Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef1f21d1-2e69-364b-a390-7b62f6ca4f5f.roa
File: ef1f21d1-2e69-364b-a390-7b62f6ca4f5f.roa (raw, json)
Hash identifier: Qi+IZOPMDtcXbyNYY1X2W9a+vArQp/NT1YKvDZXS5LU=
Subject key identifier: CE:82:42:6F:DE:E4:9F:E4:E1:EE:B9:60:7F:CB:17:A8:5F:09:13:C3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832EFFC0D8CF10F6FCF6D4680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef1f21d1-2e69-364b-a390-7b62f6ca4f5f.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397237
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:ef:fc:0d:8c:f1:0f:6f:cf:6d:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8b925b64-7bcd-4086-acc1-46207be15b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:cd:c8:b3:26:0e:16:bd:30:1d:99:51:08:
65:8f:a2:7b:b8:27:d2:50:d1:bc:4c:00:46:d2:b1:
43:9f:2a:5d:e3:13:94:60:e3:60:48:9b:b7:e3:95:
6a:f0:c0:23:8b:93:61:44:66:79:68:66:f7:e9:65:
9f:a8:d1:ab:39:d0:14:c3:e2:0f:42:1d:2e:a3:55:
bc:72:6c:bd:f4:24:e2:c2:d0:88:77:b2:d4:c1:ad:
73:59:11:6f:cd:c1:28:f6:11:d6:bf:fa:ae:b5:7a:
aa:9c:fe:3b:7f:6c:34:c7:9b:c0:09:a8:25:bb:66:
24:ab:7f:96:bf:08:fd:ab:6a:45:85:38:9b:ac:61:
43:f6:94:16:04:a0:6a:df:c2:29:5c:45:a0:6c:89:
7a:3f:39:c8:83:c4:52:0d:3a:8d:cb:d9:22:80:05:
4a:e4:b9:a9:85:40:5b:a3:31:40:c4:c5:82:31:75:
eb:3a:ba:4a:74:1a:b8:b3:55:77:0b:40:74:d8:9b:
9d:fb:0d:9b:6d:68:30:f5:2e:7f:23:08:ab:a9:c5:
bd:08:b5:0f:29:ca:c0:60:73:cb:a3:a6:9f:b6:d9:
80:fe:df:18:70:00:df:46:f0:2e:dc:10:f8:c4:45:
0b:56:14:2a:13:79:e6:ef:b3:e6:09:e1:13:51:7f:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:42:6F:DE:E4:9F:E4:E1:EE:B9:60:7F:CB:17:A8:5F:09:13:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef1f21d1-2e69-364b-a390-7b62f6ca4f5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:03:21:d0:db:88:ed:91:7d:1f:04:69:c4:e4:e5:7c:af:4a:
2b:db:04:76:ff:7a:42:47:15:1c:88:78:28:5b:d1:a9:43:6f:
cd:6b:85:ea:fb:8f:f8:69:97:33:0a:2c:a3:9d:47:6b:69:0e:
04:7f:fd:09:ae:b6:97:bd:e8:60:5e:05:67:cc:ba:a3:9c:4f:
a6:52:19:dd:ad:4f:7e:e0:30:24:b9:ef:18:56:84:dc:22:53:
02:22:fe:3f:e6:34:7c:f7:26:1d:e2:99:21:89:84:12:94:a0:
83:8a:b4:84:d8:cd:48:22:c3:ac:b1:ef:9d:a6:48:0f:c0:dd:
73:b5:aa:0b:23:c8:94:7d:d9:48:1c:b3:6f:aa:0e:e9:52:fc:
39:7e:61:b5:e6:aa:f6:25:30:cc:0b:6e:a0:d0:e4:b8:15:48:
15:79:ae:96:a8:9f:d6:f0:d2:f4:ec:1a:e3:6a:e0:0b:a4:86:
a3:d6:23:7f:53:45:c4:d6:55:3a:b9:ac:6c:8d:52:a7:23:ee:
c4:7f:7e:cf:bd:3a:8d:d5:05:db:35:68:58:76:59:d6:df:63:
8e:a7:71:9f:4b:01:de:dc:7d:15:19:3f:1d:a0:f8:5a:f7:bd:
39:39:a5:a7:cc:70:bf:4e:a6:82:cc:79:42:23:1d:05:0b:64:
6b:d6:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:14:48 2025 by rpki-client