Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa
File: b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa (raw, json)
Hash identifier: Eydfcey0NW37NuVcFGWAZies50JO8nPjhorBYKbKaYs=
Subject key identifier: A3:0F:5C:ED:83:AA:5B:90:24:F0:D6:E2:19:88:E8:9C:77:4F:06:5D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D905774B9DF8A87FBEF6570
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 2620:74:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:57:74:b9:df:8a:87:fb:ef:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=0d800608-89ad-4680-ab6d-d149ab2fea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:48:a2:66:03:af:7b:c9:2a:44:f5:84:6f:
53:3b:74:6d:e7:81:6f:b1:05:c0:04:43:06:cb:e1:
a8:1e:f9:00:38:55:ab:83:5b:82:dd:7e:e1:b1:d0:
1e:4c:34:5d:b0:84:f5:48:a4:17:b4:cb:94:e8:9a:
9c:18:81:0f:0f:f3:69:4c:58:e1:90:16:a5:f4:b1:
dc:af:9b:15:6f:2e:76:d0:6c:96:fe:d2:bc:df:65:
25:dd:b5:47:cf:fa:ea:bf:7e:b8:6a:23:c8:ac:04:
7c:8e:24:7d:07:4c:e4:c7:c6:1e:93:47:1d:52:fe:
f4:da:0a:85:4f:a0:ac:40:e8:79:7f:0c:16:08:da:
3e:3a:1d:f2:bc:9f:bb:19:4d:d9:5c:3e:6b:54:05:
7d:c1:27:ae:fb:65:ce:21:79:1c:94:a7:28:d2:40:
89:c5:06:16:ac:12:c1:75:6b:b6:e6:f4:86:7a:9a:
2a:b6:fb:ee:d0:73:4d:14:75:32:81:1b:cc:95:e0:
0f:a2:a9:6e:a0:7a:29:4e:92:86:cb:15:1b:98:7b:
bd:28:5c:ba:db:a7:0e:c5:5c:dc:d5:f1:38:93:88:
07:04:43:85:0a:94:3f:64:2e:0e:77:dc:c5:c7:1f:
eb:68:26:35:97:1e:18:33:10:0f:29:6a:05:d5:c5:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0F:5C:ED:83:AA:5B:90:24:F0:D6:E2:19:88:E8:9C:77:4F:06:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f8:13:61:9d:38:7b:a6:3c:a4:f0:6a:c9:67:38:e1:47:be:
ed:43:ed:c1:9d:b4:93:95:72:4d:39:fc:b0:c5:c5:be:6a:72:
95:3a:1a:cc:1f:65:5b:d0:af:2b:1f:1a:0e:e1:37:f1:72:e8:
44:41:aa:96:c5:c6:66:a0:33:fb:b0:3b:a7:7d:ee:bd:ea:e7:
73:c5:54:65:1e:66:fc:10:06:65:16:7a:83:65:f0:84:04:b8:
4a:a8:01:c9:29:b9:06:35:15:9f:87:9a:a0:ec:ae:ee:e5:4d:
1e:04:e5:34:0b:f5:3b:66:a6:e6:3f:67:4e:78:d2:f3:62:37:
ed:51:ec:45:f3:92:9b:10:72:f3:14:5f:9e:73:95:ef:9e:52:
e7:13:9b:66:76:f0:b9:97:5c:e1:10:ad:5e:97:56:98:17:22:
77:4e:d9:42:20:a8:8f:5e:15:02:29:a8:07:77:95:9b:78:92:
4b:03:cd:f1:46:47:98:8a:85:32:41:0b:85:13:82:47:b7:01:
bd:8a:fc:5c:dc:87:01:1a:1a:b7:cf:24:db:f5:1e:e3:dd:d5:
ad:6b:6c:34:da:37:93:3e:3f:81:9e:07:3a:1a:8d:d7:96:13:
67:cc:5d:29:a0:d3:25:fa:a4:02:61:8b:ec:d5:33:ba:e4:4a:
b0:62:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:01 2025 by rpki-client