Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82d2c5d4-f58d-3f08-b57a-9ccf23fcd958.roa
File: 82d2c5d4-f58d-3f08-b57a-9ccf23fcd958.roa (raw, json)
Hash identifier: B/WW0fSYlHHS7E7ziZ/XubApViqEBZv/SE0YgG1lxck=
Subject key identifier: 52:82:1D:E3:02:EB:13:93:BA:41:7A:6F:BD:02:2C:A9:5A:BE:58:99
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584839EAD62001A86A04F0728D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82d2c5d4-f58d-3f08-b57a-9ccf23fcd958.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 396562
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d6:20:01:a8:6a:04:f0:72:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=23bc1b78-7d97-4baa-b9be-08fe928d98b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:1a:04:fc:66:a1:59:be:35:17:ac:a2:44:
ba:0e:fb:29:b9:9e:3e:3c:60:2d:88:53:de:26:ce:
6e:b1:48:1f:5a:4a:9f:8c:f4:b3:5a:7b:1c:5b:1e:
84:4a:ad:bb:f3:dc:32:28:77:f3:2f:60:4b:31:5f:
b7:63:5b:32:4b:48:37:76:db:3a:7e:b1:ef:54:be:
4b:b0:1c:e1:41:b9:19:7d:39:84:aa:6c:ee:26:f8:
2d:83:24:0a:5c:91:58:7d:8a:b6:ea:6a:0d:ad:99:
bf:67:bb:27:5b:be:b3:88:7a:7f:88:8e:8a:26:4f:
7c:09:77:86:ea:5c:2f:2d:8e:bf:20:e0:c0:ef:7c:
71:09:9e:95:bd:c2:07:a2:99:6f:5b:0d:b7:ba:d8:
0b:a7:20:f3:42:4f:6f:59:78:7f:ab:d9:32:a6:72:
4d:7d:e3:b7:86:19:d1:69:db:3a:1a:88:0b:af:f2:
3c:c3:b3:80:ab:c4:6d:86:fe:b7:33:87:29:f5:cb:
b4:a2:a4:11:84:2a:9d:99:a2:92:93:62:73:21:bd:
92:ba:b3:04:a2:da:97:64:a0:a4:81:e9:33:7b:be:
46:cb:7b:c4:50:17:9a:69:6c:9d:ec:b6:b2:26:9f:
8e:50:93:ec:bb:b4:85:c2:0d:16:91:22:e9:a0:f5:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:1D:E3:02:EB:13:93:BA:41:7A:6F:BD:02:2C:A9:5A:BE:58:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82d2c5d4-f58d-3f08-b57a-9ccf23fcd958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c8:96:3d:c9:af:0e:75:c7:57:3f:d3:bd:2b:9e:51:da:32:
90:c7:93:b3:02:a2:f0:c3:d2:47:32:d6:72:66:bf:80:5d:ba:
fa:14:8e:8f:1a:73:f2:0a:a9:ed:75:e6:3c:6c:43:77:6b:ae:
ca:cc:ea:56:d9:84:0c:a9:50:44:31:cb:bb:e7:74:9d:4d:21:
e6:a1:5b:6c:b3:ad:fe:cc:a8:5e:81:4c:2a:6c:31:9c:09:91:
9b:6b:fb:f9:ce:e3:97:61:4f:b2:d8:a1:99:45:88:84:8a:01:
93:77:ed:40:bb:fe:e1:36:ea:99:da:8e:1c:65:53:17:c6:b2:
a5:e1:c3:25:ec:c9:04:98:45:ac:5b:b3:42:6b:71:fb:2b:9c:
ff:4b:9a:8e:3f:57:77:07:6c:65:3f:32:20:af:49:20:12:3a:
7c:34:08:d8:64:d1:7b:5c:bf:4b:48:b8:ba:84:ef:55:b3:a8:
bc:ee:e0:70:37:90:f3:e4:68:64:cd:cb:46:3a:82:8c:e6:05:
d8:ae:59:43:d1:72:8d:c0:cd:ea:77:77:20:8b:1d:eb:40:57:
f9:83:b0:11:3e:6f:d1:6c:6d:2f:76:41:f6:9b:fa:6f:8a:28:
d4:22:09:90:bc:f1:8e:93:67:97:21:1f:dc:c9:df:62:f6:b6:
8d:3f:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:26:16 2025 by rpki-client