Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a52d265-2721-338f-add7-3425ceae395c.roa
File: 8a52d265-2721-338f-add7-3425ceae395c.roa (raw, json)
Hash identifier: hQbmECBlclu99c1u9IPn0Xoy2VD3LlnaUV/scqBG45c=
Subject key identifier: E9:99:93:A3:4F:FE:BF:DF:E0:3D:5D:24:FC:C2:60:AD:F1:B1:AC:F8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491247020108B3F32D7910CF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a52d265-2721-338f-add7-3425ceae395c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397226
IP address blocks: 2001:500:3682::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:02:01:08:b3:f3:2d:79:10:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cd4034ec-d1b1-4d13-8da6-248d32a5955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:5c:1b:b3:fa:78:55:5f:95:fa:49:14:58:
c9:8e:6f:db:f7:42:2a:98:e6:71:22:7f:05:23:a5:
05:28:eb:d6:ae:10:e9:76:70:b6:ce:7d:17:60:05:
a0:30:e6:d5:a9:d2:8e:5f:67:37:02:8e:73:a1:72:
5e:e4:77:a2:f4:0b:8b:d3:70:92:0e:78:16:69:8e:
55:74:a6:c4:80:f0:4b:c1:5f:e5:4c:e5:e6:b1:d3:
95:5a:a8:ac:1d:3e:13:6f:e7:d9:bc:bb:f6:22:1a:
c0:e2:3c:eb:af:5b:23:a0:d0:ef:b3:72:e2:88:61:
07:6e:01:b9:6b:a1:1a:fb:be:fe:28:3f:14:6e:29:
07:ab:0f:f9:73:e1:4f:10:b6:a5:04:8e:62:a5:ad:
03:93:29:06:c5:95:88:4e:62:f6:fa:85:31:21:82:
85:5c:97:6a:e5:cb:df:32:a1:58:86:b0:eb:06:30:
ca:44:28:b2:74:5c:71:99:c7:d1:fe:5d:c6:30:54:
4c:07:a2:06:c1:74:0a:cf:7d:58:61:d2:38:87:95:
43:96:ff:97:49:3d:01:3e:b8:78:b9:4f:38:c9:34:
fa:df:1b:18:75:76:5e:58:ed:84:e0:bc:e7:42:ad:
69:24:d6:75:5a:4d:ee:98:5a:9a:b2:e3:23:e4:51:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:93:A3:4F:FE:BF:DF:E0:3D:5D:24:FC:C2:60:AD:F1:B1:AC:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a52d265-2721-338f-add7-3425ceae395c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:3682::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:94:48:f4:1e:f1:3e:89:86:24:9b:5b:0c:ed:35:d3:44:14:
b6:65:3f:1d:91:bc:dd:a4:c3:80:e8:7a:9e:e8:9a:70:b4:1d:
3c:88:e9:cb:35:12:dc:ab:75:9f:de:fa:62:08:9e:03:53:93:
3f:49:fd:3d:6b:e8:25:05:bb:a9:f9:21:d5:3b:3e:e4:4f:b9:
01:67:45:e8:73:93:70:4a:f2:ee:8b:63:4b:47:47:f7:a8:7b:
a4:5d:0f:a3:42:91:4c:99:ca:91:e0:12:60:32:85:6f:d2:15:
29:d0:f3:a4:5e:79:a3:00:1c:25:ad:dc:c8:53:e9:52:7c:d5:
da:4a:21:47:42:8e:da:bc:39:e4:ee:21:42:e5:eb:cc:35:24:
be:1a:49:b7:ed:c5:98:8c:f1:fa:d8:80:74:aa:47:95:4d:e3:
7b:a8:c1:fb:9f:bc:fd:93:c9:fd:8a:85:86:60:fb:c2:20:5a:
93:14:90:7d:dc:2e:0a:24:0b:29:01:e9:f3:99:9c:8a:f8:91:
b5:57:3c:b9:4f:ee:28:ea:24:7c:b0:ec:58:60:03:4e:69:34:
cf:41:d7:71:da:21:79:14:dc:a5:ac:08:35:aa:bd:da:27:a6:
8b:c3:74:8b:80:14:e5:4c:56:03:3e:6a:fe:6c:1e:05:4e:f1:
a3:d7:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:02 2025 by rpki-client