Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0bd9b29-1eec-36ed-9153-3495c075a90e.roa
File: e0bd9b29-1eec-36ed-9153-3495c075a90e.roa (raw, json)
Hash identifier: K10MmWIC5PagqKU23lwqQsPM6Tk3KcXbT+q0lt1SAF8=
Subject key identifier: 71:3B:1C:EB:16:EC:6E:8F:53:4F:4C:AE:3C:25:5A:61:6A:0E:B1:58
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7B4E2C326C9E4088B300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0bd9b29-1eec-36ed-9153-3495c075a90e.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1000:b020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7b:4e:2c:32:6c:9e:40:88:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=dd38dd33-d5b9-4a8c-9223-3f47c8c012c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:ef:4a:9f:e7:15:3e:aa:9d:7f:c0:92:e3:
f8:27:10:b8:45:69:7d:3e:dd:2e:c4:9b:2a:78:3f:
ad:53:ca:bd:a5:61:bb:d6:ec:f7:db:84:6f:21:6d:
31:58:07:24:cc:11:32:08:cc:67:fb:e7:86:4b:fc:
fe:88:27:66:54:86:de:22:88:f9:c7:79:1b:57:57:
4d:a1:32:e5:2f:90:83:46:e6:26:0f:bd:df:ce:69:
d9:e8:5e:2c:b5:3a:51:6c:7e:d3:91:6e:39:45:13:
c1:ce:ea:ca:b6:45:55:50:ac:cb:4f:55:f4:e2:89:
d4:b8:d9:11:e1:8b:80:6b:6e:07:3b:cc:35:ae:d4:
be:a1:32:db:fc:0c:f5:f9:7f:b4:c8:86:7f:d4:95:
98:05:66:36:e8:d5:72:a6:c5:3a:27:11:f4:66:46:
bd:69:94:f4:2e:3f:85:55:a3:d1:96:34:79:4b:df:
3a:b2:3a:cf:e6:b9:2e:ac:af:78:13:91:c2:26:97:
bf:bb:4f:c0:43:73:88:fe:75:39:0b:1c:f2:ea:a2:
e9:b7:df:09:07:fd:78:9d:69:4b:8e:ee:c6:f2:53:
92:d8:3d:15:0b:b4:66:3e:53:01:b2:47:a4:1d:1c:
0c:c1:08:c4:90:d5:90:15:ec:d8:22:a4:14:0a:18:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:1C:EB:16:EC:6E:8F:53:4F:4C:AE:3C:25:5A:61:6A:0E:B1:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0bd9b29-1eec-36ed-9153-3495c075a90e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1000:b020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a6:38:d2:70:40:c4:6e:e1:a9:7c:71:8e:97:10:37:ff:3f:
32:92:b2:6e:39:ad:58:a3:22:4e:14:8f:b6:27:bf:70:86:55:
9e:9e:2c:8a:f9:00:63:45:4b:b1:ec:68:4b:da:96:0f:26:f3:
3f:17:55:69:cf:40:6b:7b:10:49:53:1e:b2:9e:6a:8a:c9:39:
03:ab:26:67:d6:7d:f0:b3:ad:ee:d4:8e:30:62:93:d4:da:f9:
f1:bc:d3:b5:80:e7:31:08:8c:37:b9:d8:63:9d:0d:9d:2f:e2:
8b:ee:b9:5a:b7:71:c9:e4:6f:33:d0:a5:80:2b:9c:d1:f0:a9:
56:07:06:7d:3c:e3:2f:10:68:91:6f:73:7e:9a:af:57:5b:ba:
11:c9:3a:af:ed:78:40:e1:67:83:88:4e:9e:4b:0c:d4:f7:c2:
53:3f:13:1f:d9:19:82:4e:5c:ba:d0:15:64:d6:ac:6c:51:60:
89:0e:cd:63:3a:dd:cb:6d:d5:2c:03:e2:fd:8b:a6:31:d7:81:
aa:11:10:fe:88:1a:12:85:ca:80:62:bc:e4:57:0e:81:65:e9:
e6:86:2c:69:e6:b6:8e:a7:23:6f:60:f9:ca:ca:3c:2b:f9:42:
46:bf:40:73:c7:9b:10:f7:2e:91:d4:69:41:05:36:51:da:70:
3b:34:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:19:29 2025 by rpki-client