Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/344a6003-d490-34af-8605-97560662390e.roa
File: 344a6003-d490-34af-8605-97560662390e.roa (raw, json)
Hash identifier: wvtRsXudJvk6X7GMA1SWVA2GxjbF4vTlqfpeEPaSOq8=
Subject key identifier: F4:0D:53:A2:94:61:EC:72:4B:5F:7C:A3:EA:25:A5:27:DB:9E:D2:51
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E8F72224AC40A5B1E980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/344a6003-d490-34af-8605-97560662390e.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100c:b040::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e8:f7:22:24:ac:40:a5:b1:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=de7ac181-4322-489d-8ef8-04dd64db03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:dd:50:96:ed:c5:19:05:58:e5:6c:3d:b7:
a9:43:51:13:60:39:cd:4c:0e:78:56:2d:aa:52:5f:
6c:47:69:37:4e:d0:3f:43:6f:a8:0a:08:54:73:83:
c6:b8:d7:71:5a:bf:a2:a7:20:27:fa:82:2e:6d:59:
d9:45:74:e9:7f:a1:d2:32:21:c7:9f:46:29:57:5f:
72:f8:f0:15:7e:91:70:32:b6:f9:c7:45:c9:1c:7a:
3c:87:ee:d1:35:62:32:13:57:be:76:69:b1:b0:f5:
8d:e4:ac:6c:92:db:59:f9:5c:07:16:43:f9:43:7e:
ba:75:d4:39:6a:ce:49:a1:ac:72:39:01:7b:37:cf:
32:19:c0:3c:d8:2c:ca:fa:6c:6c:09:0c:b0:1d:cd:
8b:46:a3:d1:5e:3f:c0:eb:ff:f5:0a:83:ba:ad:ad:
60:d7:2c:d6:6a:af:94:58:99:33:5d:b9:80:5d:4d:
f8:bd:ed:43:be:cf:50:23:a5:3a:2b:d4:08:74:1b:
fe:d7:5c:88:a4:51:c3:65:7c:e6:c2:c3:89:0d:eb:
d1:68:81:20:34:96:d3:46:ce:d9:94:fb:26:10:17:
43:f7:36:c8:cf:b1:80:0f:c1:ed:6b:8b:a5:27:58:
be:fb:0d:47:19:ed:59:fc:cf:3f:40:ff:19:03:4c:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:53:A2:94:61:EC:72:4B:5F:7C:A3:EA:25:A5:27:DB:9E:D2:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/344a6003-d490-34af-8605-97560662390e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100c:b040::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:94:e6:35:72:a2:ad:4a:ae:59:b1:cc:17:66:63:09:3b:90:
e4:bb:f5:da:40:7a:6f:a6:ad:d9:4b:8e:cb:af:c8:97:ba:5d:
01:00:ae:c9:1d:6b:ff:c8:e9:18:ed:f5:01:ca:4d:d8:f7:36:
13:fa:93:9d:16:1b:c5:15:ee:6e:ef:53:69:f0:ae:27:7b:5e:
b3:19:6c:7c:91:b3:ca:55:3e:ef:4f:8b:c5:0f:fc:62:9e:d1:
81:42:15:55:3c:00:a4:95:c9:c0:90:c5:5f:47:6b:3d:92:dd:
e8:19:7f:74:c1:26:42:96:4e:bc:0d:96:00:85:10:09:a5:ee:
0c:77:3d:43:a6:c5:76:42:0b:a0:18:9e:3f:7c:10:ac:31:64:
40:24:ea:5e:34:e9:3e:d5:a3:d9:57:b8:08:92:79:0a:11:9e:
22:6e:be:53:ab:61:5c:12:0b:a6:86:ae:e3:fc:eb:e6:42:b2:
bd:38:58:85:25:be:ca:01:ea:e2:6f:75:17:0b:8c:71:55:bd:
75:5d:a5:9a:5e:58:77:97:27:4a:86:14:bf:da:9a:46:2b:cb:
59:d6:57:3a:cf:4f:96:4a:a6:e3:85:0b:66:bf:22:62:c4:8d:
1e:d6:c5:6e:b5:08:46:5c:c0:02:55:fe:9f:de:0c:a5:ce:a6:
e2:a8:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:59:54 2025 by rpki-client