Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
File: d9c33ed2-5f22-34f4-993b-444164286790.roa (raw, json)
Hash identifier: oDlBoD0Z4DvSAXWWk2KL1R9Ufas7S96RShwy+yeHb5k=
Subject key identifier: A5:5A:0D:BC:92:05:3B:C1:21:9B:4E:E1:35:A0:B2:34:02:80:36:36
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB598FC512A4F6DA564200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:a030::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:59:8f:c5:12:a4:f6:da:56:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=213cde1c-7292-4a14-a6a6-35d8e0ec71ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:a1:df:41:cb:64:c9:81:77:ab:fe:42:33:
f6:b5:b1:94:f4:2e:bc:c0:6b:87:02:a6:bf:12:3b:
b2:a4:7c:3a:7e:75:1b:c1:09:a5:33:83:b9:4d:c9:
53:c5:b2:4c:5a:61:7e:9f:8c:25:c3:71:0e:96:d7:
b7:0b:0f:80:59:0e:e5:9e:45:5c:53:0e:4c:37:93:
55:3f:1b:e8:80:fa:43:42:3b:fd:0a:70:b4:a0:1e:
51:b9:a3:a9:52:7f:65:76:5b:b3:e8:c5:65:84:42:
15:5b:ab:af:c1:5e:15:14:91:08:43:b1:9c:4e:81:
bc:1c:d9:d9:b0:62:3b:9b:68:31:e2:ec:85:b1:36:
2c:26:e4:67:f2:f0:b2:c0:7a:d4:e2:5e:94:8e:2a:
7b:aa:09:29:02:33:e0:50:55:d9:41:0d:50:6b:f1:
b5:55:96:8f:8e:dc:ff:5d:d0:08:b0:51:38:c7:81:
40:7e:3e:2d:1c:b3:57:54:db:78:81:48:18:8e:06:
be:68:b7:f3:72:89:a6:7d:10:21:e9:18:81:6b:a4:
46:27:57:88:03:85:1a:4f:75:cf:f3:19:8e:03:f5:
f7:a3:04:fa:71:f9:3d:59:d0:a9:b8:9a:7c:da:a8:
a3:7c:45:ee:71:8d:72:59:af:a3:b8:9d:2d:3f:1d:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:0D:BC:92:05:3B:C1:21:9B:4E:E1:35:A0:B2:34:02:80:36:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:a030::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:1d:ba:5b:42:b9:fc:d9:b2:3a:1b:4d:e2:8b:bf:c0:3d:d6:
2f:bf:60:94:1c:4b:9a:19:40:e0:ab:8c:51:00:26:75:ad:23:
42:41:c4:ee:1c:ba:aa:1a:d3:6d:66:73:2b:51:db:a2:7f:e6:
fd:bf:28:a5:98:17:06:44:1f:80:75:03:e2:2a:95:70:22:ed:
c2:1b:55:85:9a:23:37:30:79:85:a7:b6:27:37:0e:6e:31:5b:
27:f3:42:4a:e6:b9:d5:85:47:e3:25:6f:8a:d2:c3:a8:6b:d6:
1c:91:b8:a2:64:12:2b:bd:84:2d:40:df:b4:cf:91:83:b6:de:
91:af:7f:a7:d6:b3:a0:c0:ee:d3:4b:3e:a1:47:41:3a:0d:84:
7d:c1:44:54:b9:87:fb:eb:3d:e3:4f:5d:21:1c:fe:41:32:c2:
7e:12:67:c0:43:3e:d7:b0:bd:59:c4:73:ce:c5:b1:fe:63:fd:
51:c5:8e:17:4a:78:0a:11:79:ba:9a:8e:3f:5d:02:4e:1d:0a:
44:c8:7a:69:65:05:35:9f:fe:78:94:fd:fa:9e:e3:4d:5e:c4:
b8:6b:c1:98:83:00:58:27:f7:d7:fe:47:15:9f:eb:6c:1e:25:
1a:98:71:18:ce:33:e7:fa:a8:94:68:c0:48:d9:c2:87:c0:80:
15:e1:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:44:42 2025 by rpki-client