Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
File: 60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa (raw, json)
Hash identifier: yv6PEZSK09Sb81GxsmMI6q1e2Ru7epVEgcaO5m6iWhQ=
Subject key identifier: C3:74:39:23:E7:D5:52:B7:6F:5C:ED:E8:54:F2:2E:F3:6F:3E:4D:B9
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491247092E3BC6830818CAA880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397223
IP address blocks: 2001:502:ad09::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:09:2e:3b:c6:83:08:18:ca:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=446db83b-9b41-426d-9085-16756680f401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:a9:ba:1e:31:34:e4:b2:4a:cc:79:d0:20:
e7:0b:87:e2:8f:c8:6b:bb:ad:f9:6f:65:0b:0b:cf:
43:57:8c:0d:14:05:15:fb:25:fe:a2:90:ea:a2:5a:
fd:52:d9:5d:6d:8f:aa:12:0d:a1:cc:ad:9e:ab:a4:
12:bc:96:63:85:31:79:c4:93:b2:a8:56:4f:f7:f1:
42:1d:c8:07:2a:71:58:ec:a2:1f:cf:53:f4:42:67:
61:da:23:ac:00:56:27:2f:aa:60:ea:ec:c7:e3:8e:
14:68:bb:ed:96:99:fe:d2:20:da:f2:dc:33:94:6e:
be:b5:c4:ff:7c:97:89:9e:52:c2:5e:dd:ee:c6:48:
c9:2a:a2:6e:b1:82:b2:94:f0:83:c2:aa:f3:cd:55:
02:03:69:e4:fa:55:70:0b:48:2d:be:2e:b8:e4:0a:
3a:a8:dd:77:7d:ec:1c:e1:69:1a:d2:aa:7d:c4:48:
82:21:eb:3b:01:a4:6f:d4:c6:6c:f9:ca:6d:fc:5d:
26:5e:5c:29:53:c3:44:76:79:f3:ae:e9:2c:3e:cd:
dd:6b:88:60:e6:96:10:3a:19:65:ae:4a:4d:1c:bb:
6c:f2:5e:2a:a5:1e:6b:f5:b6:a9:81:3e:73:51:40:
bb:9f:8e:81:e5:30:11:1b:43:1d:14:9c:65:82:49:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:39:23:E7:D5:52:B7:6F:5C:ED:E8:54:F2:2E:F3:6F:3E:4D:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:ad09::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:9f:66:1f:95:e7:79:46:05:2c:af:2d:65:d5:35:20:ea:23:
96:21:78:ac:3a:07:f8:53:77:00:56:ba:dd:ab:73:15:be:89:
f5:54:ef:13:02:89:1c:68:75:cf:a7:ac:af:75:32:8f:1b:d6:
a4:72:06:b6:c1:7d:25:6e:54:94:ac:b3:20:78:7f:91:d8:70:
d4:f7:14:46:74:d6:11:77:f0:d8:f5:df:20:19:c7:7b:7c:e3:
f2:0b:9d:63:c6:8a:f3:e3:79:f7:fb:47:96:f4:69:d2:18:4c:
19:7b:e2:b8:19:93:a1:9b:01:20:5e:70:4a:52:7e:ba:e6:31:
54:ea:7d:96:a8:9e:f0:85:7f:1f:65:26:42:1e:e3:6d:7d:f2:
f5:ff:bf:ef:a8:02:5c:f8:46:8e:3e:18:d2:7c:f4:39:7d:09:
f1:81:21:cb:bf:b1:a3:6b:29:0a:fe:56:51:b6:c3:ba:7f:60:
2e:11:22:4b:76:f0:b4:66:2a:c4:62:c7:94:c5:86:c1:94:96:
6a:d4:5f:f7:6b:eb:e9:28:0d:76:c1:f4:b4:60:3e:ab:6a:f3:
e6:99:de:ce:62:9d:cf:27:a0:c7:47:8c:8c:d0:6b:b7:2c:77:
a7:fe:e0:21:b0:e5:d4:f3:6d:c5:ff:c2:e9:5c:be:5a:c9:12:
9e:70:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:56:36 2025 by rpki-client