Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5975d607-6cac-3d19-bd8f-16182ac92fae.roa
File: 5975d607-6cac-3d19-bd8f-16182ac92fae.roa (raw, json)
Hash identifier: tET0mGQra2G8zIBbxE0vgZpDvUEUM2jbhNw4kX7mHzA=
Subject key identifier: 25:ED:EE:95:F1:89:6F:B0:A6:F3:67:00:60:D8:8C:BB:98:4D:47:7F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB81CD4B1ADFC0E60FD2E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5975d607-6cac-3d19-bd8f-16182ac92fae.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:b890::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:81:cd:4b:1a:df:c0:e6:0f:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f519b108-3a38-458d-850e-67f983258289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f9:02:d9:76:7c:8d:59:5b:0b:fe:46:95:cf:
9d:32:60:d4:d5:e0:6b:86:b9:af:20:ee:47:5f:fd:
22:35:72:0f:6e:e4:f7:e1:6c:8e:6d:d7:0f:5d:72:
c4:a9:8c:55:d9:24:56:4e:45:39:b2:3e:e1:d3:9c:
15:d3:93:bd:4e:7e:5d:ac:dd:a4:5e:0a:93:da:3c:
d5:1a:e1:87:de:1c:0f:9d:68:7a:71:b1:68:84:32:
f7:a6:97:a9:04:41:c0:32:a6:1c:e3:b2:7d:b1:22:
0d:37:06:01:46:11:ff:a8:aa:ca:18:c4:be:73:17:
60:ee:e1:07:22:0e:a9:66:31:14:7a:84:f0:04:35:
05:24:de:82:22:e6:5f:d1:62:7d:5e:a7:09:20:f0:
34:c2:04:b7:ce:b8:66:46:a5:97:b3:cc:31:b1:ac:
e8:95:e4:a2:57:88:f6:e1:5b:a2:3a:37:33:44:55:
59:1b:6c:5f:8a:19:87:ae:fc:b3:49:02:b3:77:6b:
9a:e1:ce:3a:99:10:07:58:60:e3:d2:17:de:f0:7c:
3a:71:e2:5b:ae:96:30:77:5a:35:12:5f:50:f7:60:
37:88:0a:53:b3:46:12:7a:a0:bd:de:5e:ce:6c:76:
c7:b3:43:f1:83:22:88:72:11:7b:28:8f:7b:49:cf:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:ED:EE:95:F1:89:6F:B0:A6:F3:67:00:60:D8:8C:BB:98:4D:47:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5975d607-6cac-3d19-bd8f-16182ac92fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:b890::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:a4:37:71:42:71:e5:94:ed:f9:86:9a:92:ea:91:89:5f:1c:
2b:ec:83:cf:53:fd:17:c7:7e:0f:93:17:47:e1:37:e6:3c:7e:
44:47:2f:22:8f:34:f0:f8:0a:0b:a2:77:8f:ff:dc:be:62:2e:
bb:e9:df:ac:94:d1:cc:61:82:46:40:6d:01:85:30:3a:6b:a9:
15:f8:4c:5a:04:c5:0e:77:68:a2:0a:63:65:d8:1a:7f:f4:75:
48:ad:27:9f:f0:e6:16:6f:ef:a0:16:dd:03:56:42:50:b1:3f:
d0:8d:fb:40:ee:75:a0:6b:59:b0:be:1e:ea:ed:cc:af:e9:da:
50:7d:5d:52:8d:28:e7:74:1e:0a:46:7c:b6:30:b5:be:56:b1:
2b:11:3f:42:81:6b:8d:ac:33:74:a0:8d:ea:7c:90:f1:ed:76:
ab:da:60:ad:d6:48:cb:d3:48:71:3a:e9:50:07:59:e5:5e:f7:
88:f6:32:8f:9d:51:b1:91:b1:58:47:82:c5:fe:97:fc:90:b6:
e4:3f:8c:75:12:8f:60:25:e6:d4:68:f3:06:be:19:fc:70:9d:
0f:a4:2d:00:e3:11:84:05:27:7e:ce:eb:b8:a5:2c:38:ac:0c:
58:da:24:1f:d4:5f:1b:af:f5:e3:e3:38:28:0b:bd:df:b8:04:
ea:79:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:54 2025 by rpki-client