Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599e6a3a-76dc-3801-b84a-d080b136c034.roa
File: 599e6a3a-76dc-3801-b84a-d080b136c034.roa (raw, json)
Hash identifier: QDeQWheP/krQ7sBzeeTyVvsmSFLzNVSdEM1+1EZEC9E=
Subject key identifier: 5E:76:97:37:F1:5E:D8:D7:70:3D:7C:79:11:50:48:2F:99:9E:E4:00
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A9ABDC5E9DCAEAB0D3800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599e6a3a-76dc-3801-b84a-d080b136c034.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396557
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:9a:bd:c5:e9:dc:ae:ab:0d:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=0bb327dc-76c7-4ad4-a064-d6633e83bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:8d:d4:31:21:3a:25:e3:d6:c0:10:90:87:
c2:8d:93:af:55:a3:03:1a:a4:6c:5a:99:6a:d0:9b:
3b:99:15:57:a9:2f:3f:47:b4:c9:1e:87:e0:5d:7e:
e3:af:5a:60:ec:ba:97:38:e7:2c:00:16:3d:cf:0d:
98:14:26:49:18:c0:ab:ee:e1:56:75:08:9b:3f:c3:
ba:b4:6f:99:71:57:a3:92:fc:b0:5b:d1:b9:cb:ff:
d8:70:72:a1:67:e2:5d:2b:e2:ca:e2:e5:05:ed:65:
43:be:71:9a:48:91:e7:79:cd:44:a5:11:2b:1a:64:
ed:26:99:91:79:1c:1b:74:d7:e6:ad:28:31:b3:03:
a4:e0:59:bf:78:21:9b:02:6b:d4:ba:5c:95:cb:1c:
86:44:77:1a:6a:4c:bb:d3:8d:e3:39:c1:02:40:ef:
0b:57:16:2d:57:3b:a4:ad:3b:d7:57:83:4d:77:7d:
89:7c:ca:7a:03:69:31:3f:2a:d8:3f:71:31:1a:6d:
d7:74:05:01:0f:b7:c4:97:02:02:ad:d8:be:aa:98:
2c:b9:b8:13:1c:06:82:e0:3d:d7:aa:bc:86:c3:a8:
95:f4:70:e7:78:b2:5f:03:c0:f4:c8:36:3a:13:01:
29:e6:08:97:23:0d:8b:f9:5c:dd:f4:4d:d9:3d:2a:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:76:97:37:F1:5E:D8:D7:70:3D:7C:79:11:50:48:2F:99:9E:E4:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599e6a3a-76dc-3801-b84a-d080b136c034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:ee:0f:e2:80:e7:a2:d2:71:50:a6:a0:8f:2a:23:fa:6d:87:
0c:f9:9f:c5:9d:33:00:f3:5d:65:84:75:03:a9:2d:74:4e:d4:
63:51:30:dc:a0:37:28:e0:68:b7:e8:b0:60:fa:59:80:dc:d3:
2e:34:0a:a3:44:68:04:30:87:85:cb:b5:f6:5c:73:12:6c:41:
5b:57:7f:e2:e5:37:45:6f:b3:e4:1c:c0:1b:40:36:4b:93:cc:
94:e8:32:16:bf:ff:05:6c:fb:26:8b:ab:d2:3e:8b:f8:c7:ac:
9a:ac:ff:9b:5f:9c:e3:ae:07:37:4c:6a:3c:c9:b2:0c:66:65:
76:00:01:56:2f:73:f5:cf:cc:0c:0c:8d:c9:be:73:07:f6:69:
bd:32:8f:ea:79:ca:28:46:4f:cb:d5:5b:24:97:d1:cb:d5:3f:
8f:09:64:63:b0:2e:d4:cf:bd:d3:37:18:42:fa:7c:be:74:1f:
e1:a5:a4:8d:f0:3a:a4:56:da:2e:15:85:df:97:75:23:53:aa:
60:0c:b4:0d:dd:78:44:35:b2:86:61:25:d4:fb:28:79:14:df:
d3:06:d5:25:a5:e1:63:71:71:f6:34:9b:38:17:37:a2:80:d0:
bc:51:90:0e:6d:e7:e0:ae:7d:d0:34:3b:1c:af:3a:b7:8b:58:
5d:e1:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:19 2025 by rpki-client