Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8d6301b3-9951-3bb0-9514-891838b03b02.roa
File: 8d6301b3-9951-3bb0-9514-891838b03b02.roa (raw, json)
Hash identifier: 5K/kH6elygMiKMUp+HW04m3QqX2Pq/z9lN0CdDZY2RY=
Subject key identifier: CE:03:1D:83:96:CC:36:12:C5:6D:E3:08:F4:1B:09:F8:33:FD:DD:27
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470C9AD0096B88E6FF2700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8d6301b3-9951-3bb0-9514-891838b03b02.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397217
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0c:9a:d0:09:6b:88:e6:ff:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cfcd1e65-4c2f-4883-acbb-7ae67ab09d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:93:47:f5:29:6a:9d:fa:07:96:67:29:e7:
ee:d5:ec:98:98:38:ff:6b:36:1a:fb:4b:db:1a:50:
59:fe:c1:56:64:1d:1a:9b:ff:ea:d4:cd:58:f0:cd:
01:7e:98:77:58:d5:d8:87:da:45:7f:a1:17:93:3a:
a6:2a:18:1d:cc:0a:a4:11:14:f2:53:82:1e:4b:59:
a0:07:ca:01:80:2c:27:9c:6c:95:eb:d9:71:9e:01:
c8:fb:03:b1:07:10:66:44:5d:51:66:91:bd:3d:0d:
fb:2a:03:07:60:e2:ce:52:a1:a5:fb:2a:f2:ef:bf:
81:ce:61:fa:1a:38:36:5a:77:c2:5c:1f:d1:9c:48:
f9:06:4e:f6:a5:34:4e:b8:19:d5:c5:ce:15:d1:18:
a2:6c:ae:66:19:71:ed:19:ae:1c:6f:24:68:de:b3:
7c:68:65:9b:60:01:6d:d6:22:a9:5d:88:ce:cb:38:
33:14:6b:80:2a:c9:fc:e8:93:22:0d:02:c5:7a:d1:
6f:49:68:83:f3:04:8f:07:29:c7:34:e8:3a:8b:91:
03:5a:af:35:9c:49:7f:b0:3d:c7:b7:64:6b:a4:93:
41:48:d7:dc:d6:ce:14:40:2c:3b:f6:90:e0:52:dd:
95:ed:a6:ac:69:f1:31:32:11:d2:04:70:80:75:d0:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:1D:83:96:CC:36:12:C5:6D:E3:08:F4:1B:09:F8:33:FD:DD:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8d6301b3-9951-3bb0-9514-891838b03b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:24:4b:09:99:8f:72:3d:bb:93:72:e1:a4:ac:0d:a1:a2:83:
46:da:45:33:c1:22:ac:32:ee:2b:3d:b9:07:b6:3e:81:53:90:
30:cb:5c:18:79:3e:4c:c9:1e:59:ab:8f:90:4f:f4:8b:43:37:
76:dd:24:5e:7b:de:32:15:46:87:5b:1c:74:d1:d2:11:27:40:
d6:e6:8e:95:f4:72:40:2e:35:98:e1:ba:67:93:aa:91:21:da:
e2:68:81:c2:c3:b7:fc:33:5a:c7:f4:0a:7a:64:45:7b:38:11:
d1:40:bc:67:6f:82:06:c7:9b:54:0d:13:04:40:13:75:e7:2a:
4d:f5:94:ce:16:14:55:35:a7:a8:6a:14:21:1b:c6:3b:79:4e:
80:ef:32:b9:92:94:a9:b4:bd:87:72:5e:46:16:c3:9b:de:fe:
26:8d:9a:12:c0:3a:92:a7:b6:92:96:1e:4c:1a:02:cd:cb:33:
12:5d:24:fe:1c:4e:04:3d:f7:47:65:f8:bf:e9:32:5d:a1:7d:
47:0c:d9:56:9e:c3:ef:42:6b:e2:6e:35:e2:e9:00:b0:0a:b6:
6a:45:01:3e:dd:bb:ca:ce:09:92:e6:76:2e:fe:4b:e6:96:ba:
33:92:5b:86:c9:b0:97:c4:f3:66:c3:a7:ed:28:45:0e:2a:ff:
99:75:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:40 2025 by rpki-client