Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa
File: d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa (raw, json)
Hash identifier: bV1X83lUP64ZxsCKjj95l1baYcFY3R51iEt1q8OUUGA=
Subject key identifier: E4:9D:99:97:C4:A2:64:B3:1E:D5:CB:0A:53:AE:58:E3:6B:76:A6:C4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFF141E7A80E16A34A2E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397231
IP address blocks: 2001:502:100e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:f1:41:e7:a8:0e:16:a3:4a:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=72ef04d7-bcad-48f0-b843-edba6f9237e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:f7:7f:40:60:a4:36:9a:06:79:43:0c:7a:
a5:ca:3b:cb:ee:bd:2f:24:02:ff:f9:3a:19:74:7f:
73:17:89:a8:3a:67:45:5f:f4:7a:6e:14:3e:05:2a:
3d:ac:a0:1c:56:ed:6b:bf:16:04:2d:b6:93:93:05:
4b:b0:98:c3:ff:24:57:16:34:6b:41:81:f8:0d:21:
d8:f6:ff:78:fc:6d:06:dd:37:91:c3:3b:4e:51:4d:
03:0c:53:8c:6b:67:ce:09:89:0d:ad:28:83:89:00:
d6:67:44:c2:27:4a:e1:32:88:bd:12:56:87:c3:82:
eb:3f:6b:b4:c2:a0:d8:aa:86:6e:8b:7f:ed:cd:a8:
62:4b:03:47:e1:42:38:97:4a:3d:0c:4f:7f:d9:24:
2b:85:36:a4:42:e5:9e:25:e7:58:49:ae:75:d0:99:
ca:a6:e1:07:85:21:1f:f4:d5:91:48:6c:1a:5e:c6:
94:4b:ab:62:d5:2b:c1:6c:41:98:fb:4e:d5:5c:7c:
97:a9:5e:9e:f6:8c:6a:9a:07:ce:31:49:e6:82:2c:
3c:8c:03:9a:99:78:e6:ac:dc:67:5c:88:63:ad:6d:
2b:6c:b0:40:3d:1f:ff:36:4d:7c:1a:9f:6b:5c:b1:
d5:9f:65:94:80:d8:cb:63:17:da:c0:c9:96:20:95:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:99:97:C4:A2:64:B3:1E:D5:CB:0A:53:AE:58:E3:6B:76:A6:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6e5c6e9-c617-32ef-9ff3-d0b2cb2c69c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:100e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:37:41:e8:2d:06:9e:3a:7f:6c:aa:f9:c4:06:ac:b4:e8:49:
5d:ca:f2:e3:09:65:78:a1:7d:ce:97:0e:93:93:2a:73:96:c7:
6a:d8:cd:8a:9d:26:14:31:8e:44:f3:bb:17:92:12:7b:38:10:
61:18:2a:a0:25:f0:bf:14:37:aa:ac:c6:8a:44:da:e6:06:28:
7d:e7:ad:80:5a:3b:f7:bf:89:09:dd:04:a5:56:99:2a:d3:c7:
a7:a0:0e:ba:0d:23:13:c7:4f:99:83:ac:b4:14:27:52:7c:9b:
39:2b:92:f4:4a:59:4d:84:b4:7c:fb:60:84:41:7a:73:0c:09:
37:60:83:0d:23:35:b0:13:be:8d:1e:d1:80:79:ea:7f:1c:f5:
ba:df:02:58:51:eb:3d:9f:c6:26:b2:c2:c2:12:2d:38:db:6e:
2b:33:2b:10:a8:c3:f8:9b:ed:07:4a:e0:92:46:d7:32:90:b2:
86:17:f0:c9:69:c1:a6:84:e8:81:3c:6b:ab:91:5f:4e:5a:2d:
23:e0:4c:e9:1d:f6:9b:83:be:33:bd:9e:8e:21:5a:e9:f0:d1:
d3:65:9a:bf:c6:8a:e2:99:e3:e6:86:7a:32:41:02:ad:20:5f:
fe:62:81:47:17:70:8f:b6:e4:e2:05:5b:33:85:37:3b:b6:9e:
3e:d8:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:07:09 2025 by rpki-client