Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c873c39-0009-33fe-9665-b6733a12124e.roa
File: 5c873c39-0009-33fe-9665-b6733a12124e.roa (raw, json)
Hash identifier: Ny6qn/3lVk5reBM/O84y6Y1ccfQOQsMHucIklA3So94=
Subject key identifier: 04:77:C6:E3:29:83:47:6D:B5:C6:F5:05:82:E1:8F:F5:DA:CF:75:34
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB848ACA1ACFD751B7B3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c873c39-0009-33fe-9665-b6733a12124e.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1004:b240::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:84:8a:ca:1a:cf:d7:51:b7:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a3ba103d-3cfa-4929-aab6-c94c610f30e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:37:f4:99:30:dd:28:f2:1b:4d:a2:c8:85:
60:5e:d6:3b:5a:11:1c:7e:9b:8d:1a:fe:ce:27:82:
bb:34:3e:e4:df:5c:fe:7b:f1:4c:76:46:f4:93:4d:
59:37:40:24:79:f1:89:37:9e:72:4e:ed:fd:00:71:
b9:20:40:cf:64:73:b1:73:70:33:4d:38:cb:b7:f6:
f8:14:1d:25:fb:41:25:83:80:a5:07:56:72:d1:0d:
a4:9b:94:0b:53:38:66:4f:21:f1:40:b5:71:2e:32:
e0:45:85:64:a3:9f:41:4f:e8:f5:66:dc:0b:27:18:
67:aa:b1:76:b6:7b:dc:70:00:e8:2b:58:9a:85:d2:
94:e9:cb:65:b0:27:a3:c9:2c:be:d7:62:a3:68:d3:
cd:c0:d0:76:5f:59:22:fe:b4:e3:3a:73:1d:f6:1a:
d1:87:a1:51:0c:84:d0:19:02:c3:0b:39:7b:41:a1:
4d:eb:0a:68:a8:83:c1:11:38:98:ba:85:ab:f2:4d:
c3:c8:08:d6:13:09:6a:68:d6:9f:f9:7b:18:b0:fb:
18:da:04:4c:fc:00:b7:4b:df:d7:76:7e:5d:b2:b7:
ad:fd:aa:1b:a4:fb:6b:94:c6:6a:09:ad:24:de:93:
d6:af:0f:7e:1b:04:80:0a:47:b9:e9:21:b0:00:01:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:C6:E3:29:83:47:6D:B5:C6:F5:05:82:E1:8F:F5:DA:CF:75:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c873c39-0009-33fe-9665-b6733a12124e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1004:b240::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d9:07:1a:c5:5b:ae:2b:14:35:3a:d2:32:14:c0:a0:26:62:
aa:34:b0:ae:9e:46:39:5c:aa:f2:94:01:b8:7d:50:59:16:e1:
4b:88:1f:28:01:84:97:c3:db:4c:fe:e4:70:b9:5e:c7:d6:99:
8f:ee:e2:00:bf:e1:23:38:ab:e1:be:64:7a:ad:b4:98:f3:93:
a3:f5:f8:8b:fb:87:fa:b2:03:ba:55:77:d1:9d:27:8b:a4:c2:
4f:2a:1c:79:70:c0:e1:6c:51:7d:ca:c1:78:53:eb:46:ed:5d:
97:cc:dc:9d:94:51:a1:78:55:50:13:9a:da:f8:53:9e:29:d8:
9d:54:d0:8a:9d:18:59:91:6d:d4:3d:50:2f:64:fa:4d:79:1b:
82:c0:a7:fd:e3:4d:76:71:cc:ba:70:3c:61:86:f1:53:e1:ae:
46:52:13:6f:32:4d:b3:dd:5e:f6:f2:85:fa:b1:fd:1a:85:e2:
04:f6:fb:e8:7f:e9:fa:22:3e:60:8a:9b:64:5a:de:80:67:b0:
b6:0c:bb:0a:03:ba:97:a1:13:58:9b:1c:84:d9:73:86:4c:8c:
e4:28:6f:77:cc:2d:81:91:b5:34:c7:f7:b7:17:3d:d4:c7:82:
db:7e:bc:62:1a:b7:e4:cf:9b:18:bf:e4:18:b3:39:07:82:8c:
ce:4a:96:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:47 2025 by rpki-client