Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa
File: a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa (raw, json)
Hash identifier: 0I9jTt7vfnVNy6Zvc8hec+JvZ4PTMrhrGYxIEYCIWE0=
Subject key identifier: 83:2A:8A:C7:D5:C2:FC:6E:6C:BC:B9:7F:E2:2A:A8:E9:85:9E:5A:CA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF93D9B7B5B3DEF2673D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397225
IP address blocks: 2001:502:d399::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f9:3d:9b:7b:5b:3d:ef:26:73:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b8b608b0-3064-4049-b294-793bafdaf841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:66:4d:6b:26:19:47:b5:37:b6:98:65:20:
8d:94:38:d0:a3:18:ea:61:ff:15:b4:0f:8d:e5:3e:
bf:98:60:27:32:b4:4b:13:69:a3:a9:e0:4b:36:b9:
4d:e4:1c:c3:84:85:9f:e6:42:ca:58:44:72:07:f6:
0a:4c:f9:e9:c1:4e:91:ec:9f:84:7e:cb:d8:83:f3:
aa:10:2b:5b:68:70:b0:ee:da:21:10:c8:85:23:70:
50:3e:f0:b5:03:4d:36:91:90:7f:3f:36:5b:c5:72:
3a:7d:ad:98:96:b9:22:76:f7:ac:b2:bc:7b:c7:a4:
be:d1:7f:d4:f1:de:b8:c4:49:5c:da:9f:d7:a5:14:
87:46:56:e0:e8:1c:ab:0a:c6:e2:2c:71:68:9d:5f:
a9:b1:0e:62:35:a5:09:24:0a:bf:83:02:92:2c:af:
fb:ce:d5:eb:36:54:24:8a:36:61:8a:90:dd:4c:5c:
62:76:44:70:0f:95:ac:81:3f:1d:19:cd:c8:34:a9:
54:8c:c2:d5:c6:76:d5:d3:b8:74:b8:07:c3:1c:2d:
ef:46:6d:42:1a:79:dc:7b:1e:36:be:52:5c:4c:aa:
bc:73:12:ef:23:2a:4c:94:29:e8:f0:37:f4:4b:9a:
1f:ef:32:06:26:f3:db:34:f4:14:7d:65:65:46:3d:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:8A:C7:D5:C2:FC:6E:6C:BC:B9:7F:E2:2A:A8:E9:85:9E:5A:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2b1f8a2-43d6-337d-b53c-ed0f31380c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:d399::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:c2:36:43:6a:53:fa:f8:3a:42:46:dd:30:2b:27:c0:74:ff:
bf:a5:9d:72:36:b0:99:da:e5:93:f0:75:d8:62:00:95:f7:37:
f3:9e:91:58:3f:fc:ba:f4:3f:71:58:cf:cc:17:1b:7f:28:64:
af:eb:60:e7:3a:62:58:33:83:43:d7:07:89:b1:e1:8b:f4:28:
2d:2a:2f:e2:43:8c:8e:65:7a:43:bb:38:cd:76:55:fe:6c:c9:
54:b9:fa:57:e8:37:36:84:e3:d9:80:22:5a:74:c6:33:7e:04:
98:d1:ab:f4:82:b5:c1:91:be:5e:57:3b:ef:ad:ce:19:de:21:
1a:c2:35:55:bd:eb:c9:ba:74:86:8a:d6:d8:c3:1a:43:f3:f6:
e8:b9:2c:c8:31:1f:65:c7:39:ec:a7:3d:6a:45:bb:3e:64:d8:
10:4d:e0:b7:53:28:8d:c8:8e:32:ff:c7:61:d1:28:52:0a:1f:
3c:c6:4b:94:6f:21:ec:05:67:d6:c3:84:6e:69:cc:1c:46:99:
b2:11:7d:b5:a6:fd:ec:cc:91:36:ce:c8:ed:d8:18:1c:39:79:
ea:37:9a:d3:05:07:19:fc:80:15:6a:ad:b5:e4:dd:b1:48:db:
9b:84:ec:fc:f4:1b:e7:81:85:27:50:f3:ee:16:cb:ca:23:1f:
ff:17:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:19 2025 by rpki-client