Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e2daec3-ccf6-337d-92a7-44816940f369.roa
File: 4e2daec3-ccf6-337d-92a7-44816940f369.roa (raw, json)
Hash identifier: w9imGiH9aeLfj6zR00LOFG56FB4PuNy8J1XkYambhsw=
Subject key identifier: 74:07:B1:67:EB:28:65:6B:16:F6:33:0E:56:F9:63:AF:EC:3F:A3:51
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400ECD131047EC9DBB41040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e2daec3-ccf6-337d-92a7-44816940f369.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:b0c8::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:ec:d1:31:04:7e:c9:db:b4:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=0e70691d-3683-4822-aa66-32d9f4ee67dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:8e:ba:e2:b8:6a:cf:43:52:63:70:62:0b:
96:3d:ac:c7:fb:74:eb:d8:2c:33:77:38:3a:cc:55:
a9:f7:67:e3:e4:61:48:e4:72:8a:4c:24:d4:af:2f:
8d:76:ff:8a:a9:22:05:8d:c8:09:3c:99:a6:1e:1c:
3f:8b:99:d5:7f:e7:67:9c:31:57:95:c7:5d:c1:c2:
88:18:6c:1d:9b:72:1b:07:e3:b7:af:1d:ce:0f:33:
70:51:cc:57:21:30:2f:5b:da:23:85:54:68:e8:dc:
c0:f1:4e:fb:99:a7:ea:79:fb:65:7b:4a:af:5b:b0:
c8:50:1a:df:b3:03:b6:56:7c:af:fe:ce:07:4f:bf:
76:a9:39:d3:97:12:0e:f7:65:ab:d7:d4:1a:72:e4:
19:77:0c:91:51:37:4d:6e:78:83:a5:8a:cf:22:ec:
f4:f7:99:85:fb:16:3c:43:19:0d:1d:ca:32:d2:a4:
f4:86:5e:b9:47:7d:2f:64:e6:55:25:35:a2:38:d1:
68:ee:b2:de:5e:2c:56:a3:d3:b2:3c:fe:e3:70:2c:
b5:0b:44:1f:6e:52:84:24:38:d3:38:92:76:40:c0:
2e:50:14:b9:ce:3d:8e:d5:9f:8c:c7:96:f1:2a:24:
79:90:19:3e:60:35:43:f3:61:92:d7:f7:47:44:6c:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:B1:67:EB:28:65:6B:16:F6:33:0E:56:F9:63:AF:EC:3F:A3:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e2daec3-ccf6-337d-92a7-44816940f369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:b0c8::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:49:0c:6c:ab:25:0d:25:4c:57:dd:15:41:57:5b:da:3a:09:
cd:38:5e:c0:d5:f3:dc:48:24:59:ea:a0:72:25:4d:2d:95:7e:
6c:11:aa:ba:5c:a3:bd:29:d8:08:39:8a:19:1b:cd:80:70:30:
6c:72:c2:7c:35:bf:71:a8:f0:a9:88:6e:05:0a:08:bf:1d:76:
36:4e:85:c9:9a:d4:33:10:93:4f:3a:25:d0:d9:5c:fa:bb:ca:
10:ea:4b:d7:e7:43:24:d0:45:2e:2e:e4:c9:84:32:b0:d1:e5:
b9:ce:15:76:1e:5d:6d:84:ab:28:80:0b:30:f0:ef:ae:bb:15:
d0:9d:90:be:27:76:39:d1:72:2b:50:e3:c3:fa:f3:69:8d:44:
a8:12:db:a0:47:f6:2d:c1:c6:06:cc:b5:3d:c9:fc:c2:cb:fd:
24:95:8e:e6:09:f0:3d:a8:f5:11:d5:9c:26:15:f1:9d:41:8c:
59:16:08:2a:b2:f3:b7:ec:fd:ac:2e:ff:6e:e3:38:7b:93:36:
68:b1:2b:1c:f9:55:7a:10:c4:6a:a8:54:a1:ab:b2:f8:f1:cd:
a4:49:65:03:e6:3c:e8:8a:9a:41:be:33:a3:a3:13:6c:74:d0:
ff:51:9b:d2:7d:47:b0:a8:3d:6a:13:ae:b6:4f:6d:8e:98:a3:
87:1a:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:38:36 2025 by rpki-client