Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa
File: f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa (raw, json)
Hash identifier: +gOzg40/42MtJa3oXMrfd2efNGtA3XuTm3t3Wv3adiw=
Subject key identifier: 3E:D6:B7:60:5E:82:64:E5:F7:F8:1E:13:C0:7B:B8:41:75:C9:9D:57
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218436B431BBB104F0C97080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2001:4888:8032::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:36:b4:31:bb:b1:04:f0:c9:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=2aedbe0b-b7df-42a5-b71b-16f77205431c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:30:1c:12:51:33:40:8c:e8:ea:bd:8c:1f:
63:90:4c:b8:39:01:0d:c9:f2:f1:af:bc:0c:a4:20:
ba:cb:12:20:86:3f:60:61:a5:bd:48:a8:13:d4:1d:
a1:30:7a:61:5e:2d:73:6a:4e:62:a7:a0:85:34:16:
6f:e8:ff:ab:cf:20:ee:f8:7d:39:2c:6e:f3:a3:ac:
dc:04:2d:1d:5c:2e:32:ab:df:09:67:22:39:ff:92:
98:61:fc:ba:d1:c6:23:66:8a:66:4a:73:da:71:2c:
dc:69:84:1e:22:5a:49:52:7c:4f:83:4a:c4:26:fa:
58:2c:b2:6b:fe:5f:4a:9e:cf:cd:fb:05:e3:33:ac:
23:c5:1a:0c:a1:be:0d:fb:54:11:f5:17:b7:55:c6:
64:eb:90:f8:6e:8a:8f:20:13:d4:1f:14:2e:b2:b0:
7a:a1:49:50:87:e9:1e:7c:94:5d:f0:23:e7:2a:7d:
89:c4:1e:84:0f:8b:c3:79:4e:d6:f3:f4:92:9d:fe:
18:af:43:f1:e0:c7:82:80:bf:ec:af:d6:3f:bf:f0:
94:23:fa:a1:4e:17:3e:07:cd:01:69:e0:37:09:c7:
17:6a:31:b0:0b:1b:19:73:70:3d:93:3f:fb:04:9f:
7d:d1:88:a8:8f:2a:a7:21:a5:3f:3b:00:82:80:3a:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:B7:60:5E:82:64:E5:F7:F8:1E:13:C0:7B:B8:41:75:C9:9D:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4888:8032::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:56:d9:26:d9:58:e4:2f:3c:05:24:b1:fd:ed:09:ca:f1:d5:
15:b6:ea:55:8f:1c:47:20:c6:69:8f:9a:8f:ab:6a:bb:17:49:
7d:52:31:30:cb:53:33:d1:f0:7f:6a:bd:30:aa:89:72:a8:7e:
8e:91:52:79:51:f7:a2:53:66:7e:60:4f:1f:d8:a6:bd:58:8a:
a5:65:4a:4e:56:b1:f6:00:78:58:f4:0e:6b:1a:91:e9:78:d2:
c1:a5:b1:38:55:28:93:f6:27:13:04:a0:9a:45:e1:59:e4:11:
e3:a6:67:f8:b8:27:30:b1:51:b7:14:86:e8:e2:c3:e6:58:fc:
52:34:69:81:2e:b4:2e:7c:08:7b:68:3e:fc:36:5d:a5:09:e6:
0f:8c:a1:7c:3e:84:55:cd:13:3b:fc:ff:46:97:4f:a2:50:61:
e7:3f:94:05:5a:4b:8a:f0:9c:ac:80:4f:9d:39:15:8e:0e:29:
34:08:b4:e7:15:b5:fc:29:7c:d7:72:ad:0e:55:c1:39:61:f0:
75:85:02:4d:36:ae:f1:a1:48:38:e2:45:78:93:d9:37:d9:bd:
9a:e8:a2:61:b1:f2:b7:66:36:ab:e3:28:4b:8e:ed:83:e8:08:
48:a3:9e:a9:6f:a7:8f:5b:e3:12:1c:ac:9a:19:b3:5d:e4:18:
fd:64:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:45 2025 by rpki-client