Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa
File: ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa (raw, json)
Hash identifier: ATtf8SDAO1HbaYnBOQ0EkW8SmKlTRwMMg4+ESYFe5ok=
Subject key identifier: 34:35:52:46:19:30:04:F3:86:4C:10:BB:A2:52:2C:17:CC:46:F4:2B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584834558D8B4406374AEA696480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 2620:74:30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:8d:8b:44:06:37:4a:ea:69:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=824eb288-5c7c-43f6-a526-21a064e217d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:82:3a:9f:2e:1f:6b:42:26:e4:5d:b6:3f:
d7:51:e0:32:46:db:dc:c1:55:07:b8:12:30:c5:f7:
00:9f:19:8a:9a:89:06:91:c7:41:e3:33:98:27:e6:
c7:95:d5:a0:54:8b:19:4e:fc:e4:dc:bf:14:97:8a:
a6:20:53:55:bf:f3:11:1f:5b:eb:e7:f6:f9:c6:9a:
a4:ae:4b:65:d2:e0:fc:92:8a:05:59:3f:ac:59:a6:
53:d1:94:20:31:64:c5:35:b9:54:41:c4:f9:74:19:
cf:f4:ba:51:ee:39:82:8b:cd:4b:31:c0:6f:fa:f8:
c5:8a:96:80:96:ed:42:c6:4c:16:fd:01:53:a4:da:
39:cf:05:a7:b6:be:b5:84:57:c1:88:41:8e:d8:8b:
34:84:d7:f4:1d:bf:89:25:fb:cb:a7:89:27:04:0c:
14:07:44:a3:e5:45:f6:fe:5b:4f:be:d6:e6:4f:30:
78:7e:67:b6:ed:27:f9:83:0e:b2:93:15:c8:56:d4:
9d:1b:6d:bf:05:8e:2a:c3:95:c4:0d:58:1c:e4:05:
b1:7a:49:b5:26:07:1f:4e:c3:af:5d:32:87:df:47:
77:4c:33:1e:1c:36:e1:93:16:98:19:54:77:a9:38:
e1:f2:17:0c:b3:c1:48:e3:c9:e8:28:7e:8c:49:df:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:35:52:46:19:30:04:F3:86:4C:10:BB:A2:52:2C:17:CC:46:F4:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:30::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e7:f8:1c:99:78:53:df:0d:a6:6b:62:6c:4e:9b:33:d0:ab:
a1:f8:22:b4:e7:bc:13:3c:48:d8:cf:a0:da:cd:41:3c:df:64:
f9:9d:af:6b:fe:f2:3b:34:72:ac:d7:ff:98:cd:f0:0f:19:73:
cc:19:f0:68:a0:71:6b:29:58:8c:2e:61:f1:30:b8:42:6f:91:
79:cf:a9:0e:e2:82:b9:b2:6d:92:f0:90:99:65:a0:0a:ab:04:
1d:2f:15:3a:33:a3:53:b0:54:f5:57:7d:3c:a4:91:47:65:af:
44:ee:51:60:12:bc:3b:fd:7e:e7:eb:d3:e0:a6:bc:6e:e6:8a:
94:79:87:3e:b4:81:65:f6:a6:1a:92:df:c7:3c:45:41:a2:a0:
c1:c2:ad:00:a4:f3:e5:53:5f:79:8a:5d:cf:90:53:3b:b8:b7:
a4:df:2f:a5:fe:02:42:6f:93:5a:2b:8e:23:66:ca:b5:3a:8c:
6b:4b:d1:06:51:b9:0b:0e:94:f5:0d:c7:2f:c6:70:20:c9:84:
d4:7b:8b:27:e0:65:8a:df:9d:3f:2f:7b:5a:d7:70:6c:59:ab:
b5:3b:9d:6d:f7:7e:ee:4e:53:79:0b:99:58:cd:e9:c4:52:7c:
8c:c6:22:2f:1a:87:e0:30:c8:44:dc:e1:85:ca:84:37:d3:91:
99:86:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:10 2025 by rpki-client