Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d503fba6-d5e1-395c-bee8-95e6a63f0958.roa
File: d503fba6-d5e1-395c-bee8-95e6a63f0958.roa (raw, json)
Hash identifier: NXazcRSpOeR6Ex1CVY6bdtGDgRkndNfAl+KRT1psnaU=
Subject key identifier: 80:AA:08:E7:2F:A5:DF:0B:0A:BC:AB:EA:69:0C:05:7D:A4:82:E9:47
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0008FAE6B8FAF92574900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d503fba6-d5e1-395c-bee8-95e6a63f0958.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397227
IP address blocks: 2620:74:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:00:8f:ae:6b:8f:af:92:57:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=06c45456-5188-4b00-a783-11d883a9548e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:e4:d9:48:25:b8:0e:2d:f4:00:46:c4:73:
fb:4b:67:95:af:ad:10:ea:77:72:89:72:c2:2d:3b:
e0:16:7b:7a:50:a9:23:f9:4d:98:64:2f:5a:ce:08:
a9:93:1d:90:09:b6:fb:c7:c0:88:b9:00:44:7e:2d:
0b:33:47:b5:e7:f9:67:2b:85:38:82:c6:4d:ef:11:
ed:b1:fc:99:b1:c4:3a:03:8e:16:1d:54:76:c9:6d:
14:0c:6c:58:ba:ed:85:85:17:42:fb:79:2b:00:e0:
2e:38:1e:3c:ae:9e:68:9d:a1:e5:70:11:ea:db:ec:
3e:d0:f0:78:4e:1e:4a:85:a6:57:98:36:07:6d:fc:
1b:57:cd:41:98:98:b4:e3:37:b1:09:17:4d:f9:77:
b1:35:06:37:bf:c1:7f:3c:c8:fb:bb:8d:2f:de:d6:
c9:d8:94:0b:44:f7:77:53:f4:fb:3b:8c:bd:22:94:
ad:0a:79:1e:bd:77:75:c4:28:74:8e:b8:08:a6:dd:
18:bb:31:f0:80:e1:18:54:b8:e1:e6:a0:53:bd:69:
7a:a3:63:bc:f3:09:ac:c7:c7:20:07:81:2a:7b:a2:
8f:c9:d1:2c:79:ab:e5:df:4f:ee:00:c0:be:63:41:
99:9f:6e:75:7c:e9:bd:f5:66:b8:ae:a2:af:90:94:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:08:E7:2F:A5:DF:0B:0A:BC:AB:EA:69:0C:05:7D:A4:82:E9:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d503fba6-d5e1-395c-bee8-95e6a63f0958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:74:1b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d5:39:38:96:4f:ac:95:d7:de:fb:3f:3c:b3:f9:df:dc:1b:
c3:a6:99:b7:14:2e:5b:e7:a2:3a:55:8f:56:e1:be:65:58:01:
71:2d:cc:f4:0b:e5:04:9c:67:64:89:d2:02:c2:61:54:43:64:
9c:da:37:21:d8:91:5e:3c:1d:1a:22:52:d2:6f:c8:a5:ff:8a:
e5:da:24:93:e2:76:08:42:1e:1d:31:b5:6d:0a:2b:35:62:93:
b4:6e:f7:23:76:50:81:3e:7e:f5:80:e7:24:6e:5a:49:f3:e9:
41:c2:55:dc:fa:d4:2b:61:99:05:f7:04:20:c5:f3:d4:bf:5a:
11:48:18:c5:7a:a6:0d:c1:27:c4:16:f4:bf:d9:82:37:e5:b7:
3e:a9:51:4d:5e:7e:82:83:00:4e:4b:a7:fd:2f:78:6d:9b:4c:
d0:b6:81:fd:93:63:d8:2e:80:f8:8f:d9:f8:d5:1f:af:55:2a:
e5:7e:e4:ef:8e:92:7a:8b:4d:dd:a3:92:56:54:61:e4:80:e3:
14:5f:81:25:a9:da:cd:74:6c:be:6c:2a:f5:bc:41:e4:82:f6:
ab:46:20:be:38:be:81:97:a0:9b:96:0d:9c:1f:c8:f8:be:e2:
75:fe:a1:27:4c:6e:92:d0:9b:2a:8f:77:3c:c1:b8:1a:36:97:
46:78:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:37:24 2025 by rpki-client