Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa
File: 3f960fbb-6b3e-3439-81cd-c697095f3666.roa (raw, json)
Hash identifier: avjweQlPh1C/hSJcEqX1r+Kfm7bRLm6Uso9hF71P8F4=
Subject key identifier: C3:B5:13:E7:3F:CD:69:51:E9:44:33:4A:24:BD:8E:B8:A2:D0:B7:31
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFEF4E15AFB2EC502C2540
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397236
IP address blocks: 2001:500:3682::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:ef:4e:15:af:b2:ec:50:2c:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=43c12fcf-494b-48f1-9402-9fc346dc49a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:dd:2a:a7:cc:98:f1:c1:6b:98:6f:ca:2d:
a5:73:27:97:8f:00:1e:f0:66:f3:aa:82:67:86:5a:
77:65:21:b2:93:78:88:e7:9e:40:08:1c:c0:ee:8b:
af:9a:34:8e:a5:76:33:4e:2d:61:40:f7:9b:da:a2:
18:0f:02:16:c2:1c:c8:52:b4:6f:71:02:05:30:c4:
1a:fe:7d:0f:cc:6a:8e:00:9b:1c:b3:48:53:de:95:
93:84:05:d7:ec:e3:73:b6:93:33:5c:f7:16:2f:66:
b2:5a:bc:b3:88:5c:59:98:6d:2f:aa:4c:1f:3d:60:
39:b8:ee:82:88:7c:99:d9:24:8c:d2:db:4b:94:bb:
34:88:96:51:8a:d9:09:54:b5:72:6d:b0:d3:83:08:
dc:6c:d5:17:a2:63:e0:d1:7b:60:c1:2d:cc:4c:34:
0c:da:21:2d:74:01:62:cf:f3:85:16:41:0c:0c:55:
90:8c:1f:03:5f:da:60:36:f8:0a:c2:8c:66:7f:c5:
fb:27:0e:b0:1e:a2:99:77:37:af:a4:f4:3f:9f:5c:
12:d2:2f:bb:a3:38:38:18:81:0f:c3:7f:14:0b:a5:
94:cb:79:dc:38:d9:95:b8:f8:6f:47:2f:e7:31:02:
fd:f8:de:52:fc:8a:21:5e:90:47:db:19:0a:0c:bb:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:13:E7:3F:CD:69:51:E9:44:33:4A:24:BD:8E:B8:A2:D0:B7:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:3682::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:ef:8e:89:3f:60:19:9c:63:fb:d2:00:2f:dd:d1:fa:fc:b5:
d6:00:b3:30:f1:43:0e:58:99:93:81:82:96:cd:8a:10:e6:82:
6f:f9:67:5f:86:c3:5d:46:a3:b6:af:87:04:23:ad:99:80:74:
a3:86:d2:6e:4d:fd:94:f3:1e:20:57:f0:62:19:6a:9d:f4:b3:
2b:b8:00:8e:af:ce:db:bc:b6:74:6f:2e:9a:8a:72:64:9a:ef:
71:87:93:dc:54:55:ff:25:e3:88:5f:08:8e:68:ef:ef:34:65:
02:c9:a0:e8:58:b4:58:4d:75:08:c5:f0:18:54:b0:d8:0b:75:
ac:88:67:b6:51:94:29:3a:1e:40:e3:26:c0:61:4d:3e:61:dd:
14:01:79:6d:59:82:da:c4:46:4e:f4:43:f2:b2:29:08:ff:a7:
05:f7:07:7c:57:37:6a:07:c0:fd:67:d1:81:8d:78:e6:fa:0d:
77:1c:20:87:1f:1b:e1:d5:89:10:45:e0:eb:43:1a:b5:a8:71:
47:1a:8e:70:09:26:2d:f5:86:49:b0:db:e7:78:d8:09:c4:9a:
21:ab:27:b4:50:a1:da:73:4a:43:98:6d:a7:77:d9:16:6d:b9:
a4:23:83:58:d7:c7:c8:50:80:8e:c4:9d:4b:16:65:e2:42:47:
8b:f1:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:53:24 2025 by rpki-client