Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b7cc76-c996-3888-bb17-8fdf289c420f.roa
File: 28b7cc76-c996-3888-bb17-8fdf289c420f.roa (raw, json)
Hash identifier: 4jLQpZPg7yDb/10FamtvomTjP6sL8Pzp2XRrRxTmRAI=
Subject key identifier: 58:6E:5D:2C:61:69:A4:24:3E:AC:02:25:5F:16:1E:BB:FB:43:BA:D9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960852E3D7D7693F1BEF490
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b7cc76-c996-3888-bb17-8fdf289c420f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1016:a010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:85:2e:3d:7d:76:93:f1:be:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=d892339f-eac1-447c-abe9-ac186d6eadf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:5a:2a:d0:f0:9e:15:17:c5:bf:e2:21:b3:
bf:d1:48:0f:f0:76:ff:6e:5c:ec:e7:bb:d2:57:ee:
da:88:e0:bd:f4:cf:38:13:60:e4:8d:6a:36:3f:c1:
a0:d7:ee:c4:ab:01:1f:1a:70:1f:6c:91:90:80:a1:
98:66:53:da:cc:c8:95:81:79:94:02:eb:8c:d1:c7:
d1:75:4d:81:d8:8f:46:85:15:6f:b1:90:4b:fb:c6:
c2:8d:d4:ad:50:d3:5d:25:9e:d7:5d:ad:87:bf:09:
8d:ca:43:37:aa:bd:93:9a:f4:ac:da:b9:cf:9a:86:
3f:01:d1:34:8c:d7:b5:0c:73:c1:a2:27:3c:d0:15:
7a:37:5d:f1:b8:1b:52:80:2f:98:ff:ca:94:16:de:
8a:45:d8:76:00:6d:b2:83:ce:8d:11:6a:13:66:c0:
1c:b1:f8:d0:7f:b5:81:f2:e8:d4:ef:1a:1e:21:69:
21:5d:7d:2d:b3:92:6d:02:39:82:83:21:50:6f:fb:
3c:bb:c5:d9:41:1f:38:d0:ea:97:5f:28:9a:c9:db:
89:bf:da:c3:b9:d2:3d:a5:41:3f:d9:c8:46:2c:7e:
7b:e3:80:ec:d7:55:81:37:60:1b:b8:ce:15:d8:8d:
7d:e7:9f:ee:8b:8f:29:ab:5f:0a:0c:ce:8f:8a:b7:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:5D:2C:61:69:A4:24:3E:AC:02:25:5F:16:1E:BB:FB:43:BA:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b7cc76-c996-3888-bb17-8fdf289c420f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1016:a010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a7:e6:c5:db:7f:48:a2:e2:10:23:64:a3:e6:e1:16:c5:16:
9d:01:99:35:5a:69:d6:2b:78:8c:6b:b4:9d:c3:63:56:e5:64:
0e:c7:a6:d9:e5:a2:dc:9f:61:2b:2d:2e:3a:a8:76:7f:9b:81:
43:c1:1a:65:55:7e:1f:47:bc:88:7b:25:2e:ec:40:3e:05:10:
3f:54:16:57:e2:91:fe:df:7f:8e:01:d8:2d:71:8d:e0:b3:7f:
98:ec:de:a5:a2:90:ee:ec:32:43:0b:27:4b:40:11:61:dd:5b:
c0:45:fb:fc:b8:45:69:0b:2b:8d:ee:62:ce:b7:2d:d5:05:7d:
3c:f3:70:6c:24:ab:20:65:b7:bb:04:c4:da:b2:45:14:3c:37:
17:6c:04:a7:9d:92:1a:b3:a9:0e:ac:bc:8e:cf:26:af:49:ab:
38:6a:fa:f7:da:74:c9:f4:6b:5f:58:ac:2a:3f:d9:c2:ce:61:
2b:64:c8:db:0f:ce:53:0f:a6:23:ed:fb:e8:21:fa:aa:a3:c3:
22:6a:48:c8:8a:4c:47:df:5e:ba:30:31:7d:3a:38:04:09:22:
b7:57:19:06:a2:f7:b8:84:b3:78:7d:1e:a6:98:e9:e2:5f:d9:
29:77:56:10:b1:f2:1e:b9:84:f7:34:c2:e9:f3:46:f5:40:cf:
ba:57:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:17 2025 by rpki-client