Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33b4caa-8c21-3a76-a750-73b91a32b13b.roa
File: e33b4caa-8c21-3a76-a750-73b91a32b13b.roa (raw, json)
Hash identifier: o0H74pCH8kwfFmm+1LZj3x/g1RXkdjijNzVuoTwneY4=
Subject key identifier: A3:7B:B5:6F:68:6B:69:96:ED:1D:FA:27:82:57:1E:28:24:E8:94:8B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A95BF86A021E96ABAC880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33b4caa-8c21-3a76-a750-73b91a32b13b.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 396615
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:95:bf:86:a0:21:e9:6a:ba:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=a677b43c-55c0-490b-b16a-717f6b2194a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:0d:53:c7:fd:db:1e:0d:8e:39:f6:6c:b3:
83:ce:4b:9d:ae:65:60:07:76:31:a9:a7:41:5e:1d:
a4:9f:25:0e:df:34:a1:43:fa:5d:1b:60:2f:e5:9b:
01:55:22:f5:e1:1f:01:bd:ec:1b:e3:1a:9d:9d:9d:
40:a3:b2:de:7f:b3:a7:b5:9f:d3:96:f3:22:15:7c:
f5:e0:c5:24:2c:77:b2:ab:07:85:0d:ac:50:e0:75:
40:8c:81:a6:a0:26:2c:df:75:3c:01:62:22:77:6f:
6e:99:bd:84:2f:d1:33:43:11:bf:7b:d1:4a:01:15:
e8:2b:78:61:ad:d0:ea:d4:99:9f:b3:6d:60:30:a3:
19:4e:ca:14:8a:22:34:63:3a:5a:ca:a5:ae:f4:35:
f8:e4:6b:82:fc:2b:e3:14:18:76:5f:8d:61:50:94:
e0:64:ad:99:68:f8:eb:f7:70:59:e6:c7:b8:07:70:
a4:59:fa:60:fb:04:da:8f:e7:48:37:c7:1e:12:0d:
74:05:3a:ef:92:c5:d3:f3:08:5c:6b:11:3b:2b:4c:
28:38:e2:2c:b2:23:3d:76:ac:8e:b6:10:ea:e1:c5:
38:eb:86:5b:95:9e:74:9a:d0:1c:f4:03:95:99:68:
3e:73:a8:da:79:5e:f4:44:bd:e9:dc:dd:d0:76:f1:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7B:B5:6F:68:6B:69:96:ED:1D:FA:27:82:57:1E:28:24:E8:94:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33b4caa-8c21-3a76-a750-73b91a32b13b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:bb:49:a4:2e:a0:65:a9:91:a1:b0:81:2b:f1:91:37:46:4c:
32:23:8b:9a:00:e5:ca:9d:48:45:41:9f:fb:3e:b0:73:36:57:
5b:8a:38:51:6b:99:c2:1e:ae:d6:87:0e:f9:3d:e7:59:3c:ad:
7d:49:33:70:cc:6e:f4:3a:fc:ac:2c:d9:e0:d5:0a:5f:5b:cb:
cf:27:0b:27:2f:e9:af:ec:e9:be:15:5f:f3:1a:99:b3:17:67:
6f:27:e0:48:01:21:40:61:16:c5:08:9f:1f:94:be:c9:a9:f1:
a0:c2:dc:87:cb:04:41:d9:c4:24:43:6b:94:ba:0b:f4:72:3d:
88:0f:b9:8e:0e:12:52:d7:0b:80:9b:31:ff:71:78:b2:0b:d0:
d3:44:34:43:cc:48:8e:6d:6e:67:f5:de:9a:b4:36:bf:32:4b:
58:76:c0:19:a2:fa:26:2a:77:cb:27:ba:14:ad:53:cb:81:49:
57:6d:30:1b:31:e2:d2:3f:66:95:f4:90:a6:95:47:06:d2:9c:
04:32:6c:67:e8:fd:9e:dd:b7:84:1e:a3:d6:e5:04:ec:5b:b1:
e6:5f:a2:0b:fc:22:46:89:bc:ef:85:00:66:f7:33:5f:9e:f6:
f4:35:88:1f:3f:de:bf:ec:cc:aa:7c:ef:95:31:57:da:e8:8d:
3c:cd:3c:85
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgYapW/hqAh6Wq6yIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIwNDE0MDA1MloXDTI1MDMwNDE0MDA1MlowLzEtMCsGA1UEAxMk
YTY3N2I0M2MtNTVjMC00OTBiLWIxNmEtNzE3ZjZiMjE5NGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWwNU8f92x4Njjn2bLODzkudrmVgB3YxqadB
Xh2knyUO3zShQ/pdG2Av5ZsBVSL14R8Bvewb4xqdnZ1Ao7Lef7OntZ/TlvMiFXz1
4MUkLHeyqweFDaxQ4HVAjIGmoCYs33U8AWIid29umb2EL9EzQxG/e9FKARXoK3hh
rdDq1Jmfs21gMKMZTsoUiiI0YzpayqWu9DX45GuC/CvjFBh2X41hUJTgZK2ZaPjr
93BZ5se4B3CkWfpg+wTaj+dIN8ceEg10BTrvksXT8whcaxE7K0woOOIssiM9dqyO
thDq4cU464ZblZ50mtAc9AOVmWg+c6jaeV70RL3p3N3QdvFi2wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKN7tW9oa2mW7R36J4JXHigk6JSLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTMzYjRjYWEtOGMyMS0z
YTc2LWE3NTAtNzNiOTFhMzJiMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBVu0mkLqBlqZGhsIEr8ZE3RkwyI4uaAOXKnUhF
QZ/7PrBzNldbijhRa5nCHq7Whw75PedZPK19STNwzG70OvysLNng1QpfW8vPJwsn
L+mv7Om+FV/zGpmzF2dvJ+BIASFAYRbFCJ8flL7JqfGgwtyHywRB2cQkQ2uUugv0
cj2ID7mODhJS1wuAmzH/cXiyC9DTRDRDzEiObW5n9d6atDa/MktYdsAZovomKnfL
J7oUrVPLgUlXbTAbMeLSP2aV9JCmlUcG0pwEMmxn6P2e3beEHqPW5QTsW7HmX6IL
/CJGibzvhQBm9zNfnvb0NYgfP96/7MyqfO+VMVfa6I08zTyF
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:21 2025 by rpki-client