Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa
File: bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa (raw, json)
Hash identifier: gnoWAi1qJ0WMG+SU8RFQXkANA+gygOxE+dpAReiCqeo=
Subject key identifier: A3:7C:95:D2:09:80:E7:DC:2D:29:1C:1F:EE:55:5A:7F:BF:BA:A4:35
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB855248B4154AF92EBB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:b1c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:85:52:48:b4:15:4a:f9:2e:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a3d09cfb-dd98-45b3-8a39-be2f31786b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:f0:90:5c:36:99:f8:65:d2:df:04:06:fa:
3e:5b:ac:5b:24:fc:57:a7:f5:04:78:9c:43:d7:b4:
91:72:1d:77:63:95:29:4c:a0:b1:86:02:b7:e3:85:
9e:fd:2b:13:7c:df:43:f5:2a:62:71:5a:fd:00:2d:
a3:53:59:0a:95:79:9a:60:b0:4c:92:4d:6e:e0:f3:
e4:af:6e:02:35:94:5d:8c:40:77:42:b5:d8:16:48:
a7:f0:48:5c:d7:49:2a:7c:e0:52:20:99:2d:a5:49:
7b:39:d0:e9:03:0d:41:4b:84:fc:76:58:13:78:59:
01:9f:65:42:34:5b:01:62:bd:c3:03:69:fa:8c:66:
19:01:cb:f1:c8:f6:79:3f:15:10:ea:e3:e6:8e:0a:
27:f5:f2:76:9c:f2:84:0f:18:c2:2b:41:fb:ac:30:
3b:a5:5b:eb:82:e2:a4:fb:92:dd:7e:24:0e:0e:b5:
14:d8:93:7a:dd:55:98:66:8f:b1:72:dd:ee:0d:26:
38:09:a9:5b:16:5e:a0:38:8d:9f:e2:f1:9e:87:ef:
c8:ff:1e:49:66:e8:b4:91:14:0d:27:c9:51:f1:29:
27:2e:85:37:7a:20:0a:9d:cb:d1:44:ec:40:5d:76:
29:f8:c1:68:81:a1:96:5e:2f:bf:fa:2f:1a:61:17:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:95:D2:09:80:E7:DC:2D:29:1C:1F:EE:55:5A:7F:BF:BA:A4:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:b1c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:46:ce:7a:23:fc:1b:a6:8c:3f:34:77:12:b1:18:38:1d:8c:
96:60:b9:3f:00:47:1e:01:bc:e9:55:cf:58:a7:86:37:82:f6:
fe:df:7b:f4:22:28:a9:15:73:be:12:47:88:28:ec:98:42:09:
04:c8:7a:56:aa:ae:28:8f:d2:fb:0c:70:14:76:49:86:6e:26:
58:4b:50:d7:84:25:bc:29:05:c2:b0:d9:00:84:7a:9e:a3:c2:
44:74:bc:a4:e7:91:fc:23:cc:6c:0f:05:ea:c4:e8:64:63:5b:
1a:80:84:2a:88:6b:d3:f3:da:47:9d:f7:7f:c0:5e:f8:51:48:
4a:0f:d6:77:7c:bf:7c:a1:b0:d9:c5:54:2f:5e:86:4a:ab:c6:
07:e7:73:c5:16:71:91:4a:fd:2b:29:42:ce:92:6c:8f:05:4e:
2e:3a:ab:7a:2f:18:a0:25:a4:59:85:57:ba:47:03:e8:a5:9f:
db:cd:7c:8e:f5:bd:90:11:bb:b0:3c:74:a0:18:ab:a3:ba:f0:
c2:ba:70:92:0b:73:b1:8e:b4:2f:34:da:70:75:13:d3:e1:59:
81:dc:e6:3c:fb:66:d4:21:3a:6b:d9:00:ef:27:53:7f:32:41:
cd:f3:87:c8:89:94:cf:7b:d7:21:25:39:16:60:85:51:53:4b:
6f:c2:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:56 2025 by rpki-client