Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4104c64b-7ccf-3496-ba9b-f97def4f5d8f.roa
File: 4104c64b-7ccf-3496-ba9b-f97def4f5d8f.roa (raw, json)
Hash identifier: G/k/fod1Rzd4tVoo14Vk+7z+8ncKxHBc0X/VyzxAxng=
Subject key identifier: B1:3A:02:91:53:D4:7A:41:F2:0E:5F:C3:A8:37:B7:92:59:96:BE:C8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEA665AC97E87D36DA51E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4104c64b-7ccf-3496-ba9b-f97def4f5d8f.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1012:a110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a6:65:ac:97:e8:7d:36:da:51:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=c774e465-f0be-4ec8-a128-bee8a0a3ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:cd:bd:0e:1e:aa:73:ba:0b:cc:ea:1d:8f:
c4:df:3c:98:38:f1:b7:6c:36:a5:e3:3e:e6:88:58:
8a:ce:08:71:74:f1:28:68:9c:d6:f8:38:1b:07:f2:
4b:3a:30:ed:cb:ee:f0:ea:73:31:03:93:e7:93:b0:
4b:9e:fb:f3:e2:e8:cd:b8:1b:e8:4d:9b:7d:03:44:
93:2c:98:b1:18:46:60:3b:93:58:23:6a:b1:af:a7:
94:7e:f9:2c:7c:f0:af:46:71:fa:61:fb:1c:7b:1a:
01:49:50:12:19:6e:6e:c4:e0:b5:80:d5:3c:ab:3d:
d8:6a:7b:37:fd:0a:ab:99:8f:5e:19:6f:d7:9d:67:
36:c6:c5:33:a4:9d:5d:89:e4:a2:1c:8f:a2:bd:5e:
f1:94:46:99:1e:fe:6f:f3:d0:9b:90:e6:16:7b:f3:
56:8e:0a:d0:e4:31:fd:f9:9a:79:34:85:5c:c2:7e:
9a:ed:03:c6:aa:15:50:44:22:69:61:c4:df:20:8d:
ee:a8:e8:13:a3:8d:fa:27:85:10:4f:37:96:28:35:
c0:18:bf:b9:d8:2e:da:8e:71:1d:a6:95:8e:18:14:
7a:a9:c9:aa:59:7f:10:62:d2:49:f2:99:d1:01:49:
72:81:66:85:43:1b:92:0d:92:35:41:ec:9e:7b:74:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:02:91:53:D4:7A:41:F2:0E:5F:C3:A8:37:B7:92:59:96:BE:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4104c64b-7ccf-3496-ba9b-f97def4f5d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1012:a110::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:dd:1e:f2:cc:97:f8:ce:41:4c:e5:7e:b5:8f:ba:fb:c7:f3:
60:47:cf:1f:2c:d4:fc:36:b7:a0:be:9e:a0:e1:a8:60:04:5a:
09:a9:60:51:96:fb:d2:52:51:e9:ac:7a:d8:5d:4c:81:e9:4d:
4b:4f:91:cd:16:22:ba:81:54:16:97:8c:94:b6:32:b3:04:4a:
e7:a3:57:6c:f2:cd:e6:12:1f:e3:47:d9:f9:60:97:5b:de:2d:
fb:26:c7:bc:57:72:ee:a2:0b:4c:3d:48:25:bd:3d:7e:b8:9a:
97:3b:41:de:14:6d:67:6f:1b:ba:26:cf:10:6b:46:22:31:3b:
ca:7c:5d:ce:df:95:b8:78:72:89:a5:31:4b:5e:de:18:26:c9:
16:25:56:56:d5:a8:46:7b:a8:dc:31:c9:1b:24:ac:7d:8d:7d:
74:6f:5a:76:77:2c:a9:65:1d:35:79:59:0c:f6:51:99:4c:9d:
41:31:90:2e:c7:ee:17:ba:f7:e2:bc:67:06:a6:1f:66:79:92:
77:ed:b2:f7:4d:4a:4e:fc:65:23:3a:41:b7:d4:6e:25:74:32:
b8:f4:12:cc:d7:ea:9c:3b:31:83:d8:74:ed:59:6d:05:3a:4f:
1a:68:55:cc:83:fc:d3:21:54:33:3f:49:41:41:5e:ab:df:d8:
ea:4f:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:31 2025 by rpki-client