Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa
File: 395fce40-fe51-30d3-87dd-472a01ed1dea.roa (raw, json)
Hash identifier: BdDhdw2oZPRvp4/qhBj7tuMoqF/ugUSc7TVa40Ndqi8=
Subject key identifier: 0F:0E:6C:69:9A:22:46:B2:E7:B6:60:48:96:47:F9:AE:FE:59:1E:6F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491247057057F37B30EDA25D00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397224
IP address blocks: 2001:502:2eda::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:05:70:57:f3:7b:30:ed:a2:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=4d6f3e0a-4353-4cdb-85b1-d677d8634a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:f1:b3:3f:6f:d1:b0:35:47:76:77:4f:70:
36:72:85:38:55:e2:f9:dd:1e:25:77:44:80:b6:83:
50:02:48:64:11:bc:52:69:08:f7:35:e1:78:bc:93:
9e:0e:fa:08:37:62:39:41:24:c8:49:b6:aa:37:a9:
74:09:09:4c:f1:69:95:0d:3a:a1:b0:9a:2c:82:91:
49:df:40:0d:01:e7:58:5b:f2:49:67:17:1a:b5:6f:
27:12:83:28:11:49:b0:e6:a0:fc:5a:2f:d6:c5:73:
18:20:71:1b:80:37:5a:16:9e:0d:02:78:7e:76:77:
03:07:c9:4a:70:83:1d:2e:a8:48:2d:50:80:af:66:
74:85:5e:6a:eb:d1:a2:23:15:19:ba:45:18:d9:ce:
a0:c4:3a:8e:a8:ab:a8:d2:23:39:33:46:8c:b1:aa:
6c:ab:af:09:63:d3:e7:64:b9:ff:83:3b:85:13:bb:
ec:00:fc:ec:c1:81:d0:c9:65:3f:eb:bc:24:32:b9:
81:63:b4:04:be:53:99:3f:97:ad:3e:a4:88:29:04:
2c:44:84:46:7a:ed:86:b5:d7:f4:31:d0:6f:3e:13:
a6:05:c2:77:3e:2c:b7:d3:17:3c:70:b0:2b:d9:1a:
1d:6a:88:66:74:8f:4b:16:3c:4e:83:6b:93:32:d1:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:6C:69:9A:22:46:B2:E7:B6:60:48:96:47:F9:AE:FE:59:1E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/395fce40-fe51-30d3-87dd-472a01ed1dea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:2eda::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:df:ce:87:1d:0e:e2:3e:b0:8a:45:89:29:39:f7:3b:3f:2f:
9f:6c:a7:dd:4e:b5:54:de:47:ed:3c:e2:ac:16:bf:2e:b3:1a:
ac:bf:08:57:59:51:f1:7c:90:58:a6:9d:69:82:36:17:9d:a8:
18:f5:e9:ec:ee:20:c2:39:32:71:de:a9:c6:bc:34:97:3b:7e:
67:79:2d:5d:e3:d9:96:ae:54:68:2c:c7:71:93:a7:99:e1:34:
9f:c3:f0:95:c2:21:90:88:97:7a:32:7b:25:c9:27:38:64:8b:
7d:bb:e1:76:ac:93:4c:50:ea:3a:f1:09:a0:ee:a9:c0:c7:8b:
4c:85:e6:22:40:1a:5d:47:1d:9b:4a:4c:f7:fc:1d:ef:40:90:
10:53:43:63:1e:f0:ac:cf:d7:fa:c0:d3:51:a9:5f:7d:29:db:
3f:65:b4:53:1d:85:88:6b:21:7e:ac:49:73:85:20:38:0e:93:
af:94:d0:6b:8c:d8:a1:85:a6:1f:93:71:c3:a8:99:fb:e4:06:
c8:37:81:c8:af:d7:0a:80:13:ff:a8:38:b3:d6:0d:2d:95:16:
0e:10:0d:7d:ab:f8:4a:0e:38:7c:05:7e:7e:56:88:8b:7d:3c:
9a:45:b2:ec:54:85:ca:0d:e5:a0:cc:80:bc:a3:59:a3:5f:8c:
64:59:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:32:59 2025 by rpki-client