Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
File: a414a711-0dfd-3eff-a9ae-62813658b1ee.roa (raw, json)
Hash identifier: JBAwr9V7/kSREx7Kk+RMeUg9wC4lIlJ9YK9o6Pth7+Q=
Subject key identifier: 9F:A6:97:2B:D3:5A:65:0E:55:D5:30:2B:41:D9:48:2C:C5:93:BF:C5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB852ABB19D5A58A867F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1004:b300::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:85:2a:bb:19:d5:a5:8a:86:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=e266afd8-7096-4619-a2f4-8d395a83fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:41:2e:b7:3d:6f:01:ab:6d:45:f6:d8:a5:
2d:9c:33:5a:23:b4:18:fe:f1:70:b0:aa:77:c0:9a:
c1:fb:ee:93:be:f5:7e:ce:3f:c7:22:9b:5a:58:78:
50:26:27:12:29:62:f1:62:69:1f:88:9b:d3:32:16:
05:db:8e:d1:45:0a:7d:bf:b9:8a:b7:91:78:62:b6:
ae:b0:7b:f3:5d:2c:8f:37:3a:4e:75:42:9f:20:a2:
b7:2a:08:7d:93:8b:ec:ca:75:98:41:b5:08:b1:a3:
99:43:28:5d:d4:41:9b:23:67:0f:5b:c1:89:1f:8f:
01:49:28:97:5d:07:65:ac:4b:ac:1c:d0:1f:bb:ea:
0f:23:70:a9:8c:f5:3b:f8:e9:0f:28:c0:a6:ab:74:
4d:2c:a5:23:26:e0:f5:49:69:0e:3e:7a:39:3f:f2:
0a:af:bc:45:c9:ab:7a:09:12:b2:b2:ad:38:9c:b1:
46:ee:d5:e5:f4:89:ef:87:bf:c5:81:2c:6b:33:7f:
00:a8:7a:30:18:c9:6b:92:cc:72:26:13:85:91:fa:
38:14:49:8e:d7:21:f7:4f:de:88:c1:93:e8:74:b2:
09:51:4b:e7:98:c5:a1:26:d1:70:c0:4a:fe:bf:ee:
76:6f:95:53:9a:88:87:4b:81:5f:ee:5a:f3:60:c7:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:97:2B:D3:5A:65:0E:55:D5:30:2B:41:D9:48:2C:C5:93:BF:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a414a711-0dfd-3eff-a9ae-62813658b1ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1004:b300::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:2b:a5:d6:6f:3b:c0:2b:03:b6:ce:47:b8:16:ba:1c:0b:6c:
b8:b3:51:26:80:ea:d3:bc:39:36:10:d6:91:bb:8c:2d:c5:9e:
00:1a:da:74:c8:c9:9e:d7:a8:66:9b:5e:b5:23:54:08:fb:86:
38:64:4b:6f:6f:48:2c:a5:8b:a0:48:d9:c2:43:26:ac:15:84:
29:ec:51:ad:20:f8:7b:cd:ad:ea:66:bd:80:ec:7c:17:76:e7:
8f:96:42:3d:79:79:1e:57:25:a0:f7:9e:ad:9f:51:c4:0d:14:
9c:57:50:51:e2:8b:aa:39:f3:66:6b:2c:1b:ca:56:78:82:41:
3e:0e:ce:87:a2:cd:42:58:19:2b:fb:39:a4:ae:7e:31:41:7d:
1b:09:b7:8b:f5:93:0b:f6:69:d0:b9:18:ac:1c:62:53:8d:a7:
66:3c:ba:22:2e:3f:f3:bf:ed:c9:92:f1:a0:fc:e1:c6:60:2c:
00:fe:d5:a9:43:9b:f1:58:2c:0e:cb:d0:4b:10:bd:4a:fd:fe:
54:29:57:8c:4c:69:e0:d5:e1:85:57:44:3b:67:7b:74:3e:0b:
15:6f:5d:9f:4a:ad:5c:87:7f:10:09:d2:ec:6c:a2:ea:76:ef:
58:84:73:96:fa:87:a4:63:2a:b6:d9:af:76:0e:ab:c0:e0:ee:
eb:17:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:21 2025 by rpki-client