Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e14febc-5e8a-3a65-97f7-4e93835be372.roa
File: 4e14febc-5e8a-3a65-97f7-4e93835be372.roa (raw, json)
Hash identifier: ++XkmB/i0PVfUT3xky/f3gLVRHG0o385GDY1gYEEDek=
Subject key identifier: 20:DD:FA:C6:B2:F6:F2:6D:B9:C4:40:22:E6:7C:66:FD:22:DB:D8:EC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF5438FCF2B004D959C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e14febc-5e8a-3a65-97f7-4e93835be372.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397226
IP address blocks: 2001:502:4612::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f5:43:8f:cf:2b:00:4d:95:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b46b3b5f-858d-4789-ab0b-5994b35d30be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:0b:29:11:65:d9:2a:5d:44:75:fa:c6:82:
70:67:52:1b:ba:df:9a:d6:09:2d:29:a4:01:af:3f:
75:56:5a:82:65:5e:66:a2:b8:ae:18:90:d5:ac:cf:
f8:26:41:47:a6:46:ab:cd:b5:fc:3f:5a:d3:fc:9b:
87:63:82:e1:21:1a:bc:d1:fd:b5:12:ff:d9:d1:8e:
6e:40:04:00:1c:52:75:d3:98:80:45:e0:99:ba:21:
10:e8:58:07:a8:d4:98:e0:38:f9:68:05:27:f4:cb:
fe:40:99:a3:ac:b7:17:f6:ec:19:12:cd:69:22:87:
c4:57:de:1a:17:f1:02:a8:b1:9b:d9:e7:43:b1:c1:
7c:c2:97:a7:eb:f5:48:54:26:34:92:26:b7:12:7c:
3f:db:b3:4e:50:d7:26:3f:af:2a:e3:36:2a:26:9f:
17:df:fc:1d:05:19:e8:f8:f0:09:d5:34:8d:ec:7e:
3d:01:bc:9f:90:a9:5f:e4:6d:f6:3f:23:0d:e2:b6:
5b:93:ed:bc:5b:ed:27:1c:bf:c2:d6:24:e8:96:74:
83:5e:7d:ee:26:eb:2b:5b:a9:56:6f:0e:b9:b3:cb:
7c:0f:eb:d2:89:db:6a:fb:5c:90:34:fc:68:5d:27:
71:68:0b:db:bf:a2:ce:e6:e9:4a:88:a9:73:69:54:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:FA:C6:B2:F6:F2:6D:B9:C4:40:22:E6:7C:66:FD:22:DB:D8:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e14febc-5e8a-3a65-97f7-4e93835be372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:4612::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b2:29:51:50:be:55:ec:33:1c:ad:18:74:55:1b:68:51:79:
5c:f7:63:69:c6:23:39:90:2b:f6:87:68:70:23:d8:8d:37:de:
9d:31:7b:39:f9:0b:1c:6f:3b:7c:2d:44:39:d4:c1:c4:70:5c:
39:ed:04:4d:2d:ad:28:9b:a3:ef:fd:00:ee:5a:da:93:25:2f:
c1:2b:a5:fd:4c:4d:2f:bd:6e:d7:86:c4:11:e0:f0:9c:75:09:
f4:32:f7:64:ab:a8:cf:37:24:7b:9f:c5:fd:d8:ba:8b:e8:d2:
0b:b7:dd:f0:fe:be:00:59:c0:e4:06:45:af:5d:72:0f:44:75:
e2:16:49:d1:41:5c:a9:0b:da:e4:64:5f:25:32:70:e3:15:56:
53:83:81:a2:ec:25:2a:f0:4a:a2:d1:ce:8b:70:8e:2b:be:80:
1a:db:9e:bd:8e:b9:83:4f:ef:23:17:e0:33:21:43:fb:bc:b6:
04:60:ec:18:06:ae:c7:4e:e2:2a:e8:29:6c:be:86:91:76:80:
53:d5:6e:7e:2d:29:de:a1:6f:41:ca:12:31:96:9b:dd:4b:2c:
1c:79:17:17:fa:11:16:b1:0a:78:0d:17:20:87:66:24:e6:88:
07:61:e4:36:42:fa:86:2d:2d:b5:67:b0:07:80:67:56:4a:d5:
69:70:86:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgy7/VDj88rAE2VnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjQ2YjNiNWYtODU4ZC00Nzg5LWFiMGItNTk5NGIzNWQzMGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nULKRFl2SpdRHX6xoJwZ1Ibut+a1gktKaQB
rz91VlqCZV5moriuGJDVrM/4JkFHpkarzbX8P1rT/JuHY4LhIRq80f21Ev/Z0Y5u
QAQAHFJ105iAReCZuiEQ6FgHqNSY4Dj5aAUn9Mv+QJmjrLcX9uwZEs1pIofEV94a
F/ECqLGb2edDscF8wpen6/VIVCY0kia3Enw/27NOUNcmP68q4zYqJp8X3/wdBRno
+PAJ1TSN7H49AbyfkKlf5G32PyMN4rZbk+28W+0nHL/C1iTolnSDXn3uJusrW6lW
bw65s8t8D+vSidtq+1yQNPxoXSdxaAvbv6LO5ulKiKlzaVQUrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCDd+say9vJtucRAIuZ8Zv0i29jsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGUxNGZlYmMtNWU4YS0z
YTY1LTk3ZjctNGU5MzgzNWJlMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC+yKVFQvlXsMxytGHRVG2hReVz3Y2nGIzmQK/aHaHAj2I033p0x
ezn5CxxvO3wtRDnUwcRwXDntBE0trSibo+/9AO5a2pMlL8Erpf1MTS+9bteGxBHg
8Jx1CfQy92SrqM83JHufxf3Yuovo0gu33fD+vgBZwOQGRa9dcg9EdeIWSdFBXKkL
2uRkXyUycOMVVlODgaLsJSrwSqLRzotwjiu+gBrbnr2OuYNP7yMX4DMhQ/u8tgRg
7BgGrsdO4iroKWy+hpF2gFPVbn4tKd6hb0HKEjGWm91LLBx5Fxf6ERaxCngNFyCH
ZiTmiAdh5DZC+oYtLbVnsAeAZ1ZK1WlwhoQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:22:09 2025 by rpki-client