Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba6ff233-df1a-347b-9b35-3caf1669dd39.roa
File: ba6ff233-df1a-347b-9b35-3caf1669dd39.roa (raw, json)
Hash identifier: NEdRAZeOBXn9bPeqA7CNwbBkIM9qzb8wmnUHsgQSRXY=
Subject key identifier: 48:31:D2:FE:CC:78:8E:F9:82:DB:68:50:97:45:EB:20:3E:B5:8F:42
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFFFE0085DC9CA4CCF7280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba6ff233-df1a-347b-9b35-3caf1669dd39.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397216
IP address blocks: 2620:74:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:ff:e0:08:5d:c9:ca:4c:cf:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=2d013960-1218-4abd-94fc-5bd561d2a083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:71:3b:c2:b4:46:94:f3:3b:a4:e2:36:9f:
12:2c:97:c6:74:a0:22:57:a8:2e:f2:da:39:ed:28:
90:17:48:74:73:45:3b:a8:fb:56:7b:9f:ad:40:8f:
0c:f3:b5:26:e0:77:06:5b:3d:ea:41:e2:9d:79:e6:
49:f4:0a:45:44:96:c1:94:b4:10:5a:36:76:20:e2:
25:00:f4:35:0d:af:9f:cc:50:0d:f5:f3:cd:f0:a6:
76:f0:f0:d6:a2:84:21:6a:ad:9b:dc:c1:30:a6:89:
74:88:f6:db:6b:a0:b6:f1:3e:d1:48:7c:c9:2d:85:
9e:d4:82:f5:0b:a2:65:79:07:89:10:49:43:ef:db:
97:38:cd:8a:63:34:64:b5:d0:94:98:dc:0f:a7:c0:
eb:e5:5c:17:3c:a7:7e:cd:72:56:6d:6d:67:47:1e:
b9:6f:0a:05:b2:85:97:04:02:5f:10:30:97:59:f5:
c5:c0:55:45:65:02:39:12:14:b8:15:fc:52:ae:80:
36:ba:a4:ae:d0:21:43:b3:fe:c2:66:3d:ce:d5:9a:
c9:ca:d4:df:78:0a:da:55:d7:bc:b5:f9:93:33:c7:
3e:ec:e5:8e:81:ee:9a:2e:c7:65:6e:61:31:50:72:
32:02:c9:c7:79:12:a3:f6:23:9f:d2:77:83:2f:fc:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:D2:FE:CC:78:8E:F9:82:DB:68:50:97:45:EB:20:3E:B5:8F:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba6ff233-df1a-347b-9b35-3caf1669dd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:0a:e2:cc:c7:65:7e:88:9c:1c:df:95:cc:5f:7d:a1:1b:2d:
5e:4c:9b:c3:cf:95:cb:22:f6:49:77:2f:c9:88:49:29:ea:0a:
3c:c6:e2:6c:4d:74:47:04:34:03:5b:74:0e:02:44:39:84:33:
b9:7d:7f:42:42:10:7c:fa:9e:ed:25:cf:99:41:f5:c8:54:5d:
93:80:cf:c5:31:3e:32:91:ab:53:63:1c:a0:80:ca:a7:b4:89:
2a:a4:a2:29:16:a4:dd:e5:c1:ab:78:71:27:b6:1b:20:bf:f5:
05:c2:3c:62:71:fb:76:7a:e2:9d:b7:1c:42:f7:c9:9b:9b:ee:
aa:b0:30:1c:8e:5a:64:13:da:e1:26:66:f4:6e:c3:51:85:8b:
e9:f0:74:8e:5e:56:81:7a:30:67:c7:d9:d7:38:d7:a7:5e:6e:
aa:62:6f:66:da:dc:07:33:7f:1b:ff:4a:93:3d:c1:ad:0e:8e:
a9:dd:40:85:6f:63:eb:15:3d:aa:02:0a:d3:42:23:49:67:00:
ee:99:c1:20:71:6c:2b:88:5a:3a:3a:a9:87:65:c4:0f:80:f4:
1a:ca:f7:a6:99:f4:62:cc:a4:c9:51:13:39:ad:7b:74:0c:75:
d8:b0:5c:d2:67:26:63:96:ca:90:ab:79:3d:05:8a:84:e4:7d:
9c:57:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:50:11 2025 by rpki-client