Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/158da650-d12c-345e-9b9a-c761b9a61a88.roa
File: 158da650-d12c-345e-9b9a-c761b9a61a88.roa (raw, json)
Hash identifier: yhWYXFVimUVL7aaDEAfub7lq+xzn451jXYj/xnBdDaw=
Subject key identifier: AB:32:88:02:8A:F5:37:6C:44:B9:24:97:87:3A:32:A3:67:23:E8:6B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB81EA1157F4E9376E8B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/158da650-d12c-345e-9b9a-c761b9a61a88.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:b8d0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:81:ea:11:57:f4:e9:37:6e:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=fcdf744d-41a3-4554-869d-4f32de939686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:55:5d:9b:27:2f:eb:20:cc:46:95:d4:7c:
85:9f:af:f3:bc:94:ed:56:4d:73:3a:47:b7:de:6f:
c7:c7:39:f3:4a:0a:2b:49:5d:34:d6:48:e8:ce:14:
4c:bd:82:58:d3:27:c0:24:e0:c1:d5:ac:f6:ae:e4:
83:e2:0b:d9:80:9a:87:1e:8b:07:57:2c:d0:7a:50:
32:99:0d:79:64:bf:c6:a6:0a:53:71:61:d1:c7:2f:
52:8a:eb:3e:8c:7e:09:ca:fd:cd:16:b6:67:22:3c:
50:a4:b4:c4:4a:99:1b:1c:45:9d:38:9a:ec:43:6b:
14:e4:6c:db:7b:55:58:d3:7e:45:8a:0c:26:cd:e4:
03:d4:44:58:5d:70:dd:e4:86:fa:13:42:73:03:f6:
5f:63:6c:b0:4c:0a:fc:59:73:55:0a:36:4b:05:c4:
b7:d5:02:77:fc:ba:a6:ec:c0:27:62:75:02:3f:44:
63:4b:10:81:09:38:62:3e:78:16:25:d9:fc:2e:c6:
8e:c7:a5:44:8b:1f:3f:97:d5:08:f6:b5:41:35:38:
76:1c:c8:4e:ac:e5:20:2e:01:dc:1e:5a:1c:10:18:
21:72:e2:63:da:00:c9:bc:b0:c5:e9:84:1e:e2:09:
b5:cf:8a:c9:87:76:4f:77:96:ab:1d:cd:f6:e7:5f:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:88:02:8A:F5:37:6C:44:B9:24:97:87:3A:32:A3:67:23:E8:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/158da650-d12c-345e-9b9a-c761b9a61a88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:b8d0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:41:77:3b:31:24:fe:79:15:fe:2e:74:bd:ad:03:76:d8:a1:
f3:3b:93:2c:c1:d5:c0:2a:1a:04:61:65:0f:4c:a2:bc:5d:b3:
8f:c1:ee:d6:e9:aa:7c:65:9a:8c:97:a7:7b:5c:8f:1e:29:72:
28:c4:24:8b:3b:45:8f:3a:c7:e4:c3:f7:b6:a6:b5:26:4a:5b:
17:0e:0b:8e:68:4f:7f:2d:3a:c8:c6:5c:19:fe:95:f1:59:1f:
80:16:1b:2e:26:89:7a:a9:0b:7a:a6:53:20:30:88:57:fe:d0:
e1:1c:f9:b7:4d:94:45:f2:ab:ed:fc:b9:c2:fa:a4:76:02:78:
47:58:51:de:62:3a:ed:95:df:8b:cf:a3:a1:f4:10:c8:48:0b:
ac:29:6e:b9:31:be:dd:c8:76:12:32:f3:96:5c:f7:3a:29:15:
e1:c5:57:74:37:76:65:0d:4f:e3:dc:0f:a6:2f:ec:55:07:69:
36:11:59:a8:a7:ad:29:38:6b:37:0e:72:13:87:9b:1c:e8:81:
8e:80:41:14:84:6e:d3:a9:65:c9:d3:36:ce:6f:19:cc:82:0f:
8c:e0:4f:b3:b4:37:09:3e:54:55:58:5c:70:5d:03:a6:ec:78:
ee:92:ef:b8:76:9e:bd:d9:86:20:60:0a:0b:ec:ea:0a:6d:62:
fb:ed:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:16 2025 by rpki-client