Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
File: 0e321529-67b0-3b6c-80fb-23ea199d219e.roa (raw, json)
Hash identifier: kqsQ3lmUEEjnq5vpsmWphix3UIVgcOR7rJ1sOftZOmE=
Subject key identifier: 5F:B0:96:A4:B2:B5:64:BF:A9:D1:57:97:C6:BB:34:18:D3:E4:3C:93
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFEF28AFFE2A01FDF2C0C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397234
IP address blocks: 2001:500:3682::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:ef:28:af:fe:2a:01:fd:f2:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1a085b4e-a46c-4761-8400-70783f3088f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:cb:6d:47:6a:0b:b1:82:ad:c1:6a:9e:57:
e6:e6:d5:a8:5d:bc:5b:ab:05:fe:78:f8:24:46:90:
7d:c0:97:08:10:0e:36:7a:b4:4f:aa:b1:4b:67:3a:
9f:02:be:8b:d7:f8:1d:70:ce:49:4b:28:3a:a2:12:
92:14:ed:2a:44:9e:33:93:0f:64:bb:5d:59:e3:2c:
f5:89:36:ac:25:f3:18:d2:b2:51:6f:e6:c2:48:ac:
89:0a:c9:f3:d4:26:be:af:5b:ff:bf:d2:25:3d:fb:
e7:05:02:49:33:72:ef:af:22:1d:18:a6:54:a3:3b:
b5:ff:31:5d:93:c7:69:0d:52:40:09:61:07:ff:49:
aa:4d:57:da:ef:c1:ae:6b:e6:ce:f5:9d:d2:3d:df:
1b:f7:9c:6f:74:d8:04:16:d3:38:1c:5a:06:08:c4:
46:e0:f4:1b:08:a6:f7:76:82:b5:ee:46:a3:fc:45:
d7:bd:7f:dc:a9:a1:51:48:64:05:a7:45:06:24:ce:
35:e0:c0:f3:be:6a:f3:f6:86:35:39:a6:c3:ad:ae:
7e:62:85:2b:4f:8e:77:52:38:6f:cf:dd:6c:c8:06:
ab:c8:c0:ba:cb:e0:42:75:09:d2:9d:b8:17:17:fb:
ec:2a:dc:b2:ad:0c:ea:0f:3e:66:a7:29:c8:b2:85:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:96:A4:B2:B5:64:BF:A9:D1:57:97:C6:BB:34:18:D3:E4:3C:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:3682::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ce:b9:a3:e2:00:cd:7b:96:e2:f9:0d:5a:13:13:82:c7:6f:
fb:86:9f:28:f4:9e:3d:89:d2:e2:34:07:62:38:ff:19:68:10:
9a:81:93:7c:c7:2d:97:c1:84:52:68:ea:04:33:3b:a0:b3:4d:
d1:ca:02:bf:fa:35:9d:b1:3e:37:b6:d0:1e:37:d2:e4:ae:be:
a5:97:9a:bf:e5:2d:45:84:a5:e3:6c:9a:ff:f5:a7:55:49:df:
45:5a:c1:b8:e2:54:90:23:1a:c5:66:48:50:6d:7c:8b:41:8c:
4a:56:0f:0c:0f:0a:22:5b:c2:6b:29:39:d7:8f:db:29:31:42:
4b:14:b1:de:ec:ac:47:ba:47:7b:5f:32:9e:5e:51:71:ed:8d:
f2:06:e4:f5:d2:44:1f:33:69:43:11:f4:e6:e6:dd:56:85:c9:
b1:ec:c4:b4:a1:89:0a:e0:d5:38:e7:d7:0c:f1:e8:e5:07:0a:
cb:69:ce:66:b3:ad:21:08:d8:d7:b1:94:f6:45:ee:d7:b6:02:
3d:cf:31:63:1c:26:b4:5d:b6:6c:76:af:2e:e8:78:e4:54:c7:
b8:6b:e4:00:a1:c0:e0:08:9c:36:a4:42:df:b2:65:a8:c9:56:
2c:5d:1c:92:51:3e:a4:f3:43:73:3f:18:50:b1:0f:2e:9f:e0:
d9:fe:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:17:02 2025 by rpki-client