Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
File: 374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa (raw, json)
Hash identifier: jxVAEvfKTzAMw5TCbOsXGYem+xZiS4q7yPFc/qH7RkI=
Subject key identifier: 32:C7:ED:46:9F:41:5D:09:DA:08:AF:06:13:EF:CC:90:F7:94:EF:89
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FE9F409F1EC23AA0170560
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1011:a110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:9f:40:9f:1e:c2:3a:a0:17:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=e0d213bd-cd67-4d8a-a261-03978d8e3f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:7a:c9:7d:e3:2e:64:0c:86:f0:fb:17:80:
fd:4c:6b:7b:df:40:55:7f:b2:91:99:2d:9e:ae:20:
a3:7a:63:1c:84:03:6e:2a:a2:97:e8:f1:e3:5e:c4:
23:bb:c2:c3:3c:90:c0:16:2e:99:1c:d0:58:5b:fd:
e7:8d:51:65:02:4d:5c:4d:21:38:dc:1d:2a:ca:98:
12:ac:f1:3d:86:f8:22:fb:ba:b5:1d:48:93:00:75:
f2:62:58:6e:be:90:b8:1b:e4:96:18:3b:20:f6:2e:
b9:7e:fd:2c:ca:57:2f:67:6d:eb:da:ea:7f:ee:36:
f8:19:ca:4d:fb:af:d1:3a:f0:08:23:07:b5:ac:79:
0d:5f:42:76:63:b2:79:b0:1f:d9:c5:ff:ff:98:dd:
b3:85:1b:04:24:c3:8a:29:c3:4a:82:dd:59:b6:d2:
dc:89:55:c7:5b:19:86:e3:b2:2a:3a:c4:0b:41:df:
fb:f5:5a:6d:7f:57:88:a3:80:ab:d8:05:ff:a5:f3:
b5:84:e7:3f:2a:b6:b5:63:5d:97:36:4a:49:fb:d2:
6a:6f:06:ae:47:95:2a:f2:69:cf:21:ee:19:1e:e3:
cd:14:77:5c:da:ce:82:f9:85:5f:6e:3f:8a:31:14:
6c:b0:b0:d2:03:af:1c:94:00:2b:f4:a9:5d:fa:c0:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:ED:46:9F:41:5D:09:DA:08:AF:06:13:EF:CC:90:F7:94:EF:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1011:a110::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:9d:0e:62:9e:2e:97:fb:0e:2a:36:81:4c:6a:45:8b:cf:53:
c4:b3:9c:29:17:5a:c3:e7:7f:db:d3:87:6c:63:fb:15:e7:a3:
01:b1:10:cb:83:f2:03:a9:a7:22:04:55:b8:c5:83:d0:ae:ca:
b8:f5:7e:f9:b0:8a:e3:37:2b:b0:b1:da:a9:37:b8:2f:ba:7d:
5c:09:d0:67:57:7d:89:48:36:d1:8c:6d:c5:11:24:0f:d8:56:
3c:31:be:d5:3a:04:b5:a2:a1:f1:8d:82:40:dc:73:e3:ef:61:
30:11:2b:57:f7:2c:bb:12:b0:72:32:2f:88:12:36:fb:65:4c:
96:89:ec:a6:55:4a:ef:0b:46:b6:84:59:f4:fe:c1:20:9b:76:
c2:fa:63:49:41:2f:f4:b9:57:f3:3d:2a:bd:ec:f0:b0:cd:89:
19:e8:70:bb:bc:6e:be:9f:52:a1:26:22:aa:33:2c:e8:1b:a4:
5d:f2:a1:fa:fd:d8:1b:bc:e8:a5:21:11:27:fb:3f:63:02:1c:
d8:c8:96:67:d0:b2:39:36:05:0a:61:91:c0:23:83:89:df:83:
12:bb:eb:c2:31:54:ee:5c:29:ff:f3:5b:18:dc:bf:83:d7:46:
e1:b6:72:85:c1:25:f5:f4:f6:a5:e5:6b:e0:30:0a:96:c9:bd:
0d:1c:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:17 2025 by rpki-client