Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa
File: 4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa (raw, json)
Hash identifier: dhQidKL6LuqlRdEi4GyqrSPwXt2L10prmFeLAjvr3eU=
Subject key identifier: D0:D9:83:4C:27:E7:00:37:18:18:87:B1:75:A5:4E:F2:48:02:71:15
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E764DDE18681A1EDA6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100b:b110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e7:64:dd:e1:86:81:a1:ed:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=8a93847f-c649-4bd7-9a99-219d09031598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:60:fb:99:c7:bd:82:e1:45:d5:ff:fd:f7:
42:db:3a:85:0e:5a:e0:5f:89:3c:9e:21:e5:dd:83:
1f:49:84:a1:d7:d8:be:1a:81:63:5d:8a:31:34:b3:
b6:8c:5f:2a:0a:c7:d8:7d:02:2f:01:68:34:1f:9a:
8c:24:6f:af:f4:a4:a6:34:80:74:dd:2e:aa:fc:d5:
b3:85:1d:a1:cc:08:0a:f7:e0:bc:17:33:e5:72:80:
17:24:91:1a:b2:8b:fa:c9:93:b5:03:6d:fa:bf:f4:
0d:68:23:94:69:1c:19:ad:5b:4d:32:a2:3b:0e:15:
fc:d9:5e:90:70:2f:24:5a:99:56:76:4b:cf:3f:85:
c6:db:0a:3a:6b:a7:00:ab:be:2f:8d:d9:c1:5e:a0:
4b:8a:04:a3:34:57:84:e9:d7:60:84:11:16:56:d0:
9c:84:33:bf:b1:5f:90:4a:47:8d:07:f3:6f:54:42:
52:10:75:cd:74:9f:f6:d6:1e:0b:e8:08:d6:d5:ba:
f1:19:fd:4a:9e:e4:88:26:63:1b:fa:f9:33:04:90:
48:2d:f6:f7:2b:41:25:00:8d:3b:76:4c:63:2b:89:
ce:e3:09:a4:d6:83:0f:a8:3b:da:d9:a3:40:a8:5a:
57:d8:9e:82:f6:71:fa:4a:7c:e0:e0:20:77:c2:7a:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D9:83:4C:27:E7:00:37:18:18:87:B1:75:A5:4E:F2:48:02:71:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100b:b110::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:d6:b5:4a:e9:11:96:0c:bf:49:3c:0f:6a:78:7f:f8:09:d5:
0d:44:64:ce:8a:b4:1c:22:ff:07:f6:97:cd:20:5b:3e:c5:eb:
08:1b:b2:77:b1:cf:98:87:5f:45:58:18:fc:89:71:c5:05:5d:
32:27:bc:d4:31:f1:7c:9a:3a:de:24:e6:b4:e4:53:f4:20:0c:
69:ea:06:0f:01:dc:61:8c:1c:97:f8:fc:88:7b:cf:99:12:fb:
78:59:5f:e1:1a:7c:bd:04:8a:09:3f:1f:bb:9f:de:88:76:ba:
03:c1:d1:fe:2f:78:d3:2e:11:87:ad:48:bc:fa:03:19:cb:f4:
4e:4e:84:44:c1:cb:56:59:5d:5b:f3:cd:c7:eb:9c:e7:04:f6:
dc:89:20:59:db:11:0c:68:0f:48:6e:85:53:43:2d:cf:20:69:
f3:19:a8:07:2c:b3:f8:69:d0:4f:ba:88:0d:a3:c2:2f:9b:6a:
39:50:e1:25:1b:4f:03:26:17:a8:0d:e9:08:9d:e9:d2:7c:63:
48:4e:2d:cb:c8:a3:2d:ba:1d:9f:c8:1b:c0:75:8d:fd:6a:d6:
6c:a3:27:58:d5:71:cb:2a:9e:c5:02:eb:22:64:0c:5b:56:06:
ca:bc:8f:19:4b:6b:39:b0:f6:92:b4:60:eb:b5:6f:48:b5:a4:
97:d0:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:57 2025 by rpki-client