Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa
File: f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa (raw, json)
Hash identifier: WawHJXZvPT9Uf7xHXOruuag1/i3IiRF7PXOGFQHj1d8=
Subject key identifier: 3F:B3:D8:7B:D2:ED:9B:19:F1:38:D5:86:72:09:1C:72:42:19:CE:FA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400E73E637F31365A11A880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100b:b0d0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e7:3e:63:7f:31:36:5a:11:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=de925e6d-06d0-48ca-9e4f-b195c4e2d254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:45:0e:be:52:ee:9b:ec:8a:9f:4b:67:97:
3d:9f:c6:e0:3a:e3:a6:53:85:87:61:0c:cc:ca:87:
56:35:cf:47:1e:6c:40:39:70:87:e6:cf:d8:c1:68:
7f:7d:2b:eb:e4:89:66:24:40:37:c3:34:49:46:26:
ae:7a:e1:6b:d8:6f:c9:53:de:6a:11:21:22:c1:23:
43:e3:9d:54:8c:b4:e7:76:f1:14:a3:89:63:b4:8a:
ac:4c:26:20:8f:e1:85:26:59:73:5a:e5:11:fb:6b:
7a:4a:73:cd:0e:e8:4c:a4:06:6d:82:29:b8:3b:8a:
50:07:bc:84:68:73:45:9f:f2:7c:28:55:8b:77:cb:
ed:59:29:6a:b6:d3:13:eb:1c:ab:0d:c6:94:c8:d6:
d0:dd:56:15:a7:da:5d:1e:c6:4d:ea:0f:d5:09:9b:
78:10:d7:5a:f7:6a:b5:38:e7:18:8a:36:a6:55:17:
f5:d2:be:8c:32:0d:2b:48:0d:2e:6a:1c:70:dc:19:
f4:1e:70:91:de:8f:ce:1b:b8:7b:f4:d3:56:cf:fc:
21:0b:ca:39:2a:8d:f4:ed:11:ca:69:b3:e1:f8:cb:
44:37:39:0b:2d:c6:b9:f8:be:8a:1b:ef:2e:01:49:
8d:46:68:68:5c:58:4e:85:d4:16:c9:b9:46:ca:7f:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:D8:7B:D2:ED:9B:19:F1:38:D5:86:72:09:1C:72:42:19:CE:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100b:b0d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:6f:fe:4f:c4:7d:9b:44:ba:5a:32:d3:94:c1:33:56:c3:b2:
70:07:61:59:5c:3b:df:92:bd:a8:b6:45:39:35:e3:01:20:0a:
68:23:cc:ca:b5:51:65:60:d9:63:e8:c4:74:7d:ed:21:37:37:
9b:21:8b:25:ec:aa:d2:7e:93:ae:27:d2:53:a1:d1:3e:31:dd:
b3:2c:a4:a2:14:d7:39:02:da:74:5b:d0:cd:72:5e:1d:fc:59:
a7:95:66:1a:97:af:fa:1d:a6:4e:57:ca:c6:21:89:54:95:4e:
31:e4:38:cf:b6:29:94:1d:54:67:8a:60:50:f6:aa:d2:32:12:
34:fd:c5:5f:8e:d9:00:57:89:74:e6:43:b9:29:35:7e:c0:4f:
98:46:14:cb:1d:87:4b:d5:ad:b5:10:37:47:8f:67:e4:0b:f3:
07:33:b0:f0:ed:58:6b:06:43:84:0a:c4:5d:90:bf:90:fc:47:
4c:29:77:14:39:97:c9:01:c5:f9:05:35:af:25:e4:04:4b:c1:
b1:17:c2:29:60:2b:f6:21:33:7e:28:35:92:1c:87:6f:3b:c1:
09:e4:83:90:79:a4:03:c2:45:c9:ea:46:91:9a:24:c5:f3:e1:
21:41:c1:a5:ad:d9:35:e0:65:13:97:ab:c5:46:d1:0d:09:86:
c5:f7:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:09 2025 by rpki-client