Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa
File: fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa (raw, json)
Hash identifier: U1lxu4NhyJfUXsn7T9wS8Oz0bYzmNkAQE3R8ymrfWH0=
Subject key identifier: 6A:4A:2F:25:54:B9:B8:CC:8D:49:79:76:45:02:D4:00:CE:62:08:87
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848186A96B7CDEB4BA61A6BED00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 36618
IP address blocks: 2620:74:21::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:96:b7:cd:eb:4b:a6:1a:6b:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=cd27586f-6e4c-46ee-ad6a-32c8551e36ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:73:75:eb:db:16:12:f2:d8:be:25:ff:32:
d6:d6:28:be:66:5d:ad:be:8d:e1:d5:bc:f8:01:9e:
19:5c:b5:ea:f1:46:a0:a1:0e:8d:c2:cc:01:68:d4:
8d:04:90:bf:3d:15:30:ce:69:b4:64:1c:55:43:3c:
a0:49:40:1c:15:f5:a9:42:b5:be:72:a1:39:6e:ca:
c6:8d:35:5f:ce:98:63:d3:46:00:4a:26:3d:e4:f3:
8a:0d:96:c4:2e:7a:0a:86:37:f5:93:48:ca:cd:14:
e5:f6:69:bb:1f:d6:97:7f:81:7c:e8:ae:2c:d9:27:
ff:a1:63:ed:f7:2c:ac:3f:0d:c3:ff:2a:55:48:89:
8d:b8:63:d1:68:20:ef:b0:59:48:7a:a3:e3:ee:8f:
28:bb:e7:13:f4:fc:b0:71:6e:af:f2:0c:dc:56:fe:
83:43:9f:9f:ab:03:83:a7:3a:24:e7:cd:37:7e:96:
80:97:33:41:7b:31:83:a6:c2:24:30:cf:61:5b:ac:
67:ca:18:ba:58:6b:23:db:90:8c:93:c2:65:03:1b:
a8:64:92:6c:d3:fc:83:68:81:97:00:d9:eb:a1:b2:
ab:dc:09:6e:cb:f7:39:eb:81:a4:ac:ff:c1:3f:f3:
29:cd:02:ea:82:1b:5e:e8:45:cb:ce:21:33:43:cb:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:2F:25:54:B9:B8:CC:8D:49:79:76:45:02:D4:00:CE:62:08:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:21:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:5f:a9:a3:28:98:24:10:be:59:ba:df:92:a6:35:a9:6f:fa:
34:18:42:ec:bc:b1:94:f3:3b:0b:5b:77:2c:8a:6b:bc:1d:3c:
cd:d3:07:75:86:7b:96:2c:88:e6:4b:5c:63:a5:2e:37:71:70:
71:7a:c8:30:cd:d5:1a:af:27:6d:98:bb:91:b6:c9:de:dd:59:
ca:75:8e:d8:ae:e1:96:9f:7b:fc:0e:40:3d:1e:10:dd:c4:ca:
16:20:3b:f2:ad:db:20:0e:b8:75:bc:81:2d:59:f0:09:c4:1f:
ff:22:f7:51:78:21:e9:69:71:5d:a9:d6:62:be:e3:3c:49:ea:
e8:86:08:3a:72:0c:c8:be:c4:59:ca:f8:4a:42:8f:62:87:2d:
f6:12:0a:44:d1:0a:3e:77:f0:cd:30:ab:da:fd:56:4b:8a:84:
66:a2:74:b3:84:67:84:83:4c:65:37:f1:44:9c:5c:64:fc:24:
b0:12:a2:52:dd:32:d5:ec:4e:88:ae:6f:09:ff:9d:55:84:2b:
83:ab:9b:25:63:ca:22:cd:69:8e:b8:91:85:5e:d8:a2:59:11:
fc:da:e8:43:01:f2:b7:51:b7:51:72:24:fb:73:0d:2c:86:42:
05:35:74:73:07:16:1b:1f:16:a5:31:77:fc:79:e9:93:47:0e:
22:d8:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:46:22 2025 by rpki-client