Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa
File: b30d8df0-1f48-31e1-a05f-8db841a6372c.roa (raw, json)
Hash identifier: Cjxpz0+oZimmWKh/Cr76qQNlVySSjQlaZrOV4ocjk3o=
Subject key identifier: CD:97:04:97:6B:D7:5A:E0:D4:09:86:07:3A:99:DB:17:84:B5:E2:86
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFFAA95DD015CC8FFAA480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397215
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:fa:a9:5d:d0:15:cc:8f:fa:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8e0f099e-b6bd-4845-aeb1-53efdf563f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:d0:34:3b:d3:5e:7d:a2:3c:64:0a:02:80:
49:7c:37:1a:98:1a:19:90:ae:61:41:2a:f1:49:63:
eb:47:03:ad:41:1e:b1:4e:5d:58:35:12:53:5c:a9:
67:b7:0f:e0:92:04:4e:c2:69:fc:1c:fc:b3:c4:00:
72:1b:9b:2f:32:17:20:40:9b:8d:bc:de:11:cb:3f:
9c:19:40:86:1f:91:b1:36:ff:d2:3c:ad:e1:18:18:
90:54:8b:ce:c0:b4:f7:9c:4d:75:eb:fa:70:91:3d:
bc:70:2a:1f:6e:c1:10:b5:b4:0d:df:93:99:2f:02:
62:79:18:ca:d3:61:50:a6:9d:b8:eb:ab:36:8e:2f:
a0:76:46:4e:85:8e:be:74:de:e8:cb:1d:94:14:b4:
e8:f9:f9:21:c6:09:f5:48:03:eb:d5:d3:72:50:c1:
7e:0b:70:e0:9b:77:e5:f2:83:b0:1c:fd:6f:3b:5a:
19:46:eb:5d:b5:3d:aa:44:7e:28:be:e6:cb:79:9b:
19:41:87:4a:07:b6:ca:59:1f:29:72:73:06:7f:c6:
52:f1:15:44:81:bf:34:42:48:ee:df:03:cc:ca:7e:
de:f6:c8:d6:7f:d3:70:ae:ae:60:b1:fc:6d:2a:49:
c9:9b:e4:f0:b1:a2:83:54:f7:1f:43:ca:d6:8d:2a:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:04:97:6B:D7:5A:E0:D4:09:86:07:3A:99:DB:17:84:B5:E2:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:12:de:93:02:01:90:88:56:65:41:89:1e:19:bf:23:ca:8f:
68:29:a6:15:dd:fa:71:4c:4b:2c:12:01:5e:3d:76:45:0b:b4:
ec:13:8d:97:5d:57:a1:f2:04:fb:59:e7:14:be:23:44:8b:ed:
4e:eb:a1:3b:66:db:e8:9f:4e:4a:a6:33:b7:fb:4b:e5:6f:6b:
e9:f8:b1:29:47:cb:7d:08:cf:cd:46:b5:c7:7f:07:15:5f:a6:
be:45:83:dc:40:3d:00:25:06:d3:73:c5:5d:9d:42:1f:d6:ad:
45:68:3a:b7:03:2d:84:bf:42:fb:41:8f:fd:84:3a:30:42:79:
e0:02:e8:77:af:de:63:fc:ad:b3:bb:45:19:1c:c0:56:63:c9:
03:18:3b:e8:ad:4d:07:7a:c7:4e:98:ef:10:e9:d4:05:45:94:
ad:60:fd:ad:3e:d7:03:dd:cc:db:4b:43:ef:62:d3:c4:4a:2c:
fd:a5:f7:c8:97:c5:e3:66:98:b8:1c:b2:31:28:ae:66:4e:d6:
6e:88:39:96:7e:fd:0d:10:8f:a4:c5:d3:ef:75:51:79:0e:56:
83:73:1f:62:92:83:10:62:9b:ae:12:30:57:e2:52:b1:9e:0c:
5b:b1:f7:b9:c5:e5:1a:b4:12:35:ae:37:96:66:e3:3b:93:74:
e6:8d:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:19 2025 by rpki-client