Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa
File: 1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa (raw, json)
Hash identifier: WfmH0CuvaHKTih0uM/tPgBf1h/mcBrocvGvddZc1Fb0=
Subject key identifier: D3:43:EA:30:60:2B:5C:C6:88:AA:A4:46:39:3B:F5:89:37:3C:92:47
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB80BFDDB549F15F706F90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:b120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:80:bf:dd:b5:49:f1:5f:70:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a37e34d9-323d-4f60-8eab-868b6fb11462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:2f:25:bf:4d:9c:19:68:cb:b9:28:01:bf:
f0:20:96:3d:b6:37:0d:b3:6d:bf:b3:5c:bb:57:79:
77:ee:e7:f0:87:25:9e:f9:23:9f:ca:87:00:10:40:
d2:28:f1:0f:73:e4:48:dd:00:9e:0a:10:6c:62:9d:
a9:57:72:4c:bf:dc:4f:4c:d3:94:8e:5c:c4:21:94:
42:5a:c6:10:c2:93:d7:a5:95:c7:4e:d6:d3:a7:c9:
a5:d9:c4:16:5f:5a:f4:86:4f:3c:cd:24:1d:a8:dd:
e3:62:eb:6b:1e:53:4d:15:b4:98:81:e1:33:28:cd:
ef:c6:85:3c:a7:ca:ce:67:b1:7d:f2:1a:f6:ae:42:
7f:62:0d:c7:38:a6:fd:18:41:a6:e3:6b:f4:2f:6c:
46:d9:02:51:b8:a5:2b:63:51:c3:c0:d4:4d:af:0f:
fb:35:cf:1e:ae:db:15:5f:13:05:31:e2:73:47:c4:
2d:42:25:84:d2:9a:48:97:53:4f:c7:8c:66:82:75:
61:64:3e:81:1e:12:f4:b1:65:09:95:35:a3:8d:9d:
51:a1:37:4c:ad:80:7a:5f:b1:2a:22:d7:42:35:1a:
32:00:46:da:62:e3:ba:b3:0a:9d:ba:4f:e6:34:bb:
e3:ed:4b:c6:66:57:87:5d:5c:84:35:5c:18:2b:8d:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:EA:30:60:2B:5C:C6:88:AA:A4:46:39:3B:F5:89:37:3C:92:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1de1e4f7-f9ef-39d6-96e5-37d6aab76bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:b120::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:6e:d8:53:39:2f:81:ea:f4:82:0a:f6:df:e5:7f:12:fe:02:
37:fa:be:9d:bd:90:31:9a:8d:3a:8e:50:73:3a:0f:9a:98:0a:
dd:ff:a6:75:e3:c4:8a:43:03:40:32:94:92:68:84:3c:f7:29:
82:bf:60:8f:da:69:db:d2:ab:36:1e:f5:12:01:8e:28:7d:27:
3d:96:44:9d:8e:72:e3:1a:3e:4d:4a:6f:0e:6c:e7:56:3b:74:
6d:b3:a0:c4:5c:26:23:84:f1:fc:23:16:f5:c4:8f:09:af:2a:
e7:9d:0f:27:32:3c:08:2c:44:b9:43:7a:98:42:79:f3:e4:3c:
f5:dd:ef:5d:bc:a2:4d:15:60:fd:82:4a:e7:de:66:9e:1d:ed:
f4:bd:36:da:98:5b:b8:9d:5d:03:7d:5c:35:f4:64:49:e2:1a:
c7:b2:08:47:cd:7c:c7:4b:9a:76:ac:d3:f0:81:7c:d6:7c:80:
d8:fb:4b:5a:14:5f:e4:36:64:60:a8:8a:ab:9e:3d:68:d6:6c:
fb:4d:b0:43:f2:e0:fd:32:f2:1d:0b:e8:6b:b0:68:6b:70:1b:
ce:df:41:7f:ad:34:55:fe:88:b5:41:d2:2b:71:a1:79:fb:64:
a8:59:e5:4b:c6:13:0c:9c:f2:19:50:db:75:b1:50:60:09:52:
20:da:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:27 2025 by rpki-client