Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa
File: 03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa (raw, json)
Hash identifier: 2pxNj/2oB+sMWqwyD9nCPJ2X0taBuyDdntNHToh24Qo=
Subject key identifier: DA:AB:60:70:93:74:28:13:14:83:E2:1B:3B:90:2D:56:09:2C:1C:BB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB571EB7B78F8B6D787E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1007:a020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:57:1e:b7:b7:8f:8b:6d:78:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3c4c801e-13da-497f-a216-2f321ae3559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:b2:02:80:d7:1b:e7:a6:47:fd:aa:97:9d:
2a:6c:00:5d:dc:cd:5d:fc:5e:a3:55:9a:d1:78:18:
02:94:ba:55:28:76:e1:d8:8b:1a:b7:0f:a5:33:e9:
29:6a:3d:b0:4f:8e:eb:6c:4f:e6:c5:b0:d2:46:2d:
b8:17:11:a9:d0:8b:fc:ff:fd:d1:de:ff:cd:8d:3b:
23:5b:51:c1:81:59:64:ce:c0:ce:fa:e3:ec:80:b1:
56:5b:32:d1:1a:e7:ef:4f:fe:ac:66:75:cb:ac:4f:
c2:1a:96:8f:0a:5e:ea:64:2c:20:87:e8:7b:39:40:
d6:29:ec:6c:57:27:b1:52:1b:db:93:a1:c4:6c:f6:
c7:00:c8:3a:be:a3:eb:fd:0e:5c:a0:4b:60:dd:6b:
62:58:5d:41:4e:e6:8a:6b:1f:89:3f:d6:32:ea:0e:
7b:9f:b0:b9:94:39:b4:3b:ee:5e:d8:7b:2a:a1:25:
f0:a3:f8:f4:a4:eb:cd:37:65:cd:a4:62:dd:5c:79:
db:33:e4:90:2d:39:6b:cb:fe:3c:4b:f8:31:32:1a:
8e:17:db:ea:3d:94:81:7c:e3:5e:ea:c3:cc:11:f6:
3e:f4:99:57:63:44:dd:8a:a0:44:f3:2d:3c:a5:d6:
36:e4:11:af:15:24:f3:30:a9:94:2a:f3:2a:8e:05:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:60:70:93:74:28:13:14:83:E2:1B:3B:90:2D:56:09:2C:1C:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03c1dcd6-2312-35f4-b4af-6ae7786ba3db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1007:a020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:3f:85:ae:9f:d8:c6:76:4c:d8:ed:ab:30:49:65:22:e2:e0:
b1:0f:d8:fe:ec:f0:cb:70:f2:7e:64:47:fd:77:d6:bc:1b:58:
43:8e:40:b3:dc:56:71:47:87:57:69:db:35:80:37:f5:2a:a8:
7e:45:97:37:2e:cb:1c:f1:3c:ab:3f:34:85:a8:82:17:6d:ad:
8b:6d:38:58:f0:5a:bb:7d:d8:4c:27:98:14:bd:68:03:27:58:
51:19:9d:cf:9d:c1:1d:86:ca:1a:33:54:83:0a:2e:3c:90:3b:
8d:63:f4:c3:5f:38:ef:04:96:71:67:a2:5a:49:41:f9:38:03:
ce:36:d9:4b:c4:01:49:26:6b:73:ce:67:07:21:bc:dd:c8:82:
bd:6c:20:0d:b2:d7:10:2b:8a:d9:5f:d6:16:dc:22:37:2b:80:
24:83:d5:49:ff:d8:22:bd:73:53:f3:de:d4:34:33:29:e6:f7:
ea:8a:63:48:f4:4d:ec:76:fe:86:e7:f4:bc:17:3e:5e:d9:d5:
c1:10:20:96:30:d8:4e:a8:1a:e9:c9:04:b7:f7:f9:83:e5:0d:
f3:5c:a5:61:2b:1b:48:86:79:de:2f:29:4e:34:15:c3:f8:30:
91:ee:05:11:60:1c:3d:b8:91:ae:79:45:4e:20:fc:0a:44:6a:
f5:4a:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:40 2025 by rpki-client