Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aae04e5-23a1-3b3a-be57-4d5260a035a8.roa
File: 7aae04e5-23a1-3b3a-be57-4d5260a035a8.roa (raw, json)
Hash identifier: S2gP1KH6Vmquj4sQaHlJXZr6x0BhY0HLN6iFdMqbjiQ=
Subject key identifier: 73:07:AB:EE:9C:BE:7F:DA:CC:ED:D3:12:DB:C7:C0:58:12:CC:82:91
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584925B3B9A9B35B13AD3BFC6EFA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aae04e5-23a1-3b3a-be57-4d5260a035a8.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 6167
IP address blocks: 2600:1004:b2d0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:b9:a9:b3:5b:13:ad:3b:fc:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=ae5f7873-3908-4f35-b7f3-f363c9714a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:63:0e:c6:c5:2b:4e:1e:5d:3d:c6:09:fa:
fe:77:e7:5a:6c:55:78:bc:58:1b:b5:2d:68:c8:2a:
8e:63:c2:6d:0b:68:9f:d8:3b:f2:35:3d:e0:48:67:
05:92:e3:b7:a2:38:5a:76:74:2b:c7:16:fe:8d:4a:
26:c9:dc:a9:01:da:4a:5a:3c:a4:0e:40:ab:a7:a4:
40:00:63:59:5d:5d:7f:8b:e8:e4:3f:48:d4:9e:a1:
3a:d7:ff:e2:bc:8d:06:ad:17:e7:a7:5a:0d:e8:64:
aa:c3:e5:dc:e3:a3:2b:74:ed:ea:29:5b:e1:4f:f1:
45:dd:79:b1:82:b8:31:1a:06:03:04:db:e7:d1:df:
4a:43:17:b6:9f:2d:db:10:3d:cd:32:28:28:6c:e8:
c3:9e:c9:85:67:e8:11:2c:7a:50:23:0e:b2:1a:33:
c1:cb:50:44:d3:f0:98:2f:9c:a8:9e:c1:a8:52:6a:
af:cd:4a:1e:a8:34:bd:bf:56:81:93:5a:f8:7d:0b:
f2:8e:6b:63:9a:e9:20:ff:67:e6:89:98:44:72:28:
a6:2c:fd:82:b3:29:72:fd:84:46:fe:fe:0d:dd:50:
52:13:e4:c6:fd:7c:00:64:dd:01:70:05:77:5c:2a:
af:88:81:6b:82:d1:4f:ea:f6:c5:6a:7a:65:cc:3c:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:AB:EE:9C:BE:7F:DA:CC:ED:D3:12:DB:C7:C0:58:12:CC:82:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aae04e5-23a1-3b3a-be57-4d5260a035a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1004:b2d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:c6:51:2c:6c:eb:1f:94:a2:16:db:13:d5:95:8c:be:ca:fc:
22:97:42:30:71:2c:8b:17:7d:af:8a:4e:31:e7:ba:ac:ae:a5:
33:ee:c0:b1:28:c4:0e:74:7b:25:69:df:61:82:ed:30:af:6a:
6f:f6:02:2e:3a:8a:dc:06:4f:60:c3:b0:98:a9:0c:0a:dd:38:
36:d9:e3:3d:ee:58:4a:9e:54:d6:37:bf:0e:c6:f3:e9:56:a9:
a4:1d:f8:8d:60:5c:1c:0a:e0:f7:20:6e:bd:2a:8d:24:e5:b5:
38:03:fe:7e:81:fe:3d:c3:62:4e:75:6d:7e:be:3a:43:90:1d:
f9:87:0a:63:8a:06:da:29:f4:3e:a7:3f:56:32:38:a3:ca:b1:
8b:63:d6:7a:4c:f5:58:6b:39:d7:f6:6b:13:5e:ad:36:44:d1:
0e:00:37:0d:af:b8:1c:fd:5b:4a:86:30:a6:ee:c4:44:7a:16:
74:2e:8f:a1:eb:7a:d6:92:2a:f6:20:c6:eb:74:f1:ff:f7:f5:
26:7d:a6:a4:12:c9:ae:65:67:6f:a8:dc:66:f2:9a:88:98:90:
23:f9:f5:01:2a:3b:ab:78:cd:a8:c1:1b:2e:48:ab:1a:81:7a:
96:bd:ff:2e:98:56:a0:66:97:d5:10:30:fa:67:16:fd:e9:e9:
a7:cb:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:28:35 2025 by rpki-client