Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/55d04f6e-6e09-31a5-a9d4-5805b72d2625.roa
File: 55d04f6e-6e09-31a5-a9d4-5805b72d2625.roa (raw, json)
Hash identifier: Gl60T1tXQ7Dffwob/rTbq2zP4bj6z0gyOwtWTi4JC2c=
Subject key identifier: 52:48:C1:F9:1A:63:44:CC:92:59:DD:72:78:ED:15:8E:9F:C4:43:5A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470891002D52DC92018A40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/55d04f6e-6e09-31a5-a9d4-5805b72d2625.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397213
IP address blocks: 2001:502:ad09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:08:91:00:2d:52:dc:92:01:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=18f1b590-4978-409e-8358-b55a78c29f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:54:78:73:74:0b:e2:d7:2c:c9:38:86:d4:
ba:1d:fe:6d:93:d2:b1:3e:91:91:7a:b2:29:d4:24:
78:66:82:4f:13:75:0c:6b:af:07:b7:67:1c:75:67:
93:7f:40:3b:b2:db:9a:70:27:f6:f0:27:28:0f:ea:
a3:72:04:73:bf:2e:a7:67:e9:7b:7c:08:37:bc:52:
eb:03:f0:d9:38:92:87:92:8f:8b:ea:b9:d1:3b:64:
eb:05:22:76:aa:ea:75:8b:45:36:59:ff:84:f9:75:
3f:50:4e:d2:ab:21:bb:e7:c6:33:be:ab:bf:9a:0f:
a0:00:d9:3c:4f:09:4b:b6:26:d4:b2:c3:b5:15:62:
60:b9:0a:d7:96:c9:df:b4:8b:95:a0:3a:63:7c:d5:
d9:7c:70:96:62:99:9a:7c:32:92:c8:3a:30:35:b8:
6b:e1:88:e8:a9:a2:5a:ec:5b:13:13:62:88:99:51:
83:7f:6a:84:c3:92:3c:4b:60:7e:2b:c0:7f:b5:dd:
1f:f2:63:c9:8f:2d:30:80:9a:dc:ca:7c:8a:d2:45:
9d:50:97:2a:78:e3:13:73:b8:9f:8f:36:8a:e2:a7:
5f:ab:2b:e0:1b:b5:ca:e8:6a:1f:94:21:26:59:8c:
99:f0:02:20:a4:7e:41:73:9d:6b:bb:a0:84:50:84:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:C1:F9:1A:63:44:CC:92:59:DD:72:78:ED:15:8E:9F:C4:43:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/55d04f6e-6e09-31a5-a9d4-5805b72d2625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:ad09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:0e:3a:09:08:c9:63:7d:45:24:53:3d:62:81:cf:48:2d:50:
29:14:26:e5:51:32:93:1f:f5:97:11:a5:72:07:d7:42:8b:e6:
ef:32:aa:14:8e:61:be:87:2b:3c:19:71:bc:27:5e:54:1e:2b:
3a:45:b1:fb:c2:73:a2:81:19:7a:ec:09:f5:54:c6:3a:f2:9c:
0d:c0:98:2c:2f:eb:74:d0:00:c1:95:d6:29:e6:f4:fc:d5:7c:
69:b0:a0:3d:a3:44:72:04:86:12:3f:cf:50:d3:5b:13:01:a3:
22:1f:b9:5a:09:b0:8c:e1:53:d6:7a:91:63:81:6a:82:f0:3f:
a1:58:c8:5e:4a:32:e0:0c:bd:60:67:d4:c5:53:df:6b:4f:b8:
cd:e2:fb:c9:df:f6:9b:d2:d6:45:ad:16:b9:d8:04:fd:be:d8:
f9:6c:b6:98:ab:43:4e:72:34:33:7d:6b:36:70:b2:20:45:44:
d9:a5:c9:35:30:f7:59:8b:bb:be:bd:5c:91:d0:ce:16:8b:09:
b2:62:bc:ee:28:b5:a8:bb:14:cc:9b:c7:1a:7e:2a:4d:60:34:
21:ce:66:26:fd:03:fb:dc:a2:77:11:fd:f0:11:d8:28:85:aa:
c8:6c:e2:e5:ee:e0:73:15:4d:91:13:f0:5e:f6:83:66:73:12:
59:ef:6f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:07 2025 by rpki-client