Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
File: be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa (raw, json)
Hash identifier: WI+PHGtITdBReIDN/LTo4uQ/GIcJiAcHORyQEAsXqhU=
Subject key identifier: 93:5C:41:35:EB:13:D0:7D:60:F1:EF:5C:3F:36:7F:4B:3A:13:83:47
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400D4CCA8089EE0C63AE440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100e:be12::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:d4:cc:a8:08:9e:e0:c6:3a:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=89e2058e-ebc1-4753-94fd-f2f41f580cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:03:81:08:31:f5:47:cf:dd:b9:fd:56:29:
39:c5:69:f1:f0:d5:3e:fc:4e:54:04:51:d1:b8:49:
b3:52:b9:85:68:e6:1b:e3:e6:06:d6:33:b6:40:f6:
62:9b:da:eb:3b:a1:bd:c1:58:ff:34:c6:86:fa:e1:
6a:08:93:8f:8b:ca:e7:cf:1e:ca:ff:a3:dc:f0:1d:
62:6d:d1:05:cd:00:33:75:42:31:63:32:39:8b:bb:
1f:b1:d1:4b:1f:0c:c1:52:ce:14:4b:11:49:13:b5:
a0:55:81:f2:6e:50:b6:44:68:9c:17:1d:4f:28:13:
b8:e2:44:94:be:54:6d:42:d0:e6:16:76:c8:b4:9f:
de:98:20:a7:77:30:65:ce:12:3f:92:ca:d1:39:c3:
86:4c:1f:62:45:5c:d5:39:58:1e:29:99:73:14:29:
bf:84:57:bd:29:32:2e:dc:bb:89:5c:d0:d4:89:18:
88:cd:9e:ad:cc:24:b6:61:18:53:9b:c1:39:16:41:
4a:30:bb:3e:84:57:73:5e:63:3b:6d:b9:95:e5:75:
b3:27:a3:0f:b7:68:93:b4:16:de:08:2b:2d:a9:6e:
b1:83:40:f2:32:96:77:91:af:e1:4e:ed:c6:64:3b:
41:7b:e4:29:4d:9c:48:8b:75:41:1a:66:f0:90:84:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:41:35:EB:13:D0:7D:60:F1:EF:5C:3F:36:7F:4B:3A:13:83:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be41d05e-c4b5-3a43-b801-9fbe7417cd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100e:be12::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:74:47:64:d2:bc:eb:9c:36:17:59:9d:77:76:d7:4b:a3:d4:
8c:46:94:85:ac:6f:7a:5a:07:3f:fa:cd:d4:f6:93:c5:d5:4d:
07:c9:23:d3:72:5f:df:d9:61:30:6f:ca:17:8e:9c:4d:ec:d4:
e4:43:86:92:fa:b9:63:de:83:3e:79:32:2a:c4:91:cd:fd:59:
f7:36:cb:fd:ed:87:af:dc:68:2a:c4:60:0b:6e:88:f0:a6:da:
0e:a2:ba:7c:ad:10:de:4e:bd:f3:82:1d:2d:bb:6d:99:28:e6:
c3:f2:ce:48:81:2a:08:4f:d9:2b:37:2b:da:81:36:8b:23:ad:
9d:a5:33:6b:ed:23:b2:80:d1:37:31:1d:7c:45:9d:4f:3b:0c:
a5:46:1d:df:f9:9c:76:10:88:35:a2:8a:fd:a6:6b:e5:b0:8f:
ce:10:e4:2f:e8:14:15:e2:7d:0c:08:cc:cc:e4:6d:4d:13:75:
0c:46:ca:82:f8:be:34:92:17:25:9a:5e:d3:8f:45:35:93:0a:
d6:42:08:39:ea:49:2a:b7:6b:0b:85:fd:a9:eb:12:63:90:c6:
38:8f:b2:44:64:f1:bc:7f:fb:a4:eb:b0:66:e7:01:02:3a:bc:
3e:81:98:20:e1:49:45:6d:52:4d:08:97:8a:af:79:13:dc:3b:
27:cc:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:07 2025 by rpki-client