Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b416a33-8abc-311d-8aa5-2768bcfc4c46.roa
File: 3b416a33-8abc-311d-8aa5-2768bcfc4c46.roa (raw, json)
Hash identifier: PGawdKxp6iqxncJGZOTUMdVk5uZVEIst86Gl9kUZuJo=
Subject key identifier: 94:52:CA:9B:3D:74:CF:2E:58:B0:4B:FF:E5:23:67:26:78:3A:E5:57
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB5AAE85F9B9C4A0135860
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b416a33-8abc-311d-8aa5-2768bcfc4c46.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:b0c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5a:ae:85:f9:b9:c4:a0:13:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=216c2449-6fd9-4f5a-b8cc-16ea0508ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:43:c8:e5:d4:67:97:59:32:bc:e2:5b:c4:
43:cd:bf:d5:ac:68:75:3d:61:3e:20:9e:f3:17:de:
c5:9f:d7:63:9b:c5:db:bc:6b:dd:ba:de:fe:d0:57:
8f:5d:fa:03:61:df:3f:5f:70:8f:52:fa:2a:87:c3:
4c:6e:86:f7:ac:bd:35:46:c3:e9:e5:c8:4c:c5:fe:
2e:3d:ac:89:16:cb:02:04:9a:16:db:36:3c:d2:67:
61:1e:11:45:50:8b:3f:f0:6e:8a:d1:f2:35:bc:ad:
eb:ca:b4:f0:75:b8:b3:f4:6c:85:54:05:94:26:9b:
9f:be:64:61:ab:c8:88:f5:c7:5d:30:22:7e:31:4b:
d3:20:ab:f9:c2:ae:95:7a:94:92:5a:bb:7f:00:2d:
db:75:93:96:84:93:61:6f:49:f2:d5:d9:93:68:28:
d6:e6:58:e8:69:1f:60:09:67:19:94:41:90:db:bb:
7a:3e:5d:07:fc:42:18:11:69:10:11:ad:12:9f:26:
ec:7c:01:2b:41:68:30:a4:08:d1:69:e1:e2:94:34:
f7:34:e5:52:c8:77:db:50:03:c3:5e:69:d2:d4:96:
9c:58:f0:e5:33:c7:56:2e:e1:be:65:de:53:b6:69:
b4:6b:3a:82:67:16:01:0c:13:fd:51:2c:47:59:fe:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:CA:9B:3D:74:CF:2E:58:B0:4B:FF:E5:23:67:26:78:3A:E5:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b416a33-8abc-311d-8aa5-2768bcfc4c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:b0c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:29:dd:dd:c4:d6:1b:fb:1a:3f:05:97:9f:b6:fe:29:a7:f9:
c2:a2:d7:54:2c:e7:14:37:80:e7:a7:b8:9f:9a:4f:c0:6d:92:
d2:bc:62:68:39:e4:3e:84:38:c2:49:fd:56:a8:0f:a2:16:0d:
4a:07:3a:da:fe:82:21:7d:a6:30:6a:e4:c7:51:90:df:11:bf:
1b:9f:1e:da:d0:12:32:c5:fb:22:98:5e:eb:a7:53:47:06:4b:
b2:ed:3c:9e:a5:79:3e:58:28:f6:af:40:90:17:b0:5a:33:b2:
c2:ee:b1:fe:7a:f4:b0:92:52:2a:36:d9:ce:24:96:11:99:22:
f1:35:b8:4a:a5:0b:b8:ae:9f:89:b2:06:c1:8a:a1:ee:21:fe:
4e:46:cf:49:37:b0:a3:fe:66:09:2e:a3:d9:dd:63:b9:80:86:
8a:ca:fd:4c:1c:41:29:7c:0e:2e:e3:b2:9e:19:be:be:cd:a6:
e6:5f:0c:7c:90:0d:c3:20:60:bf:72:4c:3f:b8:79:e2:c4:80:
c6:1d:3b:18:b2:65:3f:bc:79:75:4d:cb:43:74:07:27:03:63:
39:ac:26:ba:6d:e6:ba:50:7b:ac:7d:e3:c9:51:00:08:9f:a2:
43:12:77:88:15:11:a4:74:fa:0b:20:fc:cf:ad:80:a0:b9:41:
eb:6b:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:28 2025 by rpki-client