Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa
File: d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa (raw, json)
Hash identifier: dQm30DkXY4L3HBcF42Qjzl9Mw/zfTVwpsSDDkzX8LEM=
Subject key identifier: 5E:74:96:8C:C1:BF:80:34:FC:B3:95:EB:CA:60:C5:77:42:B2:79:56
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFFAEC9BFD3A14BE312780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397219
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:fa:ec:9b:fd:3a:14:be:31:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9c1e7484-9657-49d6-8d18-63f5ce0d2abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:0d:7b:12:04:e3:6c:c5:0f:7a:34:78:8b:
31:08:54:79:82:36:64:89:6d:4a:f4:37:2e:da:bf:
d6:ff:96:a8:86:c9:98:51:00:95:e1:6d:b1:9d:5b:
e1:37:96:fb:bd:be:46:57:bc:7f:55:73:66:ab:67:
59:ec:ad:9c:de:fc:80:3e:78:9d:74:8b:a2:e5:54:
5e:1e:ff:dd:6d:0f:d8:0f:83:2c:b2:30:db:8a:51:
fb:ef:f7:09:c5:1e:be:ea:64:e0:a3:25:b2:95:c1:
44:6e:36:11:75:71:13:b7:23:70:a6:92:c5:30:b5:
eb:84:ac:f3:71:9b:56:79:e2:23:cc:61:85:de:7f:
d5:d6:2d:45:a9:1a:05:bb:17:19:8d:ed:13:2c:c6:
33:c8:1a:c4:c1:25:7e:e2:4c:17:cd:71:4e:21:23:
b6:d1:ce:08:6e:11:6a:5c:83:3b:d9:e6:90:48:21:
53:05:cd:75:d5:6f:07:bd:8e:97:e3:1f:6d:3f:a3:
10:57:2e:6a:7b:40:1a:c3:a4:51:56:86:ad:89:b6:
a4:30:fd:c8:7b:73:1f:80:73:10:12:57:d1:e6:fe:
2e:8e:c3:95:f7:3b:29:80:be:4a:49:33:4a:bc:39:
10:6b:ee:d2:f5:0d:83:60:8d:e9:d2:ce:51:74:9d:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:96:8C:C1:BF:80:34:FC:B3:95:EB:CA:60:C5:77:42:B2:79:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ed:d1:02:aa:35:8b:e8:4c:ad:57:98:74:41:fc:de:0b:9b:
4e:f9:25:bd:85:3d:f2:21:4d:be:b9:34:54:d2:25:69:4d:74:
18:bd:57:93:6b:08:eb:47:16:34:af:87:e5:fb:1f:03:dd:5e:
7a:92:95:e9:2b:f3:35:e0:75:d7:44:70:fd:03:16:39:25:9d:
6b:d8:9d:4c:5f:80:d1:34:f4:3b:7c:d2:3d:1f:37:b5:68:01:
b0:38:8c:98:c6:c5:0d:04:f8:54:42:fc:e6:3b:31:00:64:45:
89:aa:c6:eb:86:fb:a6:9e:1a:ce:61:68:4a:0e:5c:4d:36:a6:
e2:43:36:b4:6c:51:fb:9c:a3:fa:38:34:60:ec:ee:e8:06:db:
7f:0e:55:04:dd:69:1b:23:75:53:ea:00:de:1b:c7:ed:d6:98:
b7:e4:b7:92:a6:f6:53:34:20:04:35:cb:e4:03:76:e5:4b:14:
a9:98:03:16:c7:99:54:76:8b:6e:39:5b:78:8b:cf:12:30:cd:
a6:f4:f5:3f:61:47:7a:88:7f:df:a9:1d:95:43:23:fd:7b:6f:
6e:14:99:e4:8c:67:9b:2b:24:ed:de:4a:2b:a8:3c:fd:08:b4:
05:98:a2:20:f9:8e:02:4a:da:5f:3b:3b:33:bf:34:46:c1:c7:
11:fd:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:21 2025 by rpki-client