8b:13:72:92:b4:21:1a:56:fb:e6:f2:c3:77:
91:15:bf:47:6b:3d:61:83:db:58:f9:6a:13:2c:3d:c8:f7:01:
ac:87:cd:11:17:c8:75:ba:9b:b7:6f:0c:ba:b4:3c:dc:15:57:
48:93:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:29:50 2025 by rpki-client