Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa
File: 9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa (raw, json)
Hash identifier: 2hIXIHDFM0OKol31HPcE4t0KRsDBiEilbIEyhDp9YC8=
Subject key identifier: 56:CB:1E:9E:F9:B7:9C:2E:8C:52:0B:CE:9F:50:2B:57:75:97:7F:19
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584949FEA7BF89EA164E5D01ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 6167
IP address blocks: 2600:1012:b100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a7:bf:89:ea:16:4e:5d:01:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=101506d2-646a-4140-9923-4d22c5149428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:79:2c:91:0a:e4:3f:ad:a1:37:a6:65:cf:
f0:a8:08:8d:07:e1:a1:1c:4f:5b:36:7a:7c:11:6f:
f2:71:92:d1:37:cc:10:9a:a1:1a:c5:6d:6e:e0:b2:
74:5a:7a:82:5b:15:ae:2e:a9:36:83:99:1f:f1:1e:
95:85:d6:4d:04:88:2c:01:0a:9d:1c:35:46:1f:b6:
24:4f:b8:07:9e:4a:65:47:ac:9c:28:28:a0:72:a8:
23:a8:92:02:c9:af:f4:61:29:11:85:b0:cb:2a:62:
a4:5d:dd:4e:d1:a2:47:19:b5:e3:23:12:eb:f0:30:
a2:1f:20:8d:c0:6e:97:cd:61:59:14:27:8b:79:f7:
ed:32:3b:dd:db:f3:a0:cd:f9:12:06:b5:7d:05:89:
03:62:c2:a7:4b:c5:45:14:5d:42:06:72:bd:23:7f:
0b:e6:c0:e4:76:08:cd:e9:1e:6c:ea:81:c3:24:b9:
d6:e9:c2:12:16:96:62:e0:17:e8:09:57:b5:01:05:
8f:4f:ff:b0:9b:ac:c3:66:b2:02:81:77:c1:1c:93:
78:38:56:95:a8:6a:3c:bb:18:13:76:0e:67:ad:93:
1e:fa:ae:f8:6e:82:24:fd:07:a9:32:ab:ca:d1:af:
93:41:88:97:69:b2:fd:32:74:98:cf:fb:70:8e:46:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:1E:9E:F9:B7:9C:2E:8C:52:0B:CE:9F:50:2B:57:75:97:7F:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1012:b100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:3e:14:a5:76:c6:3d:28:55:1a:3b:4a:f8:40:3d:1e:ec:49:
81:e7:1d:5a:74:cf:46:61:59:e7:34:84:f8:41:4f:fb:85:fa:
0a:13:f0:2a:22:53:38:65:d5:16:e4:4f:a4:07:50:7b:f7:f1:
e4:45:cd:3b:82:4f:e5:65:0d:ac:f0:19:5e:3b:45:8a:6c:63:
aa:a4:92:22:86:ed:b3:63:a1:84:0c:78:df:65:56:55:46:08:
c7:8f:9b:a7:92:71:80:f6:ea:f7:b8:ff:a1:ef:d5:49:f0:3a:
67:84:ab:7a:9a:81:71:33:b3:43:13:2f:17:42:3d:eb:ef:66:
8e:72:69:30:c7:f7:cf:83:fa:ef:8d:a4:46:57:18:18:a4:35:
18:af:0b:4a:87:7e:fc:75:ad:ff:cb:a8:3e:fe:b7:e0:ff:34:
bd:a8:83:71:57:ca:34:34:cf:61:19:b3:de:43:b3:4f:13:a3:
fd:02:dd:1a:bd:a0:b7:14:8b:b9:c0:dd:1e:d1:a1:0f:cc:e0:
f1:00:2a:04:ea:f1:01:a3:ed:cf:97:82:ea:d5:61:82:29:f5:
96:b7:9e:dc:7f:58:e8:f1:de:c1:b0:0e:bc:4e:a7:2c:f2:f7:
85:a5:8b:b2:14:73:af:20:2a:f4:63:49:b6:cc:fa:00:74:f8:
d6:b7:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:33:07 2025 by rpki-client