Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa
File: 397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa (raw, json)
Hash identifier: OujgXBMl9DyGKdwW0GGa1gWP6t2Ko3Mdo5mRUxQu3fM=
Subject key identifier: 27:38:96:DE:68:68:97:64:5B:B6:1C:41:F3:AA:68:C2:10:48:9D:CC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491247083A3EA5AAD79A6C4DD4
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397240
IP address blocks: 2001:502:4612::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:08:3a:3e:a5:aa:d7:9a:6c:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=7e57d8ea-58dc-488a-8711-81427aa3d32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:e1:2a:49:6c:aa:b7:d9:49:4d:a4:73:ad:
ca:f9:aa:fc:a4:0d:ab:02:18:76:80:04:e5:ae:73:
dd:54:ff:86:46:cd:56:54:e6:1b:ac:4c:a3:be:c3:
e2:12:e2:00:b1:8f:68:52:af:e1:8c:e5:ee:0e:58:
66:52:ea:7d:9c:61:54:17:4b:8e:cf:88:42:5d:13:
cb:88:4b:86:7f:b3:02:9e:0d:22:3f:ab:b0:0f:13:
5f:5f:c8:62:36:1f:e2:2e:60:ae:eb:b0:0b:72:33:
ee:06:6d:9b:c5:1d:02:c2:2b:02:fd:0b:66:4e:0b:
99:0a:85:f6:c8:34:3b:63:8a:f8:38:0c:cb:74:36:
2b:f4:3a:7e:a5:9a:d9:42:ce:e6:82:5e:26:7f:74:
71:f1:33:f5:d8:42:f9:81:5d:9d:17:a4:f3:15:fe:
7a:19:a0:53:ef:b3:78:ae:35:d1:af:ac:ee:b0:cb:
e9:30:1c:3c:f4:5a:a2:fd:2d:7e:f2:bd:cc:da:0a:
60:3b:1e:91:72:fa:bb:3e:ec:bd:03:c9:a3:5e:ed:
53:0a:a0:e4:a2:3a:ac:ca:c3:b7:48:fd:cd:bb:bb:
84:32:b8:05:21:a7:9c:a4:52:7f:90:c0:0d:9d:11:
6c:e9:1b:72:b2:c5:40:a3:46:19:c3:a8:1b:2b:b5:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:96:DE:68:68:97:64:5B:B6:1C:41:F3:AA:68:C2:10:48:9D:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/397c2bc6-5f0c-39b7-82fe-b9fdf8e49434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:4612::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:09:a8:ba:08:89:35:38:88:6d:9b:ce:25:96:1b:67:66:4a:
e6:e1:b6:9e:38:d2:08:bb:e5:11:eb:80:14:05:fe:d4:2d:7d:
c7:46:90:83:22:5a:ae:7c:3c:5f:c3:fe:0b:20:c0:1c:fb:60:
32:29:5a:0c:ff:5e:ae:28:49:87:76:20:fa:d0:ee:95:d6:38:
55:a6:27:0e:f2:26:58:4c:45:56:46:31:47:5a:45:b2:9e:6c:
f7:5f:d1:c3:f6:07:2c:af:df:17:6b:db:cc:69:3f:3a:8c:14:
fd:59:37:69:17:99:57:a8:28:39:f9:4e:d7:e5:99:09:1c:5b:
1f:1e:65:9f:69:2f:06:2f:88:63:f3:01:f9:47:e8:fb:52:4f:
e5:7b:68:c7:79:c9:5e:78:25:e1:de:6c:7e:c4:99:82:1b:a9:
44:8f:aa:1f:23:30:41:1a:18:2e:8e:cd:42:75:68:e2:b5:7e:
40:0d:38:81:b3:91:05:66:85:f3:1d:3e:e6:26:e3:e0:e2:77:
72:37:d4:9a:6c:6b:7d:d9:2f:1d:c0:72:72:d5:9a:a6:8f:25:
e8:f9:23:a7:79:4d:ee:fe:a0:b3:c3:31:26:04:18:35:21:1f:
44:b4:da:a0:a9:ef:e8:19:43:fe:8a:a6:97:d1:90:ee:4e:1d:
89:b3:4c:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwg6PqWq15psTdQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
N2U1N2Q4ZWEtNThkYy00ODhhLTg3MTEtODE0MjdhYTNkMzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRnhKklsqrfZSU2kc63K+ar8pA2rAhh2gATl
rnPdVP+GRs1WVOYbrEyjvsPiEuIAsY9oUq/hjOXuDlhmUup9nGFUF0uOz4hCXRPL
iEuGf7MCng0iP6uwDxNfX8hiNh/iLmCu67ALcjPuBm2bxR0CwisC/QtmTguZCoX2
yDQ7Y4r4OAzLdDYr9Dp+pZrZQs7mgl4mf3Rx8TP12EL5gV2dF6TzFf56GaBT77N4
rjXRr6zusMvpMBw89Fqi/S1+8r3M2gpgOx6Rcvq7Puy9A8mjXu1TCqDkojqsysO3
SP3Nu7uEMrgFIaecpFJ/kMANnRFs6RtyssVAo0YZw6gbK7VkvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCc4lt5oaJdkW7YcQfOqaMIQSJ3MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzk3YzJiYzYtNWYwYy0z
OWI3LTgyZmUtYjlmZGY4ZTQ5NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACUJqLoIiTU4iG2bziWWG2dmSubhtp440gi75RHrgBQF/tQtfcdG
kIMiWq58PF/D/gsgwBz7YDIpWgz/Xq4oSYd2IPrQ7pXWOFWmJw7yJlhMRVZGMUda
RbKebPdf0cP2Byyv3xdr28xpPzqMFP1ZN2kXmVeoKDn5TtflmQkcWx8eZZ9pLwYv
iGPzAflH6PtST+V7aMd5yV54JeHebH7EmYIbqUSPqh8jMEEaGC6OzUJ1aOK1fkAN
OIGzkQVmhfMdPuYm4+Did3I31Jpsa33ZLx3AcnLVmqaPJej5I6d5Te7+oLPDMSYE
GDUhH0S02qCp7+gZQ/6KppfRkO5OHYmzTJs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:44 2025 by rpki-client