Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa
File: d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa (raw, json)
Hash identifier: rUe/ZzrVWe6mw6ZV2WcIj8/oVCxFW3yxKNbLQRXKer0=
Subject key identifier: B8:E4:34:25:80:B9:DD:C7:B3:BA:15:DD:6C:64:D8:5A:BA:FA:C8:EB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E7E899A50E8EE7D46380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100b:d010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e7:e8:99:a5:0e:8e:e7:d4:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=53a5b941-7512-457f-a5cc-22155414d21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:87:81:35:ca:e6:d0:2f:cb:02:63:54:ce:35:
de:9e:af:e6:39:8d:a2:c8:25:8a:28:ef:59:f0:17:
6f:9d:b9:b0:b2:d9:49:88:70:8b:5a:ee:90:a0:fc:
99:72:5e:0f:19:bb:58:c3:96:01:c9:11:be:52:cd:
96:63:0e:a7:05:b2:eb:54:73:da:37:94:28:c0:56:
bd:3b:7a:82:b6:c2:a6:8f:31:38:2b:db:62:06:48:
a7:5c:b9:2f:9d:3c:73:8b:3a:92:fd:6a:61:0c:8d:
f2:a8:4e:8e:05:c9:02:92:ae:98:19:b0:1c:7b:cd:
36:78:70:ce:cb:5b:ba:c9:90:e9:3c:1d:28:49:92:
b9:19:60:a3:5c:1b:26:ef:2e:43:fa:c5:0c:e4:4a:
96:5d:6a:e6:a1:92:1a:cd:d4:28:fc:0a:49:88:d4:
aa:8e:72:9e:42:e0:8b:24:f8:52:56:aa:1d:fc:d6:
4f:cd:d4:f9:6c:d6:1c:62:51:74:b9:0f:b7:a1:4e:
4f:1a:d8:a8:57:ef:19:11:34:82:86:15:79:5b:50:
c0:9a:51:45:d1:5e:81:15:72:74:44:05:1d:eb:46:
a1:64:20:cc:1c:73:7d:49:97:fb:62:f5:7f:82:12:
e7:f9:20:ba:1a:c8:5f:f0:49:04:9e:17:47:04:06:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:34:25:80:B9:DD:C7:B3:BA:15:DD:6C:64:D8:5A:BA:FA:C8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1b83aa3-ee55-3d2f-bf39-0cd9efff8bbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100b:d010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:f9:10:f5:de:c0:38:92:67:5f:f2:b4:7b:84:79:36:0b:ce:
6f:e8:97:3f:5c:63:6d:6d:99:68:5f:8f:95:d4:a3:76:34:65:
95:50:22:21:ed:3f:3a:de:31:2f:fe:05:75:e3:02:c6:a3:12:
82:11:b3:e2:8c:dc:78:c5:99:48:f9:8a:4c:03:16:9d:23:b5:
af:44:e2:89:b5:66:b8:fb:ab:4f:56:b9:12:16:40:24:a5:30:
86:a1:ad:79:21:15:50:74:c0:a1:d1:19:2e:f2:d9:1f:21:21:
99:15:df:51:dc:15:19:4d:9a:d9:ef:71:bb:f9:38:2b:47:05:
58:50:c3:12:fa:05:1d:c3:c6:21:0a:1c:f9:9f:34:d5:b8:3f:
67:5c:e7:db:0f:53:c3:a7:91:5f:43:05:a6:43:c2:90:65:fc:
05:86:02:ad:50:89:6c:09:6a:de:6a:a2:f6:78:8a:9a:16:0b:
c5:81:20:6c:3e:96:9b:27:5b:33:06:40:34:a0:a7:63:57:36:
49:2e:7f:e3:70:66:6d:f6:c7:ed:54:1b:89:9c:1c:ce:12:71:
78:6d:ce:5e:91:c5:40:00:18:50:a3:ea:d5:05:5b:d9:b5:12:
37:ae:9d:6c:7e:43:9b:b0:c5:29:b8:09:da:e7:dd:4d:dc:d8:
fb:b8:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:48 2025 by rpki-client