Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9a3cbf5-ae24-3947-a3a6-4f36599f2cfd.roa
File: a9a3cbf5-ae24-3947-a3a6-4f36599f2cfd.roa (raw, json)
Hash identifier: n63t24VE1QeQITkeU2ceVda1y4rMF7YLc3Ye9qjTJDQ=
Subject key identifier: F6:09:E0:FD:2F:EC:CD:C9:19:CB:3A:65:F0:8C:16:91:6B:52:30:76
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470C8B9D8373E5B19A3100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9a3cbf5-ae24-3947-a3a6-4f36599f2cfd.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397216
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0c:8b:9d:83:73:e5:b1:9a:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=e0686337-a650-4848-9f0e-fc68df25c5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:90:0d:7f:9f:47:0a:eb:6b:a8:04:6f:31:
1f:1c:05:3a:87:90:7f:57:66:eb:6b:40:63:79:c7:
82:4e:ab:49:cf:16:15:d3:99:4f:55:6a:9c:f6:29:
9e:05:ed:e5:63:ab:73:73:3f:a2:e5:96:ca:64:9e:
cc:6b:0b:66:6b:62:8a:ec:ba:cb:6d:7a:ba:82:41:
71:fb:e2:5c:33:55:14:af:43:f3:a6:74:9f:6d:32:
d1:9c:e4:6b:56:6d:3d:1c:f6:bb:05:71:a6:95:4e:
a4:e7:1b:98:42:62:90:33:c2:82:e8:6a:0b:0b:a3:
01:0b:75:dd:71:79:d6:47:df:42:45:3e:c1:94:df:
54:66:94:5b:d5:ad:51:69:53:3a:84:1e:e8:d4:24:
d8:ae:28:9d:66:ed:ec:d3:1d:ac:7e:ea:15:92:91:
eb:47:25:40:25:1c:f2:f2:4c:14:f5:1d:dd:4e:be:
e4:13:03:4c:60:51:7f:c1:8f:47:8e:37:d5:75:45:
e5:f4:a4:64:4b:92:59:a8:32:4f:66:fd:d6:0b:93:
64:0d:d0:12:b7:c4:21:9c:98:97:b7:f3:fd:37:b2:
51:a3:81:2f:b0:ce:55:9d:62:a7:2c:01:8a:be:1b:
0f:43:e5:61:f9:cd:99:a0:9b:0b:2c:5f:15:50:d8:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:E0:FD:2F:EC:CD:C9:19:CB:3A:65:F0:8C:16:91:6B:52:30:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9a3cbf5-ae24-3947-a3a6-4f36599f2cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:eb:83:a8:16:41:d2:73:d2:23:bc:c0:c7:a3:82:dc:a0:64:
38:dd:4f:eb:ee:02:45:3e:92:90:d2:69:27:83:21:06:9d:21:
cd:e8:ca:4f:99:a7:47:d6:fa:51:55:92:30:b1:3a:1c:d7:71:
cb:28:4d:15:c1:18:d4:67:93:58:f1:7f:41:11:5b:7a:3d:3e:
ed:0c:16:f6:20:62:ec:25:2d:11:f3:a0:03:82:f4:da:00:bc:
62:99:14:df:9d:b7:22:b3:9b:61:98:45:4e:8a:62:bc:e4:12:
93:c0:8d:29:17:71:f5:94:99:07:bb:dd:d8:d6:61:88:4c:33:
a8:37:4f:ce:48:db:e4:14:0f:90:ff:5c:f8:08:96:3e:99:08:
d8:eb:75:02:cc:8c:d2:ce:a8:9a:e5:8a:ab:04:dd:1d:cb:b7:
06:d0:af:9f:c1:e8:38:5b:a3:f4:93:e8:27:78:0b:5a:b3:29:
7a:63:e3:12:49:1e:f1:be:ce:74:f8:23:5f:ea:b5:c2:6e:8d:
3d:9c:6e:b3:ae:f0:4b:12:ba:b7:84:d6:e4:35:dc:ed:f6:4a:
05:a0:52:61:d0:d4:92:46:f8:db:88:94:39:1d:f2:26:25:e9:
57:38:44:08:af:df:50:b5:be:fe:16:bf:14:67:f8:f3:1f:5b:
01:15:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:22 2025 by rpki-client