Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa
File: f30990ec-db44-3f17-ad47-6a3df43a0baa.roa (raw, json)
Hash identifier: cvxHgKIb2XCqEvOxWbV3E/e9D/QEOmqTZ9Y05OgByog=
Subject key identifier: 2E:88:C3:01:CD:69:A3:7D:BA:E5:2C:04:DA:DA:BA:06:99:56:F2:7B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858480EA51DE704072283259169E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7342
IP address blocks: 2620:74:ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1d:e7:04:07:22:83:25:91:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=1225e3f7-1b2a-47b7-8cdd-a4610eba1b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:92:29:b9:79:6a:3f:3c:1d:1f:92:65:a4:
75:f9:67:64:b5:55:5a:59:5a:c4:8c:bd:64:31:b6:
2a:70:6d:0e:d8:fc:8d:1b:1d:3c:7a:fa:9d:55:42:
10:69:29:63:82:00:8d:30:ad:91:11:05:dc:d2:ba:
9f:0c:3b:9c:0a:c5:53:f4:28:36:00:51:73:d6:4f:
ac:c3:5c:04:c5:b5:ff:c4:21:cc:38:0c:14:02:6f:
12:2a:0e:2e:51:b3:a4:c1:7c:c5:79:6a:60:28:46:
75:f0:c8:15:96:ba:b0:6d:d8:db:13:f5:1a:af:d9:
cd:09:ee:dc:71:58:73:97:01:8c:47:64:56:be:86:
a6:3b:1d:6d:85:6d:40:06:c3:29:55:ea:33:38:75:
54:35:6f:91:79:21:90:d6:36:0a:4b:f4:95:8a:9d:
e2:71:4e:af:f2:8a:c5:c7:38:69:ba:22:ff:ec:b6:
a0:6f:62:64:de:8e:eb:92:d2:1d:1c:5d:c9:fc:6e:
88:5a:5f:65:6d:19:06:61:07:74:28:a3:85:c3:a8:
4b:84:c9:4a:f0:68:9a:b2:28:08:20:d2:55:a2:b6:
3a:ed:f2:ee:a6:09:49:3a:27:cc:8a:0d:35:a1:6c:
95:4b:ac:23:ce:67:31:26:5c:c1:b9:bb:30:a6:89:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:C3:01:CD:69:A3:7D:BA:E5:2C:04:DA:DA:BA:06:99:56:F2:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:ac::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:65:aa:a6:e2:54:89:59:6b:2d:ab:81:a2:8d:8c:29:5a:71:
87:66:44:1b:89:18:b1:49:5e:a0:93:7c:1a:74:b6:b6:73:2f:
13:5f:ba:dc:3d:11:eb:31:36:7d:48:c7:de:83:03:fe:82:d3:
4f:9a:2d:6e:5b:2b:02:a1:2a:ac:b0:fa:81:e4:a6:d0:fd:93:
9a:68:50:18:00:f5:9b:99:53:6b:c4:86:b0:49:9d:6e:ce:64:
ff:7c:b0:47:71:2a:10:78:97:d0:c6:5e:cc:82:58:09:e5:9b:
94:8a:77:a3:bf:98:ab:ee:37:7d:81:67:41:f5:cd:21:de:1d:
f5:c4:36:7a:74:55:fc:4b:e3:da:d6:57:e4:1f:d1:9d:bb:8c:
f5:3e:ba:85:16:ef:3d:0b:d0:89:32:98:e7:74:f5:8f:63:16:
cc:f0:21:aa:0a:b5:d6:15:ae:ee:62:29:8c:c3:4f:46:8f:ed:
ce:c7:07:7a:68:43:21:a1:52:98:32:6c:96:48:39:d6:00:ca:
9f:2a:97:d1:37:f6:09:60:25:2b:92:53:a7:9c:f9:4c:6b:a0:
60:ea:61:aa:38:88:d1:fe:ac:38:a3:01:5a:a3:cb:43:29:3b:
52:34:aa:e4:99:67:18:37:ad:05:6c:e8:9c:1a:8d:ab:a9:55:
22:b6:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:50 2025 by rpki-client