Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa
File: 8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa (raw, json)
Hash identifier: 5NgfUKLoNotjV1Doi5xSKcVodrXoyocZOE3UanklK+k=
Subject key identifier: D3:CF:EC:A4:26:C2:33:79:0A:BF:DF:8F:82:0E:9F:56:AC:EB:89:74
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF73A14F9182224052400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397225
IP address blocks: 2001:502:ad09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f7:3a:14:f9:18:22:24:05:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=0d57ed47-95c7-429f-a82f-8616520ba7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:d8:33:dd:d6:4d:d0:3c:76:59:52:1b:c6:
ff:12:c0:bf:71:94:fd:6d:44:63:2c:fc:a3:1e:68:
7d:05:2b:3c:69:bb:9c:72:ba:73:38:6e:33:1d:55:
b5:76:fc:cd:a2:57:0f:03:33:09:8a:8b:9e:f2:ae:
fe:00:20:55:20:92:68:98:25:b5:99:7a:63:b7:34:
f4:fe:e2:fd:82:03:98:3d:6a:65:9a:95:1e:92:19:
53:11:0d:8c:a3:11:8e:21:87:62:72:3f:f5:67:56:
83:df:1a:8c:ee:a7:91:3c:d2:d1:a4:cb:e1:f3:19:
9b:f7:05:78:4a:f8:a3:b9:77:a4:f2:42:64:1b:33:
86:22:7c:a1:2f:2d:4b:31:37:3c:bd:40:a1:26:ff:
7c:17:d1:df:e4:9f:0b:16:55:c7:69:29:f1:7e:d8:
06:f4:88:33:66:61:93:1b:88:3e:26:05:23:07:44:
10:32:90:5a:97:a9:cf:9f:67:b6:9e:dd:e9:99:50:
3d:2c:28:c4:ef:a8:ea:ac:6a:6f:cb:15:d4:dc:76:
1f:fd:a5:4a:43:9b:75:0e:8a:97:81:2d:a5:3d:aa:
7a:b0:ac:4b:cd:da:a5:1d:33:49:61:4f:f8:5f:2b:
13:3f:d5:1e:55:05:a2:f4:8a:f8:5d:34:e6:f4:95:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:EC:A4:26:C2:33:79:0A:BF:DF:8F:82:0E:9F:56:AC:EB:89:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8cdf7e74-2091-3b0e-a650-3ebe2b9f6c4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:ad09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:88:6a:b1:0a:4e:15:4e:66:9f:07:69:8f:58:fa:3a:67:80:
e0:ae:6f:66:ce:89:36:d0:40:a8:2a:2f:22:8e:6e:3b:ff:27:
2d:a2:5f:32:e3:fe:08:53:4b:36:f3:80:c1:e4:5f:e4:d3:cc:
72:d9:2f:ab:c8:bd:5a:05:6b:5a:08:7d:32:75:c9:6b:a4:3e:
8d:e3:15:78:9b:1e:91:55:d1:7d:8a:26:ad:ad:cf:35:30:eb:
50:5a:99:1d:21:40:e1:3f:10:0d:56:b7:71:19:d2:59:c5:ff:
84:ab:50:9d:3f:b6:3c:8f:02:e7:ba:b5:e3:68:d7:60:d6:e2:
0e:eb:35:90:55:78:e7:ce:92:fc:9a:ac:25:f4:6c:3e:c6:8b:
aa:10:ba:bf:e8:da:3d:7d:96:0d:05:b0:e7:b0:c8:7f:53:e9:
c7:40:5a:7d:03:9a:da:45:99:84:ee:a1:14:5b:fb:e9:33:13:
38:46:ae:7e:8a:c0:8d:95:7d:a7:c5:6f:76:6e:e4:c6:56:11:
77:b4:f2:db:cd:82:c7:ad:34:e2:0e:40:e6:12:25:27:e3:e5:
b4:8a:19:d2:2b:70:58:55:9e:a8:62:05:80:ec:0c:b4:d9:ac:
c1:2f:6e:f8:c4:f5:6e:53:b7:75:f3:3c:70:7a:5a:af:18:c3:
35:a8:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:31:37 2025 by rpki-client