Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa
File: 11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa (raw, json)
Hash identifier: IqKE61KOR5LgO3B7PUQgXYvPegL0S4xgSHqu5Dgl/As=
Subject key identifier: 05:40:C4:EA:CC:DA:5A:66:E7:F2:62:AE:F0:28:CF:56:0E:A3:9B:7C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF6E4FD5372636E80DB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397220
IP address blocks: 2001:502:ad09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f6:e4:fd:53:72:63:6e:80:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=cd282dcb-dad2-4d1a-802a-59dfb037541f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:24:ff:a6:ba:a5:64:48:70:3a:65:5a:79:
20:dd:a3:a0:26:27:4b:51:24:03:e7:91:5e:51:5d:
da:1c:5d:f5:5f:8c:0c:ae:78:f4:d2:1c:63:b0:b8:
1f:6c:02:21:c2:ce:e5:62:58:04:40:07:9a:fa:40:
8e:2c:15:8a:b5:17:65:b0:12:ac:63:30:bc:1d:49:
1e:61:73:c1:ab:cc:19:6c:d4:e7:f4:ef:59:22:51:
cd:54:f7:ac:85:69:8f:57:be:8f:65:f5:ae:4c:99:
4f:5f:09:b3:8d:26:fa:19:b3:00:41:a0:c7:56:bb:
1a:1b:70:84:11:ed:13:f4:d9:60:69:57:99:83:04:
31:fb:39:6f:59:c1:ce:99:0c:c2:45:3a:40:d3:ba:
fa:7a:25:1a:29:34:da:24:e1:37:1e:2d:52:54:6a:
0b:96:b3:b6:cc:68:52:bf:1f:d6:e1:61:12:f1:9e:
67:83:b0:47:c7:6a:0f:a0:2d:ee:f3:d5:0f:ad:95:
d9:cd:60:42:bc:1a:91:eb:85:a9:c9:d2:bf:b8:91:
55:ab:ce:8d:e0:78:67:4f:cf:74:52:25:39:be:50:
d1:76:4b:4b:aa:ca:6a:2d:fa:11:b4:13:e5:0a:6d:
31:68:d7:88:d1:49:54:48:93:c9:2a:b4:ea:40:4d:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:C4:EA:CC:DA:5A:66:E7:F2:62:AE:F0:28:CF:56:0E:A3:9B:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11bd38e2-ac3d-397a-ad21-f07cfa00b9fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:ad09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c6:da:12:47:6c:5c:7e:3b:85:72:da:82:d6:1a:16:2d:f9:
d7:02:64:26:64:28:dc:e1:a6:54:49:69:86:7c:ea:02:b9:15:
98:43:90:ac:dd:44:1b:21:30:c8:93:02:74:07:ca:72:56:76:
1f:3b:76:f1:ea:b3:f1:43:0a:b9:8e:fb:df:9d:8a:03:3f:af:
5b:2c:07:a5:b8:44:94:77:c2:d3:4d:89:ce:d4:b6:f7:03:99:
81:c2:38:b9:46:f4:55:9f:17:fb:f3:b2:fb:1f:d0:3c:c9:f4:
9d:65:db:00:ca:c3:66:94:fe:98:72:29:59:90:5b:6e:4e:95:
b6:83:1d:f5:06:41:83:22:1d:d1:b6:ac:04:b1:4f:fa:3c:cc:
84:44:08:56:00:df:d5:9c:23:db:45:bc:dc:a0:27:6e:b8:86:
d5:4b:0e:f0:c1:d7:68:e4:77:22:38:46:c3:c5:2d:54:2d:88:
d6:0b:87:d5:da:91:c2:08:76:95:af:11:ae:82:26:22:09:7e:
88:04:ba:5b:58:bc:47:a0:12:41:1a:30:d8:f2:17:ab:d1:67:
5e:c7:38:e3:8b:7e:83:dd:77:64:82:39:7a:04:17:20:16:cb:
1f:db:06:c8:61:d3:5c:c0:d6:0c:01:66:0b:ea:64:16:36:05:
dc:0f:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:40 2025 by rpki-client