Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa
File: ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa (raw, json)
Hash identifier: O0TwP/deA/+2Iy3PF6k+dXisd2jTMiktg8pZdYhwuzE=
Subject key identifier: 44:49:C8:B8:1D:CE:82:83:97:33:34:D9:B6:1D:F3:E9:11:27:40:CA
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584912470DA2C64F77DBCDC3BD50
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397236
IP address blocks: 2001:502:f3ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:47:0d:a2:c6:4f:77:db:cd:c3:bd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=b964e8bc-12c9-4497-a03b-f5d1080eb977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:e7:86:73:17:2e:4d:ea:8a:fe:9c:bd:a1:
04:1e:ad:74:2c:90:9e:07:ea:5e:3e:eb:56:06:e5:
a3:ef:92:d9:5b:b2:d8:9e:d3:68:9b:25:42:c4:b3:
ca:71:92:8a:b0:46:ca:30:e9:07:5f:6e:bd:bc:e3:
e5:24:25:4f:bf:eb:93:c2:6b:cb:35:b6:a6:4d:47:
45:c2:43:81:2c:dc:b7:f3:34:aa:11:a8:13:e3:a7:
75:97:f2:c4:c3:03:0f:46:2f:21:eb:bc:36:e3:22:
a5:2e:8c:2a:bf:95:3c:e1:ee:0e:61:bc:9b:a5:5b:
97:26:a5:26:c7:2c:5d:c5:6c:de:5c:8a:25:8f:17:
a0:2a:1e:7e:a7:f8:17:02:62:0c:ae:be:c9:70:7f:
43:ed:6b:90:29:13:e9:67:3e:bb:b7:4f:b6:f4:f7:
90:7c:65:f8:8b:75:85:0a:12:2e:01:fb:38:7e:39:
a6:4d:9b:44:a0:0a:36:0e:57:b7:40:ed:7c:85:69:
16:30:5e:90:4f:1d:67:3b:4a:ff:72:55:ed:59:f5:
b8:e2:04:d4:f1:b6:51:f1:3d:23:7d:8b:fc:fa:c1:
34:31:dd:7d:05:84:ea:a4:5c:18:ec:5b:cd:a6:0e:
fa:2e:81:40:f9:f4:4f:05:99:63:72:fc:b0:1c:ad:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:C8:B8:1D:CE:82:83:97:33:34:D9:B6:1D:F3:E9:11:27:40:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddfb5616-264a-3f03-b8cd-0f93c7d35cd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:f3ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:d7:6c:ab:f1:cf:c3:a2:aa:64:43:95:d1:6a:1f:71:48:bd:
e2:0a:ab:2d:23:67:a0:96:c3:fc:19:84:3f:07:31:7f:29:9f:
9b:06:46:c6:fb:83:0d:25:73:ea:4c:47:a0:65:99:f6:42:02:
05:95:80:e7:01:6a:6d:b3:54:6c:fd:6c:8e:96:cd:54:8b:d3:
b2:4b:12:26:a0:99:f2:bf:15:34:53:1f:28:66:c2:f0:e3:99:
6a:42:40:48:f0:56:63:3b:8e:dc:64:50:5d:93:c1:2c:6b:fb:
1a:c9:4b:2b:ca:84:b8:2b:03:27:23:ca:9b:97:35:fc:b5:44:
e9:db:27:29:05:33:ea:82:df:a4:81:12:1c:f2:80:a5:31:ce:
e3:22:7d:41:f5:b4:34:d6:8b:82:6b:bc:9f:a8:36:82:64:31:
d5:30:58:3b:9c:d0:2b:12:52:0b:32:e3:b4:07:d6:a2:93:bd:
99:c4:a9:20:59:72:22:50:de:37:8e:b9:b7:b8:5a:b2:d2:f7:
b6:71:a6:0c:56:e6:fb:15:4f:08:44:ec:08:15:dd:d7:24:98:
9b:76:26:76:dd:02:15:2c:32:08:b6:27:aa:8e:bf:22:47:57:
5e:1d:c3:77:33:e0:13:bb:c2:fc:37:b4:bb:28:62:ba:fe:d7:
1a:48:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:15 2025 by rpki-client