Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e34718ea-6e65-4d6b-b56f-a65669b2c7a8/4b6d39ea-7041-3920-b911-cb1fb7ba70ab.roa
File: 4b6d39ea-7041-3920-b911-cb1fb7ba70ab.roa (raw, json)
Hash identifier: y3FiWmNVOF5Y7+zWd1y/Vc05v7YMYsZg2NOAC8Xq4TY=
Subject key identifier: EF:CA:95:58:A6:F3:22:FA:67:78:73:5E:6A:D3:37:12:FF:A3:D2:53
Certificate issuer: /CN=e34718ea-6e65-4d6b-b56f-a65669b2c7a8
Certificate serial: 010D0C9F43285848AF2B7750A830B709DBFC4280
Authority key identifier: 62:F5:B1:AD:EC:BE:1D:C3:3F:6E:22:68:E6:F4:5C:23:65:83:2C:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e34718ea-6e65-4d6b-b56f-a65669b2c7a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e34718ea-6e65-4d6b-b56f-a65669b2c7a8/4b6d39ea-7041-3920-b911-cb1fb7ba70ab.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 20473
IP address blocks: 2620:60:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:77:50:a8:30:b7:09:db:fc:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34718ea-6e65-4d6b-b56f-a65669b2c7a8
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=0e10bc4d-97b7-4e97-8646-c878473f5dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:f9:d8:be:63:60:6c:11:7c:9d:af:46:63:
2d:2f:bb:85:bc:f1:b4:aa:ae:39:cf:31:d2:37:1c:
85:7b:1f:4a:12:d0:6f:0b:90:87:e0:b8:ed:1f:3b:
b2:85:79:1d:60:5b:71:4d:e2:1e:b5:c8:c9:7e:60:
b4:c3:f4:37:6b:03:d9:f4:29:2a:bc:1a:69:7f:48:
06:34:61:fb:ce:af:73:87:d4:02:68:94:a4:54:32:
a8:50:47:23:30:4f:ff:18:d5:ed:9b:5e:61:e8:73:
b2:6d:3c:59:93:7d:37:23:1b:3c:31:70:20:c0:a5:
16:69:91:3e:f4:4f:f4:2b:e9:7f:cc:0f:c2:9d:bd:
57:bb:d1:d7:5d:b2:e6:8e:98:26:55:ba:85:39:cc:
14:b0:64:91:45:90:08:87:5e:40:c1:aa:e0:db:17:
5d:2c:e9:67:85:ea:b7:37:7c:a3:87:f9:9e:e3:86:
86:b5:fe:1b:f5:a2:81:b1:91:8f:a0:2c:3b:99:cc:
fc:6c:45:f8:ab:3b:51:fc:bf:31:97:c7:27:6c:d0:
97:c4:01:6b:1a:7f:e8:d0:aa:71:79:23:82:ab:74:
9d:ab:7b:58:8d:ae:47:b2:36:00:27:9e:ad:5b:0f:
fe:d7:97:b9:46:28:fc:c5:e7:1c:d6:12:25:35:f6:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:95:58:A6:F3:22:FA:67:78:73:5E:6A:D3:37:12:FF:A3:D2:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e34718ea-6e65-4d6b-b56f-a65669b2c7a8/4b6d39ea-7041-3920-b911-cb1fb7ba70ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e34718ea-6e65-4d6b-b56f-a65669b2c7a8/e34718ea-6e65-4d6b-b56f-a65669b2c7a8.crl
X509v3 Authority Key Identifier:
keyid:62:F5:B1:AD:EC:BE:1D:C3:3F:6E:22:68:E6:F4:5C:23:65:83:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e34718ea-6e65-4d6b-b56f-a65669b2c7a8.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:60:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:67:51:a1:05:eb:13:83:1f:8f:18:6b:df:a9:cd:a4:6b:b5:
ce:c7:f1:42:2f:16:03:40:9a:58:fe:87:10:05:20:76:da:3e:
50:3d:fb:af:95:0e:ef:0f:7f:bd:df:9a:98:71:cc:90:58:33:
33:cd:45:70:c3:1f:5d:2b:ab:97:cd:17:e8:72:8d:76:e0:6e:
79:78:f4:6f:af:de:86:96:9c:ee:1a:fb:df:ca:f0:d9:2d:a4:
e4:48:10:55:28:66:e2:5e:cf:f5:74:e1:9f:34:1f:e2:ea:c5:
99:06:d3:27:d1:ae:78:72:f8:2b:5d:50:02:db:25:de:80:0a:
bf:bf:cd:e2:3e:c4:e9:83:2d:d6:49:ce:3f:3d:9e:44:e1:b1:
d0:c0:46:e7:df:cf:b1:28:e2:29:04:bb:46:14:f4:2c:9b:a3:
97:9c:3c:17:e4:01:5f:ab:3e:3b:e0:ea:a8:92:f7:b3:dd:76:
ab:2b:92:d8:33:3b:4c:3e:8b:15:f8:b9:df:5c:f2:36:68:cb:
78:16:bf:e4:c0:3c:ef:64:69:aa:62:ec:e4:df:17:cf:76:0e:
82:a1:39:b3:fb:24:2e:11:9f:fc:f2:7e:e0:61:b4:12:d8:1d:
3d:05:a3:7f:c5:53:a3:59:26:51:29:d2:60:4f:82:a5:82:88:
4f:be:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:34 2025 by rpki-client