Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
File: 38038dcb-67bd-3a83-a87a-911214d393a4.roa (raw, json)
Hash identifier: 1YnxnwyV/waD79Vkhm8+lEjUR11CBHrvKJCLOIf9Og4=
Subject key identifier: E8:D4:F2:E2:5A:C4:AE:91:A1:05:18:7D:2D:B5:5C:48:CC:33:14:C9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF7F267B6E4B8B82D08C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397237
IP address blocks: 2001:502:ad09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f7:f2:67:b6:e4:b8:b8:2d:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9c7ee291-1de2-487c-98a3-850afa97d5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:ca:82:b9:c7:8b:24:29:7a:42:d9:65:03:
1a:07:e1:71:a8:9b:2c:87:f4:f6:b4:30:eb:ee:82:
71:0a:22:bf:5c:21:1f:f6:a0:d8:ac:44:b0:3f:4f:
8d:04:50:9c:60:58:0c:d7:d8:1f:d6:8b:69:01:e2:
bd:83:8a:c7:70:9c:ac:17:11:ec:ed:c8:1c:33:6f:
84:c8:b1:43:57:39:e5:90:bc:04:4c:8a:49:c3:b5:
cf:2f:c8:57:d0:f5:f8:b9:c5:91:94:03:7a:0a:14:
93:05:6b:44:0b:25:39:b5:86:2b:66:f3:87:f5:4c:
aa:f5:7f:32:1e:2d:7c:63:a2:17:67:5e:c6:e1:da:
6c:9e:e6:4b:04:f9:12:da:83:28:29:fd:47:8a:b8:
0f:06:aa:62:84:e3:1b:b9:7d:8f:02:7b:9c:2a:b5:
a9:74:57:17:6b:d4:62:c4:2d:8e:79:15:f1:d4:be:
69:ac:31:b8:8a:0a:2c:9d:31:44:be:5a:3d:92:a3:
41:d3:2e:10:ce:76:cc:58:15:ce:70:d9:8c:69:ed:
ff:9d:f9:9a:b5:e1:0b:11:2b:99:fa:04:79:64:14:
b9:1c:cb:05:8e:de:56:eb:9c:19:32:6b:44:16:fb:
a9:34:37:fc:fc:b1:2b:fb:32:28:f1:6f:c2:e3:f7:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:F2:E2:5A:C4:AE:91:A1:05:18:7D:2D:B5:5C:48:CC:33:14:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:ad09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3b:30:ea:8f:d7:2d:a6:90:e4:6a:0c:2c:43:c3:fe:f4:a3:
4f:fe:b9:7b:66:29:22:cb:03:7c:35:c2:24:5d:db:f9:3e:d9:
73:b6:97:e7:a8:d5:99:83:02:47:1d:d7:59:36:0f:bf:59:fd:
e8:53:6b:06:6f:c5:aa:76:34:d6:46:3f:3a:9d:61:cc:ba:d5:
69:75:7f:3a:2c:53:d6:20:39:b2:f0:62:af:a6:9b:ad:de:1d:
a3:f0:4f:cd:42:87:f0:b8:ba:53:19:80:47:78:df:86:b5:e3:
77:22:3a:45:c3:21:22:b6:dd:48:12:a8:a7:5c:a0:fa:34:a8:
84:3f:d2:da:ef:db:c3:68:b8:85:cf:ad:29:b5:c4:4f:64:03:
e8:e4:c0:dd:3d:97:f5:4c:58:d6:ed:6c:85:3e:04:ea:d9:c4:
77:f0:15:c4:e6:b3:7a:ed:d5:01:5a:d0:58:79:e2:bc:dc:97:
92:8a:a3:40:bc:27:81:32:27:b6:81:05:bf:0b:91:c0:54:a8:
e8:1e:fc:bb:e0:b5:cf:6f:80:36:a3:ff:fa:df:1b:23:d7:1e:
cf:a7:93:7e:51:74:4a:38:a7:ba:02:81:c9:da:a1:bd:c1:84:
d6:7a:7e:5d:e5:28:7e:67:52:43:88:49:9a:89:ad:e7:7b:4f:
89:b6:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:22:39 2025 by rpki-client