Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa
File: 02b3d6de-dde7-3c25-aba8-656086e431bd.roa (raw, json)
Hash identifier: DCZeH+p26QzTNpYi02jkTwtPKVhxWfUuwYhdwRydNhc=
Subject key identifier: 33:39:B2:D4:A0:B5:10:62:80:80:D6:9F:93:86:6B:E7:14:67:8B:29
Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Certificate serial: 010D0C9F43285848424ACB0D7C6C9CFE7BBE7C80
Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 399668
IP address blocks: 2620:98:a000::/48 maxlen: 64
2620:98:a001::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:cb:0d:7c:6c:9c:fe:7b:be:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=bdee56f0-23fe-47ff-abf1-748560cf7c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:2a:68:49:4c:d6:f3:50:2f:40:63:1a:8f:
b3:17:f0:dc:12:37:3c:58:45:05:dc:ed:97:34:6d:
91:1b:f4:b0:ff:27:66:ff:62:92:43:d7:8d:c6:66:
bc:ec:62:d3:6f:20:ec:14:6b:e3:a1:5b:49:70:85:
1c:73:98:41:a7:ed:6c:cc:8c:6f:8d:c5:fb:ab:50:
e2:32:4c:13:58:3d:c5:d8:4a:0a:c9:6e:4a:d4:26:
55:3c:b2:28:5c:9e:0c:df:d0:c3:15:29:82:f2:9d:
af:01:39:54:f1:2d:0b:e4:8a:08:b2:fd:9a:14:ae:
be:ab:82:e7:ee:72:0e:13:53:74:93:df:ed:e4:3c:
1a:ec:d4:37:04:33:a7:a1:6d:e7:ba:a4:97:d1:91:
99:fc:45:c2:c5:3a:6a:09:e7:3c:8d:4c:6b:3f:32:
54:8e:43:8a:80:5c:e6:db:94:d4:9a:6d:7f:d7:5e:
b8:9e:5a:e3:82:24:73:12:10:99:d9:69:fe:fb:b2:
95:e5:96:0b:f6:f0:1b:1c:3d:98:e7:04:8e:32:ea:
87:1b:99:ce:a0:28:04:ce:97:5c:e8:e5:1c:cc:c7:
5a:21:3d:e6:a7:79:13:37:f1:c5:dd:9b:ae:d6:30:
70:ed:1c:39:1a:a4:39:9e:1e:1b:90:72:3c:83:09:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:B2:D4:A0:B5:10:62:80:80:D6:9F:93:86:6B:E7:14:67:8B:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/02b3d6de-dde7-3c25-aba8-656086e431bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl
X509v3 Authority Key Identifier:
keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:98:a000::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:48:6f:a2:2d:23:3e:9c:9a:c8:d0:68:f1:a3:bc:1d:0d:85:
fb:40:4f:25:3a:e8:f1:5b:10:d2:d1:1a:b9:d3:c8:21:45:f9:
49:3f:8e:9d:68:fc:49:bc:78:a6:64:52:83:92:cb:c4:01:9e:
1a:6d:9f:4a:2d:e3:cd:0a:2e:49:d0:81:71:2b:f5:44:6f:77:
89:35:19:d9:ed:38:de:ad:7e:7f:54:69:9c:0f:ed:eb:3e:c3:
14:74:93:d1:2a:51:a9:60:47:52:3f:e4:43:65:b1:04:9e:60:
8e:61:98:bb:16:6a:0b:ea:a6:43:9f:b2:a2:f8:d5:47:a5:2a:
5d:87:4b:6d:b2:41:41:07:63:66:a9:c8:89:9c:c3:c0:bf:06:
bc:08:f3:44:85:19:9d:55:f6:75:1b:ac:cd:8c:a6:cd:48:25:
4e:5c:f9:ba:9c:83:45:fd:8b:97:00:6a:40:1a:90:8c:49:07:
27:a6:ce:ae:37:fa:8f:a4:19:34:3a:e6:e3:c0:96:06:38:78:
81:41:f9:c2:94:81:0b:a2:84:f0:d0:71:17:a5:a8:6d:48:5d:
d2:67:2b:62:96:3f:88:f1:a2:36:9d:af:13:31:e9:19:02:7d:
72:e9:e5:68:68:da:3e:eb:82:f6:15:d8:07:0b:88:b2:95:d2:
df:9e:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:07 2025 by rpki-client