Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa
File: 98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa (raw, json)
Hash identifier: gIXFN2/UKcobKGO9RVC6kVADRr5mliTryDWpKwcBaj8=
Subject key identifier: FE:10:15:74:88:36:6C:6C:4A:B2:EF:24:5C:96:BA:6A:E4:57:29:FF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFE87F430F662A36295300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 12008
IP address blocks: 2610:a1:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:e8:7f:43:0f:66:2a:36:29:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d1db3ca9-3949-4361-89a9-8468fd60717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:4a:77:9d:2f:46:b3:fe:6a:43:74:38:b8:
00:7c:ee:2c:06:7b:d0:9d:ca:1d:6f:4e:f3:5b:10:
2d:aa:fe:d8:06:b1:b4:4b:d7:8f:91:08:63:41:73:
4a:77:1f:de:3d:64:d0:60:47:ef:0d:3a:9a:6b:f1:
3f:26:a5:7c:a0:9c:c0:c5:f5:8f:61:37:c5:bf:a5:
1c:ea:d5:b0:23:4a:a5:e5:fa:2c:a8:f4:2f:45:45:
64:d9:bf:59:af:d4:93:78:6a:ca:c7:92:08:1c:63:
17:ff:ff:e7:c6:b9:2f:63:68:4e:b8:dd:a8:7e:88:
18:82:cb:74:e4:e8:3a:e5:e9:cd:e8:05:b8:d3:7d:
2c:91:f7:b3:e5:ef:b6:57:ec:c5:e4:01:61:08:9a:
ea:e5:b1:94:eb:6f:14:c0:29:0c:b0:2f:88:59:10:
6d:d3:b9:71:29:0c:5b:66:12:5a:49:8d:72:20:0d:
4e:c3:3f:95:b5:45:56:91:60:65:5d:c4:38:99:f9:
ad:0b:b1:5c:5a:cc:69:9e:27:c6:d2:b0:61:0e:1f:
11:50:56:ad:89:13:d5:ef:82:73:16:82:95:2d:91:
21:f7:0f:c9:b1:fc:92:c0:16:67:23:dd:7b:ea:67:
3f:3b:9e:82:2b:17:7a:99:5c:76:ad:19:5e:b8:5d:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:10:15:74:88:36:6C:6C:4A:B2:EF:24:5C:96:BA:6A:E4:57:29:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:1000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:28:9b:2e:8e:38:0c:4c:04:75:fe:8c:86:77:c3:49:2e:a9:
af:43:61:0a:8f:d9:a5:6f:51:fa:e5:0a:79:e2:c7:f6:36:b1:
aa:cb:64:1d:51:74:d0:10:39:6d:12:97:c8:20:68:2d:38:54:
2d:e0:20:49:6a:f2:24:a4:56:81:f2:4c:1b:6c:79:f7:7f:2d:
3e:ca:76:71:80:d4:e1:b5:11:96:b0:78:03:4f:9e:d5:65:f3:
b0:9b:6e:24:1f:41:b7:cb:ca:17:a3:ce:a7:73:1f:fa:22:58:
5c:b3:8e:f2:9d:95:44:e2:d1:04:1d:39:5b:1d:a2:e3:db:97:
af:3e:1c:00:54:7f:f4:f0:a0:1e:1c:81:a5:cc:f7:1d:4a:f1:
96:33:62:ad:a0:0f:cc:d0:65:a7:9e:5d:c8:42:03:02:d4:93:
bc:90:cb:d6:e8:a4:88:01:f7:7f:bf:f1:d9:eb:c5:f7:25:a1:
25:3e:e3:10:4c:5d:ed:aa:78:6c:e6:eb:46:9c:7f:fb:c0:0f:
ab:c8:07:42:af:73:61:04:9f:6f:cb:7c:7e:8d:bc:5d:60:17:
d8:fc:2a:03:c0:09:6e:76:a7:18:0e:59:d8:74:b9:b9:97:11:
24:f8:53:e8:e8:4e:0f:76:81:1a:23:30:06:cb:66:d3:be:ce:
72:d1:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:29:33 2025 by rpki-client