Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f021e405-84c5-32fc-bd58-504996a6ca85.roa
File: f021e405-84c5-32fc-bd58-504996a6ca85.roa (raw, json)
Hash identifier: lvliP9ZEio+tojRJGtau/h/4+FQzbD3zEZ3Bi3eT+24=
Subject key identifier: 48:DF:94:67:0C:0C:3B:21:DF:6E:E6:38:03:07:59:6B:02:47:E4:1D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848467AB45E049A1E9D97E82E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f021e405-84c5-32fc-bd58-504996a6ca85.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 399156
IP address blocks: 2610:a1:3200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:b4:5e:04:9a:1e:9d:97:e8:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=7c0ccd7c-df59-48bc-832b-0fe1a71cb148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:33:40:5b:d1:33:eb:87:de:d7:89:ed:28:
cf:32:db:b8:69:ac:3c:f4:9b:e0:26:59:f2:aa:74:
90:13:57:c0:ab:4e:f2:73:4d:a6:48:eb:8b:cf:2d:
e7:c2:c0:0d:9f:13:bc:8c:97:57:3a:e3:16:01:40:
34:be:e8:a2:98:aa:c4:5a:df:b3:61:89:a9:d5:70:
2e:d8:4b:98:8d:38:be:61:ed:86:20:dd:a1:c0:8d:
ac:1e:2a:9d:ee:91:94:c5:c9:32:42:3a:9f:71:9a:
c5:83:f5:d4:9d:d4:9c:d4:ec:8b:84:9b:61:de:db:
32:de:90:c6:ac:59:1a:3c:50:72:99:03:41:31:f1:
0c:77:ef:bf:94:0e:4d:77:b7:bb:4e:c5:ed:72:f3:
52:0c:33:79:6b:58:14:a4:b7:51:1a:3a:e8:14:92:
8a:fe:3d:63:b2:6e:38:ef:3e:cf:5f:04:e6:ef:5f:
b9:72:9b:30:ea:c6:2d:31:17:e0:6d:5b:4f:d9:7c:
b8:d1:c9:6a:05:d0:7a:1e:15:ee:0a:b6:72:bd:1b:
64:6b:8c:12:77:28:e7:8c:e1:bb:e6:df:40:7f:ff:
67:9c:6e:9a:41:77:d2:0b:50:cf:12:23:fc:d7:ce:
30:b5:22:94:e5:46:93:0e:cd:2b:bd:34:2c:9f:bb:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:94:67:0C:0C:3B:21:DF:6E:E6:38:03:07:59:6B:02:47:E4:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f021e405-84c5-32fc-bd58-504996a6ca85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:3200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:73:e3:b8:6e:2c:bd:2c:c6:ac:de:46:9d:d0:78:9a:c8:ad:
c1:97:82:58:d4:25:a6:69:8c:5a:24:93:07:66:bf:df:8f:e4:
06:b0:ae:cb:c3:a5:9c:45:26:a6:26:b6:9d:44:8f:f8:53:c2:
c1:f2:64:4d:4b:3a:cc:97:8f:55:fc:8c:69:09:28:2b:e6:3d:
97:a6:aa:6c:07:e3:2a:72:ca:29:0e:0c:02:32:fc:8f:46:56:
1f:5e:8b:ed:5f:2d:98:e7:70:e7:a7:02:2b:ef:8f:84:3f:4f:
e7:bf:82:01:72:c0:d5:45:71:1b:67:62:ab:95:15:d1:31:bf:
b0:24:29:7f:00:b3:f9:f1:e4:fd:3f:76:d6:d9:1e:8a:bc:2f:
c3:a0:da:5f:bd:df:c2:ec:9d:a6:3a:9e:48:21:53:20:94:26:
8e:16:71:b8:16:6b:e6:c4:b3:3e:39:76:51:ee:8b:ed:af:dd:
a2:12:77:bb:df:67:19:2e:05:a9:67:49:5f:a7:16:13:36:3f:
12:6d:81:8b:4b:dd:7a:cf:02:b6:f5:a6:45:f4:ec:d3:15:ee:
3f:de:f6:f5:f0:c3:07:93:06:c1:95:24:18:ea:ac:eb:00:7d:
73:75:68:2b:0c:ef:cd:b1:26:f2:de:f8:23:3d:08:00:ba:38:
c9:52:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:42:16 2025 by rpki-client