Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
File: 871eea0e-f873-37fb-b9d5-45136a056620.roa (raw, json)
Hash identifier: bMqts7p322x+TQOjUMtcJ1YULzTc7HAKcjcVoHiEoos=
Subject key identifier: D0:C8:5A:02:81:70:3C:25:00:AE:F5:5D:0E:DC:60:4F:5A:75:DD:E5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB81C16353941BC0010C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:b888::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:81:c1:63:53:94:1b:c0:01:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=78ac5f16-3624-4ae1-ba82-192866ed165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:00:1e:08:88:74:bb:e8:ae:ab:39:cc:2e:
5a:92:23:39:14:a2:71:b1:65:47:6a:30:4a:c2:1f:
53:00:b0:f2:89:d5:21:24:bd:c7:af:da:e2:e3:29:
a8:a0:29:d4:85:4b:1f:f5:16:de:ee:99:7e:e6:40:
91:e2:7e:c7:fb:5b:37:b1:11:4d:3a:cd:15:2f:7a:
28:4c:85:6e:50:dd:9e:97:0c:ea:29:6c:50:e3:cd:
7d:a2:86:83:1c:7c:13:6a:7b:91:d8:33:21:42:38:
33:a5:fb:0a:24:e6:4c:b0:89:ae:d9:67:3b:9a:4b:
0d:88:f9:c1:b9:18:4f:b0:9d:35:6b:7a:ca:07:cc:
cb:67:0e:25:70:0c:54:cc:13:bb:54:3c:85:a8:ee:
96:df:70:44:1e:84:91:91:98:28:d3:94:3e:62:61:
40:bf:3a:d9:93:b8:d3:92:9f:32:1a:9a:b1:e0:b4:
de:18:38:62:0e:43:4c:20:76:12:e9:6a:74:dc:21:
9a:1a:05:e8:c9:21:d7:94:d6:ca:eb:61:0e:12:6c:
b7:22:a2:a1:e6:5d:c3:04:df:0d:0e:d6:43:3b:0e:
05:05:43:46:69:9e:ab:84:8d:85:f4:27:08:f6:3d:
a5:41:30:65:98:75:c0:ba:8e:79:4a:22:95:c0:a5:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C8:5A:02:81:70:3C:25:00:AE:F5:5D:0E:DC:60:4F:5A:75:DD:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:b888::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:43:84:9d:ea:f5:c0:c1:a7:d7:44:f2:0b:4b:ac:f9:61:b1:
02:34:45:23:55:e8:9d:b0:2f:de:8c:fc:77:a3:01:4e:0c:82:
1e:4b:0f:3a:07:c6:37:5c:2c:11:39:a4:dc:0e:7d:1c:2b:ad:
10:5b:d6:aa:93:5e:c4:26:8e:52:d0:ec:02:ab:d8:5d:2f:4b:
48:df:96:05:9c:88:11:b6:f3:17:d0:9e:62:44:1a:1f:d6:9e:
a7:41:22:3e:80:f0:8e:af:f0:79:de:c2:a6:78:df:d2:dd:2e:
90:4d:2c:ba:83:92:8c:14:be:45:8f:60:6e:bb:6e:fb:4b:71:
a2:0c:67:db:27:2e:8b:9c:7e:58:1f:13:2e:19:1f:a8:e1:96:
c9:84:51:9c:4e:a8:55:9f:15:e7:8f:6a:d3:8c:c4:34:5f:13:
48:b5:7c:34:83:e8:d7:55:97:a3:1f:25:f8:9b:a7:41:24:25:
2c:e9:d6:49:d7:40:93:cc:d3:88:7f:c0:fe:42:b3:90:b1:d5:
d2:14:ed:44:d5:de:49:bc:0a:90:55:92:c4:d2:a7:f4:fc:80:
8c:91:a5:57:00:dc:40:00:ac:fb:44:28:a9:e9:91:d0:5a:98:
e8:51:e3:d6:13:0f:68:94:54:87:00:31:2c:59:a1:f0:6b:6e:
94:55:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:10 2025 by rpki-client