Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
File: 9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa (raw, json)
Hash identifier: AmjIUvKCRQkPtTZVikDBzG8nq1Zs3K6YjKAYx4WezM8=
Subject key identifier: B2:59:E9:3F:5F:75:61:50:1E:F0:4E:52:D3:51:07:8C:78:C5:8A:22
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF2C3567F05B7BB6859C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397221
IP address blocks: 2001:502:2eda::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f2:c3:56:7f:05:b7:bb:68:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=db401232-620d-4a59-bc7e-71cc90ff35a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:0a:aa:70:70:9e:d6:12:fc:f9:6f:f0:17:
c2:63:66:6a:d7:67:66:dd:77:38:cc:60:55:12:4e:
da:b6:12:47:d1:55:bb:58:99:67:7b:b9:99:99:0a:
2c:25:67:4e:9a:1b:a3:dd:ce:3d:48:c9:3f:5f:bb:
a5:1a:d7:4f:83:81:36:29:64:1c:7c:47:ca:0a:f0:
3b:89:38:dd:63:22:be:0e:c9:f0:43:8b:1f:83:d3:
64:42:15:c9:a7:53:5f:22:6d:8a:21:67:79:da:48:
2a:e4:60:b0:bc:ac:41:83:2b:df:12:f4:e1:f2:f1:
a8:10:97:25:19:30:8a:c9:77:e8:24:b3:65:11:5f:
e4:4f:47:8c:50:1b:36:cb:51:c7:83:19:fc:6c:69:
fe:86:99:1d:c5:30:72:ad:4e:bb:70:51:65:c0:6f:
5b:40:c3:0b:bc:c7:e7:1f:e2:14:f4:ee:d4:36:d3:
88:4a:70:f1:6f:2c:b6:23:f6:9b:ae:1c:b6:93:16:
0e:ea:a0:98:5b:4b:9a:87:1c:09:64:b2:31:64:01:
b3:45:bf:a8:79:75:25:60:92:76:d0:da:0e:39:51:
4a:66:c6:ae:48:d5:6d:5c:f9:6e:cd:c6:28:f5:be:
1c:51:cc:b2:e6:06:bc:af:13:a2:71:18:ca:4a:1c:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:E9:3F:5F:75:61:50:1E:F0:4E:52:D3:51:07:8C:78:C5:8A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:2eda::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:09:a2:8a:24:72:3b:f5:26:6c:2f:49:47:57:9b:43:f0:8a:
b3:f1:b9:9e:3f:01:c9:56:ee:b7:83:54:02:03:34:15:11:c3:
81:c3:d6:87:f3:c0:05:d2:9d:e9:6a:f3:b7:77:e3:85:59:3f:
bb:d2:88:48:c9:fe:86:fc:23:56:41:d8:25:bf:72:cc:3a:e3:
be:63:56:79:b2:68:10:7c:73:b9:2b:48:2b:73:de:ec:54:96:
32:d1:57:1f:ca:7f:34:8b:3d:ff:81:38:90:55:60:d5:4b:0b:
47:9c:58:bd:fd:6b:8c:15:4c:b0:22:72:7f:56:28:f1:be:d7:
8b:df:c9:67:cf:ab:25:5c:99:e5:63:03:5f:a4:ba:9b:de:7b:
ba:cf:d6:21:66:84:e5:9d:87:80:46:ce:26:04:1c:08:b4:37:
95:79:e1:df:8a:a0:8f:7e:84:d7:9b:9f:97:cb:74:3d:87:0a:
8f:ef:33:e7:1b:34:b7:48:a1:b4:5b:7c:3e:c7:4c:14:fb:46:
46:70:1f:fc:1a:1c:e0:b2:ea:9e:8f:73:ab:ed:b3:40:bc:dd:
61:6f:1f:a1:b5:55:6e:a8:2d:ee:36:03:a4:fb:c4:35:86:c6:
2a:dc:2f:16:3b:1c:77:f6:c9:0c:d0:ae:ea:10:01:86:d9:d8:
f6:76:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:12:12 2025 by rpki-client