Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac9ecece-f62c-3140-b849-ead8ed200da3.roa
File: ac9ecece-f62c-3140-b849-ead8ed200da3.roa (raw, json)
Hash identifier: Qd+IIaVKSWoBulrXf0BZSRaYcOqJZdhdafibRiom76E=
Subject key identifier: 55:5E:19:42:7B:99:7E:74:32:B1:81:60:FD:D4:64:A1:7D:B7:85:F0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D0356AA1EC02B6EBD980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac9ecece-f62c-3140-b849-ead8ed200da3.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100e:a121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d0:35:6a:a1:ec:02:b6:eb:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=e8420614-d70d-488d-a151-e841b944510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:9f:16:ec:da:80:e3:a5:b0:be:68:dd:ef:
b1:49:76:c3:e2:a4:13:6a:84:70:80:97:b3:45:25:
ac:e0:cd:f0:fd:2b:05:30:5b:82:58:e4:8d:7f:d8:
08:61:4f:d5:36:9a:14:f9:8c:59:36:ea:21:23:ed:
4a:cc:09:00:ac:3b:c4:f5:be:1a:69:b1:b0:a7:5d:
29:e5:3a:0f:fe:82:c2:0e:78:de:87:5f:7c:58:dc:
46:a3:63:eb:50:59:2e:72:6d:85:d1:83:4d:58:05:
a7:09:2a:86:58:e4:7d:cd:97:39:db:23:c7:fc:df:
cc:1a:a5:82:18:28:16:06:d7:b3:25:cf:5a:57:b9:
be:c8:1c:55:fa:ad:c4:9d:e6:a0:72:6f:09:46:ad:
5c:1a:5c:4f:7e:06:1a:43:d2:6b:a6:84:ee:d5:cd:
56:6e:b1:3a:bf:eb:ee:59:f1:62:c0:0e:c3:13:01:
78:68:5a:d4:3e:0e:69:bb:d3:de:c1:aa:de:6a:00:
c7:82:5e:97:6f:ae:05:58:81:cb:1f:e7:ed:41:c1:
11:d2:5f:bb:a8:17:1b:f8:e0:7c:de:84:2a:1a:6e:
5b:0c:47:e5:ee:99:0b:07:4d:92:ea:98:34:4d:89:
2f:2c:ce:e0:e8:84:eb:8a:59:d8:45:78:81:6e:c5:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5E:19:42:7B:99:7E:74:32:B1:81:60:FD:D4:64:A1:7D:B7:85:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac9ecece-f62c-3140-b849-ead8ed200da3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100e:a121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:6a:c7:32:cb:e2:a1:e1:65:19:77:66:fe:bc:48:1e:89:f8:
56:4c:b4:e2:d0:44:ce:fd:a8:bd:f0:26:97:2a:46:79:ad:d0:
f9:7a:f0:72:a0:4d:b6:b2:0c:b3:d4:52:39:53:96:d6:86:a2:
85:6e:fb:3b:bc:af:4b:8d:4b:85:86:09:f0:5f:04:3c:c1:ac:
90:40:77:56:c9:0e:94:c3:2f:ca:c0:bf:82:cb:ce:80:a3:f3:
e4:cf:31:85:ff:65:fc:8d:a6:62:a4:29:35:3b:bb:c0:30:db:
54:95:3b:1a:69:29:da:bd:06:d8:7c:ea:f9:d4:d8:de:bc:49:
a7:68:56:89:31:21:65:94:bf:e9:5e:7e:6b:38:52:c8:17:45:
f3:0f:f6:b9:c7:3c:a7:00:54:be:31:09:e0:4d:50:55:fb:4e:
0d:aa:69:fa:6a:2b:46:01:af:39:99:c8:a1:25:85:d1:e2:f5:
81:1e:11:1f:47:55:36:f0:c3:57:a5:95:9f:35:75:ce:1c:4d:
13:74:09:18:96:1b:34:a3:32:a3:4d:b2:84:df:a8:04:5b:46:
d6:6d:11:f4:0d:b9:2e:dd:0c:55:64:92:bb:56:de:c1:6d:b3:
b5:55:35:3e:69:9b:0a:f8:f8:83:6f:98:29:38:6b:87:ad:2d:
f4:44:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:54 2025 by rpki-client