Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa
File: 8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa (raw, json)
Hash identifier: KRe88TIDk278THSgxcoaGTphrMCdthTqdzLguCyOPc0=
Subject key identifier: 25:D7:9D:0C:21:2E:BB:A5:D5:81:A2:F6:DF:44:75:00:5F:B0:93:93
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFFF269FFCA72533B7E400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397236
IP address blocks: 2001:503:e239::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:ff:26:9f:fc:a7:25:33:b7:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=4a825b83-e0bc-4b21-bdaf-97f07a11770a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:34:f2:3b:27:38:7c:2d:16:61:4b:c4:d7:
58:6e:96:9c:8e:0c:23:cb:5f:ee:c5:8d:05:29:14:
a1:b7:e9:61:65:9e:80:d9:50:59:f1:e9:98:fa:3d:
14:bf:d5:bb:8d:9c:d8:84:d4:1e:ef:aa:5b:5e:04:
7b:6a:43:a4:87:63:dc:38:c1:3c:90:fb:3b:99:00:
ce:c6:39:00:96:68:10:b9:08:c0:af:03:6f:44:67:
36:d0:87:ff:0b:2c:02:0d:f1:40:88:b1:22:3a:9e:
e6:67:19:26:09:5e:5c:31:5c:55:f0:77:56:7a:a5:
3f:13:a0:87:97:c6:65:f3:09:65:85:41:eb:c8:f9:
53:53:fb:1b:12:e3:af:fc:d8:54:d8:db:98:e7:d8:
7f:70:48:99:de:81:8b:3f:12:c6:05:a3:ad:9f:22:
be:ec:52:da:df:3f:9e:0d:89:b0:7e:c9:63:9a:38:
1c:12:b4:b4:44:6e:33:a1:64:0a:a5:ac:cb:1d:db:
8f:b9:88:6d:36:44:d8:5d:b2:bc:28:b7:17:35:74:
1a:50:65:bb:be:f9:0e:9d:33:6f:90:95:53:3a:7d:
be:46:2f:87:a9:e1:8e:fd:65:e7:1c:37:26:be:75:
da:ec:27:16:b6:ae:b0:24:cf:a7:f6:53:73:95:e7:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:9D:0C:21:2E:BB:A5:D5:81:A2:F6:DF:44:75:00:5F:B0:93:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:e239::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:78:41:ca:85:42:93:cc:c3:6d:26:93:56:b5:5e:84:7d:45:
2c:38:a4:36:13:1a:3e:ac:72:2e:a0:c2:af:7b:1a:c1:9d:b2:
f5:94:25:a3:6f:1b:f0:82:96:2c:36:75:6e:ed:21:da:29:07:
b2:4e:fa:40:0e:c4:cd:7f:5d:c3:27:0d:eb:2e:28:12:57:b9:
ac:a4:17:73:85:e7:47:c9:c4:3e:37:25:e2:5b:6c:8b:b1:3c:
b1:92:8c:d4:b7:a6:f4:2e:7b:14:88:8d:a6:d0:7b:a2:eb:aa:
40:3f:a4:b2:b6:88:99:40:80:25:99:c0:55:fa:18:93:b2:27:
bf:67:82:4d:31:ee:4e:09:1a:da:a6:99:94:49:ff:ca:89:b0:
28:13:b2:49:e0:0e:9a:b7:d1:df:72:fb:ba:29:7a:f1:02:37:
10:27:84:5c:33:15:f6:ee:9f:3c:ee:18:07:3f:e1:96:72:d5:
b7:a6:50:e2:8c:fe:78:ef:ff:f6:ec:3a:d1:ee:cc:47:fe:e7:
33:7b:73:31:fb:97:09:a8:82:10:d7:d7:5d:d8:6e:ef:e0:96:
46:f4:80:e5:86:dc:44:fe:82:93:d8:71:b8:1b:41:aa:87:d5:
fe:a9:49:37:9f:20:d1:43:10:2f:cd:be:94:a4:74:f2:00:3b:
2f:b2:09:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:57:19 2025 by rpki-client