Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be5fd134-b668-35a3-aa9a-f24a67f6e023.roa
File: be5fd134-b668-35a3-aa9a-f24a67f6e023.roa (raw, json)
Hash identifier: LwzJSHU/oIyZPNcN6t7ZxYt4XR1GTGbQPye1jSrcAmY=
Subject key identifier: 66:41:5F:20:FA:9F:EC:A5:1B:14:28:E5:11:77:1F:6C:EB:D8:EB:43
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584839EAD5CF32DB79BF31DF74C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be5fd134-b668-35a3-aa9a-f24a67f6e023.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 397197
IP address blocks: 2620:74:20::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d5:cf:32:db:79:bf:31:df:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=6aa531f0-a481-445f-bf30-8fcd0817d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:c8:70:85:e1:74:b9:2d:f5:be:fd:96:fa:
95:5b:10:a7:e3:a4:34:9e:b6:96:9b:28:ec:03:d8:
6a:99:e2:12:2a:e3:25:0f:c2:ef:35:72:49:a2:73:
39:84:18:ff:6e:c2:98:76:51:c3:9f:3d:4f:06:4e:
39:99:9b:08:45:0a:75:2d:c8:f1:62:18:46:27:67:
c8:a4:45:9c:2a:cd:1e:57:49:6c:7c:2e:f7:b1:18:
e4:04:b2:8a:7b:b9:71:da:e6:7e:4f:73:ec:b8:55:
e4:4a:d0:6e:f4:3e:fe:ae:57:b0:eb:4b:9f:15:b4:
f8:c4:63:84:ba:a0:8b:ba:72:d6:1d:47:49:63:3e:
48:ff:1d:c1:dc:16:a1:63:91:3d:65:47:2c:13:ee:
5d:e9:23:c0:c3:39:86:5f:14:5d:d2:1d:46:28:91:
1f:60:e3:e4:c1:03:e9:4a:e0:f2:d8:c5:4e:3c:5e:
00:3f:bb:b8:bb:9a:36:f6:8d:7a:9f:ce:68:88:25:
1e:6f:aa:ed:aa:33:f8:9e:e3:03:35:59:fc:0c:fd:
e1:dd:16:6d:b1:f0:15:64:aa:ab:8e:d9:96:d3:b3:
8d:2c:67:83:32:fa:31:c3:af:43:f4:6a:2c:45:be:
0c:f7:c9:6f:83:81:7a:4e:f6:19:58:fe:16:85:af:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:41:5F:20:FA:9F:EC:A5:1B:14:28:E5:11:77:1F:6C:EB:D8:EB:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be5fd134-b668-35a3-aa9a-f24a67f6e023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:20:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:84:15:02:a2:0e:83:a7:35:03:2f:54:04:4e:f3:da:a6:80:
0f:e3:4f:d4:3a:31:62:43:82:05:dd:f4:9c:e8:25:c8:25:cd:
a8:c3:08:94:9d:f1:bc:79:bf:dd:88:16:7e:c3:bf:65:b0:72:
1c:5b:98:1a:cb:41:03:45:51:50:62:3b:b0:ab:fb:00:8c:87:
b4:8d:d7:22:cb:ba:af:4a:be:99:6e:1a:8d:21:45:50:f4:7b:
da:dc:88:69:49:04:57:10:92:df:35:69:21:6d:b0:e2:4c:e1:
a3:a2:25:13:6d:82:75:4e:83:7a:9b:66:d4:3f:45:e4:0c:97:
a7:18:7b:ea:c0:d5:ce:9c:08:d8:29:17:c6:cf:02:00:a8:fd:
d1:b4:4a:52:b8:ff:c6:34:03:fd:fa:f0:92:6d:75:0e:45:ad:
e9:a5:01:15:06:57:71:0b:0b:3e:f8:66:07:ca:e1:0e:b6:bc:
aa:0b:99:1f:5a:b7:36:50:2d:b2:f0:11:1e:af:30:7e:c8:30:
d0:7c:e6:69:45:4f:2d:c3:92:73:3e:d1:7f:dc:c0:6c:d1:c4:
9e:d5:4a:78:2a:b1:0e:1e:9e:6b:22:7b:42:6c:f9:00:ab:5c:
12:61:9b:3c:e2:48:37:a1:7a:57:15:5b:34:6b:01:54:52:5b:
4d:14:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:06 2025 by rpki-client