Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7183734-25b8-3e28-b68b-46c6b01fc88d.roa
File: f7183734-25b8-3e28-b68b-46c6b01fc88d.roa (raw, json)
Hash identifier: vFIq84b9LFGeAxUcibIkYyGdpY2qPhmO8F9VPTl5fJo=
Subject key identifier: 70:7D:C9:0D:44:4C:97:D6:4F:D1:A1:0D:2B:72:DC:8C:25:23:E7:72
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB4E957F704399E59A61A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7183734-25b8-3e28-b68b-46c6b01fc88d.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1002:b170::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4e:95:7f:70:43:99:e5:9a:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3722bd46-3d77-432d-9e23-74f774ecb0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:52:94:c0:1f:ec:e8:c0:44:8f:47:3d:e8:37:
e0:f8:46:b4:d4:88:b6:0a:b2:6b:fa:52:bc:15:18:
bd:b7:27:1a:b4:16:62:a5:6a:5a:51:c5:95:00:1d:
22:b0:b1:e8:00:91:ce:f6:b3:b7:ab:25:08:c4:c3:
39:77:15:2d:29:c5:3e:68:51:9d:18:7a:98:c8:46:
8b:7e:c6:4c:70:49:d4:75:50:d8:92:58:e1:f2:ea:
2f:b9:d3:10:9b:4c:42:34:b4:92:21:1a:ee:20:9f:
0f:e7:bf:3a:50:3a:92:51:31:a0:75:b0:f7:3e:0f:
88:3a:fa:5b:30:d2:4a:5c:2d:23:28:a5:94:a4:0e:
dc:59:75:48:5c:4a:96:6b:07:06:2e:3f:60:ce:ea:
b0:39:b4:14:6c:61:3c:1d:71:1d:10:37:31:46:8a:
58:c9:33:80:c3:4f:e0:06:55:8f:33:9d:00:2d:8e:
cb:04:d4:89:61:2d:ec:3a:ea:f1:5d:35:22:ae:f3:
32:18:2a:fd:2f:d8:8c:90:90:81:fa:6f:8b:0d:7a:
81:a4:45:04:39:41:40:5f:31:6d:fd:8c:fd:48:59:
1c:37:e6:91:85:ff:07:37:bf:65:8d:ec:21:e8:f6:
b2:4f:e2:1e:57:4a:ba:94:fb:00:e1:9f:2b:46:00:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:C9:0D:44:4C:97:D6:4F:D1:A1:0D:2B:72:DC:8C:25:23:E7:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7183734-25b8-3e28-b68b-46c6b01fc88d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1002:b170::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ff:fa:02:d0:49:7b:d8:c3:37:4c:6d:2e:e0:b8:2b:dd:48:
51:5f:f0:0c:51:7b:7c:c4:53:3c:44:60:19:5f:60:87:ae:d1:
5a:54:e7:c1:4f:60:9e:d1:18:48:42:00:e7:8b:64:74:66:4d:
e8:79:95:8e:15:64:44:a9:9f:5d:fd:fc:69:e5:c5:2e:c9:e8:
9c:f5:27:a4:c7:62:41:8d:89:e2:f5:a6:50:d0:98:af:c4:cb:
13:c1:6a:a8:15:6c:9d:a5:ef:21:9a:02:c1:ac:10:e2:b3:3d:
3e:ee:6b:8a:9d:2d:93:41:da:5d:f8:ec:f1:6e:94:96:57:0b:
1d:aa:a1:28:7d:8c:a5:13:e9:33:9d:57:f4:62:14:4f:34:ac:
4d:6a:ec:1c:79:f8:43:a2:9e:86:ad:a1:3d:d0:a5:c2:0a:1a:
7b:73:43:16:c4:53:7d:3a:f8:76:28:a1:07:a8:ab:38:03:d3:
7f:89:7f:05:eb:89:5f:c1:13:1c:f4:cc:c8:83:52:2b:86:4c:
22:9b:b5:ba:ab:d1:9e:41:b3:01:d1:db:a9:05:03:20:f2:80:
2c:9e:7a:47:83:d8:f5:54:db:a5:9c:eb:73:81:17:3c:d2:f0:
49:c1:82:c6:99:2d:35:ac:04:a9:c0:ba:89:44:5f:08:25:e8:
4a:bd:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:37:33 2025 by rpki-client