Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1570f0a6-9421-31eb-bccd-081186f1b205.roa
File: 1570f0a6-9421-31eb-bccd-081186f1b205.roa (raw, json)
Hash identifier: OAOErvgIXOTNcvq7mtVcCEpIvWHnaeNRcz55bR7eCh8=
Subject key identifier: 8E:34:C0:0C:DE:34:72:2F:5A:FF:D2:C0:17:BF:38:7B:37:C8:AA:AE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696071EC60A42989FDC67220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1570f0a6-9421-31eb-bccd-081186f1b205.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1010:a121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:71:ec:60:a4:29:89:fd:c6:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=604022fa-f55f-49db-bfaf-89573c4cac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:c7:37:f7:e0:d6:3c:91:cc:2c:ca:4b:30:
30:0d:ce:f9:b9:01:fe:71:bb:19:75:8d:e8:80:dd:
c3:4f:04:b0:4e:b6:57:0e:de:b9:04:dc:32:a3:d3:
e4:01:41:a1:09:bf:d1:c0:af:99:26:35:5f:12:84:
ea:6c:1a:69:41:46:b9:54:3e:5a:03:90:96:ba:fc:
89:80:71:7e:ae:61:f9:5e:a7:3a:01:db:fd:3e:e1:
80:c4:0b:cb:88:bd:7a:4c:4d:cd:d0:a6:ec:62:09:
ab:a7:56:87:6f:b9:e4:70:31:0a:91:e8:70:4d:1d:
71:b5:1e:35:d5:e0:8a:ff:5f:5b:a6:b2:fb:69:89:
1c:69:0f:25:81:68:29:50:15:8a:b4:13:0e:7b:cc:
8f:32:ec:a3:d2:76:c9:84:d1:04:3a:12:8c:00:16:
7b:7e:c4:a9:c2:d1:a5:c8:8f:67:11:20:13:33:db:
c2:99:bc:22:d5:e9:5c:34:6c:de:94:19:1f:92:1c:
b9:75:80:c1:dd:c2:ee:83:1d:34:33:fb:bb:5f:72:
ac:66:44:3f:22:c1:6d:e8:13:d4:59:1c:bc:55:fc:
9d:db:01:d6:27:8a:8e:9e:ac:76:4d:db:d8:36:c0:
95:f9:43:a2:1d:ae:c4:0d:b2:06:0d:1f:2f:9f:6c:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:C0:0C:DE:34:72:2F:5A:FF:D2:C0:17:BF:38:7B:37:C8:AA:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1570f0a6-9421-31eb-bccd-081186f1b205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:a121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4e:4b:9f:53:98:84:95:27:74:56:7a:00:33:08:69:04:5f:
44:d8:58:79:9c:89:71:b8:e3:c9:8b:c6:bf:eb:8e:2c:72:93:
74:05:71:04:44:3f:17:a6:2b:cf:6d:ce:a2:58:7b:80:a4:af:
28:67:68:d5:c5:dd:1a:13:b3:b0:3c:02:46:06:89:06:5e:72:
82:7a:97:15:2d:05:65:bf:d3:07:86:9a:6d:b3:7c:b2:37:7e:
09:84:c4:64:68:bc:dc:d5:af:16:27:d8:60:c7:ca:cb:38:a0:
bb:96:7d:f4:4b:cf:00:15:05:73:63:e9:51:5b:3d:d3:57:d2:
6c:ca:4b:28:1a:9a:33:3c:e1:f6:c2:6b:1d:65:77:e4:1d:c9:
70:d4:85:fb:19:23:a6:18:a0:df:7d:13:d0:64:44:6c:74:35:
f6:c2:4f:00:27:8f:df:e3:fc:89:7d:32:7f:45:43:d7:00:af:
35:76:f4:ba:74:f8:d9:7d:69:d3:2b:7d:0a:0c:00:7d:63:77:
7a:20:18:a4:93:ff:4d:45:5b:f7:04:76:85:57:bf:5d:9b:4f:
9d:d7:1d:5c:ec:3a:2c:b1:cf:03:9c:b6:52:09:e3:50:2b:70:
a9:28:fe:0b:06:75:c1:b0:2f:5f:e6:b7:22:81:5a:46:c9:d8:
e2:19:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:10 2025 by rpki-client