Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa
File: cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa (raw, json)
Hash identifier: OD5eSB/VMiWaaUUHIaDeJ5Z0rUM0xauI4vQ9OC84ESo=
Subject key identifier: C1:82:5E:E9:A2:02:25:43:49:5E:27:D6:B0:6A:2B:79:2F:F7:31:F3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFFF69D57F88D2A70798D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397241
IP address blocks: 2001:503:e239::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:ff:69:d5:7f:88:d2:a7:07:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c4da8344-26b6-46c6-98d2-f96fc2be0bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:88:b6:61:c0:1d:05:72:10:87:80:16:68:
1d:3b:f2:53:9d:48:f4:7d:10:38:5b:42:84:53:11:
ff:8f:49:84:fd:16:76:57:9b:20:87:8a:76:2c:24:
e4:44:4b:7f:a2:9e:41:a6:18:cc:65:50:fd:9a:57:
cf:80:a7:27:e3:1c:bd:64:eb:a5:0b:80:2e:1f:ce:
74:aa:b2:02:a5:11:66:fc:b9:c4:09:6d:f3:56:62:
4e:3b:6b:a7:64:61:25:7b:24:11:b3:c6:84:78:b5:
04:0b:f9:cb:66:5f:67:12:cc:2d:33:4d:c7:fc:a3:
f7:fc:97:26:57:ac:7a:e1:a6:ca:b9:09:91:f1:eb:
9e:ae:1f:47:54:fc:46:4c:9e:2b:f2:0b:9f:1f:8a:
45:53:b0:5b:14:1e:c4:32:ef:02:2f:71:a5:cf:49:
f4:0a:c4:5d:52:be:1f:e8:1e:1d:73:c5:bd:73:b1:
9e:fa:d5:70:fc:c5:ee:b5:9d:d5:1a:e8:e7:6f:63:
0a:cf:c3:57:4e:be:0c:29:a9:95:f4:75:f2:2a:e6:
d6:15:da:7b:12:bd:af:71:73:c6:2b:45:02:dd:48:
d2:81:1b:30:45:45:18:ba:a3:13:c6:2f:0b:ef:cd:
22:cf:29:95:56:02:ed:4f:bc:a1:df:1d:74:73:ca:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:5E:E9:A2:02:25:43:49:5E:27:D6:B0:6A:2B:79:2F:F7:31:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdd43ac6-134b-3b1e-b16d-b30e309047ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:e239::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:de:53:52:d6:3b:85:32:fa:86:1b:c9:5a:7b:97:5c:17:9e:
52:4d:a6:21:10:18:e4:71:a3:3f:09:2c:46:d4:d9:8f:f4:8c:
46:8f:00:33:98:ba:07:56:c8:3f:af:8f:c4:3d:01:46:34:e5:
16:7d:1d:36:9d:e3:37:1f:b8:7b:cd:c3:4e:e5:45:34:63:9c:
92:73:5d:93:a1:98:17:50:a3:6d:15:fe:6c:80:4e:27:fe:0b:
fb:3f:49:93:de:be:f1:2d:78:b0:91:3d:92:05:d2:84:7a:77:
d4:b8:7c:6d:bc:de:ea:99:7d:76:78:6a:c2:43:c5:94:16:7a:
da:9d:8c:03:be:b6:c1:79:03:24:fc:6b:5e:bd:18:73:b8:0f:
00:42:7a:b0:e8:da:ca:50:72:5e:12:1a:66:1f:cf:1a:ee:a1:
62:30:5e:80:33:4b:ec:9b:b3:ac:79:e5:b4:b9:35:f7:f0:a7:
c7:c0:dc:78:5b:5b:29:a5:dd:d7:8b:ef:a6:1b:00:7c:7c:85:
2f:08:4c:a1:48:e4:64:08:d8:57:b4:5b:e5:82:f1:04:20:13:
b1:f2:45:1e:65:41:97:76:07:3f:95:cb:2c:00:aa:a5:cb:1e:
bb:ff:4d:7f:8c:d2:47:b2:a0:07:83:f4:7d:b8:2f:d0:25:ed:
05:7f:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:48:44 2025 by rpki-client