Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a82341d6-5a60-387b-971a-3e54ce035fe1.roa
File: a82341d6-5a60-387b-971a-3e54ce035fe1.roa (raw, json)
Hash identifier: uvp5TyBLM6d4tD3hEiZbb7EKcDfnDKufI4rPRb09Z7w=
Subject key identifier: 1B:3C:57:55:F9:B4:6E:12:E0:62:C6:65:74:88:30:31:27:E0:4D:AC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470C5E9E7FEC2F88E2B9C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a82341d6-5a60-387b-971a-3e54ce035fe1.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397213
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0c:5e:9e:7f:ec:2f:88:e2:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3f0e9485-5cae-4332-9416-6e61d0152bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:d8:0d:34:42:91:5f:56:74:b5:cc:7e:56:
57:70:57:49:94:35:43:d6:42:83:3e:60:97:4e:11:
50:34:e1:d6:71:2e:16:1f:0e:72:87:64:4d:4f:fd:
fc:82:7f:45:7b:95:fa:db:26:3f:09:f4:12:8a:3a:
bd:b3:5d:1a:ea:eb:dd:74:01:90:fd:d5:7b:d0:48:
0d:26:20:07:ed:80:6b:18:56:e9:78:44:68:24:c9:
e1:e3:a4:d8:7c:73:24:0c:2f:63:c1:42:80:fc:7d:
b8:2c:ff:e1:2f:bb:fb:a6:82:09:26:b0:d9:c8:ff:
fd:86:b0:ea:68:81:b3:08:3e:fb:7d:fc:8d:9c:bb:
4f:fc:73:4d:c4:f5:f5:95:b4:22:12:03:2e:77:10:
45:e6:69:36:fd:ce:f2:75:5e:39:1d:c2:a3:88:dc:
f9:28:18:1a:3b:59:9e:a3:a2:46:2f:38:2f:bd:62:
fc:14:fa:fa:f9:df:fc:41:d4:1e:19:3b:60:36:86:
0e:d8:a0:fc:f5:33:f5:68:65:7c:10:95:05:b9:ae:
65:b8:a4:5c:a8:ca:60:be:a4:4c:f2:9b:4e:2a:e7:
0d:ef:9a:97:b4:b9:00:af:91:1e:e6:6b:22:6f:d5:
51:ac:4c:66:4d:3f:d2:7b:3f:23:85:f7:88:72:09:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:57:55:F9:B4:6E:12:E0:62:C6:65:74:88:30:31:27:E0:4D:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a82341d6-5a60-387b-971a-3e54ce035fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:da:d5:46:ba:de:bc:42:62:67:a2:1d:6b:35:c1:d7:b0:43:
20:74:03:f7:79:21:eb:a1:2e:e6:38:14:10:9f:40:0a:4c:7e:
8f:fa:00:17:de:84:5d:ad:be:62:4c:ab:1f:36:7f:4f:cd:a6:
e6:94:06:51:dc:5a:6b:4b:e1:85:da:e4:17:38:11:85:5e:15:
a2:53:a6:69:94:57:13:de:01:4e:88:9b:7f:e8:70:22:0a:5e:
a5:cf:2e:cb:25:48:73:fe:2f:3b:9e:64:6c:00:08:3f:34:72:
91:31:c7:ef:71:e5:1e:e2:08:4e:76:5d:17:5b:26:c7:12:2d:
3c:58:d6:8a:10:cc:2a:c1:91:86:98:62:a9:e4:a0:19:97:75:
2e:38:69:43:6d:fe:56:74:fc:a7:c0:ea:6b:02:fa:fd:ee:df:
c9:19:6f:1d:2d:95:8e:d4:72:96:a1:93:f7:0d:ec:2b:a0:76:
49:88:86:9a:06:ac:1c:c5:cc:43:3e:29:ac:b2:fe:f9:cd:bd:
37:3f:95:6c:3b:3d:d6:c3:16:12:c3:ed:79:46:5b:5d:95:59:
08:5c:73:37:b5:bd:8e:57:d9:4e:67:e5:d8:cf:55:7a:be:49:
f9:ac:d6:89:6f:3d:66:c7:7f:03:1e:d5:4f:d9:fb:a3:d6:e8:
bb:03:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:56 2025 by rpki-client