Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
File: b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa (raw, json)
Hash identifier: HEB4rITpppzO/uWyNtlXIh76dxVF3mO/dlmNz3tnuX0=
Subject key identifier: 58:64:D5:93:5A:2C:3C:4C:33:65:49:C3:3E:22:62:6D:63:30:E9:F2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848C41B82A289B28553634F62C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 6167
IP address blocks: 2600:100c:b298::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:82:a2:89:b2:85:53:63:4f:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=f42f370c-a41a-424d-ba5b-e925606e2d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:94:bd:a6:50:56:ca:aa:bb:36:84:cf:03:
12:53:70:23:c3:ae:2f:4a:c9:c9:c5:d2:1f:81:e0:
fc:5a:70:d6:7e:3a:b3:33:e8:aa:06:fa:33:88:cb:
f1:94:a0:df:8a:c6:f3:74:1c:e1:19:6f:be:25:1e:
03:79:25:b9:5f:72:82:08:66:97:78:10:57:aa:c2:
49:44:1f:c8:aa:ff:96:7e:d6:69:d9:57:a3:cb:1b:
cd:62:c2:09:77:bd:bd:5f:5a:8f:8a:4d:4a:cc:ba:
51:fc:d9:1e:b6:fc:04:65:d8:69:fc:d2:4f:2f:ca:
8b:d4:54:d3:ca:53:00:dd:07:86:21:9e:be:78:d4:
ff:cb:b1:27:2e:e1:86:52:94:ca:e0:b5:8f:de:1c:
bb:52:21:1e:49:74:9b:c9:86:e8:46:e1:d0:ce:01:
b4:50:f4:20:b3:2f:0b:9f:7d:7a:f1:5b:6e:d4:e7:
3a:1a:b6:a8:da:ab:9b:3b:71:da:f1:6a:57:4a:50:
f2:26:1e:a6:82:ac:f9:6c:f9:37:18:8f:c7:c1:52:
fc:e2:4d:73:d0:f2:9b:d7:9c:5f:42:54:1e:7a:dd:
bb:4e:0a:3e:f0:96:68:bd:1e:34:52:16:bc:da:ed:
f2:39:6a:e0:79:5b:be:cf:5e:2e:c8:04:b9:90:27:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:64:D5:93:5A:2C:3C:4C:33:65:49:C3:3E:22:62:6D:63:30:E9:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100c:b298::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:5f:58:fa:b6:ac:2d:9e:7b:11:72:3e:1b:e2:f4:21:52:3f:
b3:72:bf:f7:f1:0c:4a:80:34:3f:2b:d5:83:92:6c:1d:d9:a4:
44:21:3b:79:55:5c:21:e6:6b:76:1d:69:4d:71:f7:85:01:9f:
37:8f:0a:28:a1:c8:d9:31:50:ef:2b:5c:b1:5f:00:6c:0b:57:
a9:dc:a9:a7:9d:54:c4:36:9a:e1:7c:c1:06:f4:d3:ae:15:82:
34:fd:14:c7:95:75:79:f2:61:99:41:1b:ca:ca:84:da:1a:ad:
a7:7e:77:a0:9e:a8:83:d3:71:71:8c:34:fc:61:ad:9f:1a:06:
95:3d:95:43:d8:c9:c3:88:70:cf:60:93:d9:5c:48:08:f5:ad:
e9:74:3e:94:1e:14:b8:62:c0:e9:ea:41:b9:b6:0b:76:17:7f:
7b:6e:89:ff:c1:94:a4:46:8b:92:7a:42:e7:78:d0:a6:a5:17:
c8:f9:d8:2d:68:f1:12:9d:f1:34:83:c6:39:6c:7b:b4:ed:70:
1c:21:4c:da:3c:20:dd:56:29:47:40:3b:4d:f2:84:18:f8:6f:
85:70:34:ab:d9:e1:c1:e6:ba:44:65:86:db:f3:6a:89:24:7c:
28:96:28:a2:2a:d2:7a:40:0a:75:3f:ac:cc:5c:4c:3a:4e:e1:
27:8e:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:47 2025 by rpki-client