Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39823a85-f672-3f9b-8cc6-10d150e6732a.roa
File: 39823a85-f672-3f9b-8cc6-10d150e6732a.roa (raw, json)
Hash identifier: uR/qwydqQtpID4ZqfXF0ueT9zXkucHNjqBa/qTCLk9c=
Subject key identifier: 3B:18:EB:99:FC:4E:4F:7A:81:3D:06:8D:02:D1:39:5D:5C:42:B0:B8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960723737D88EBBF8776900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39823a85-f672-3f9b-8cc6-10d150e6732a.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1010:b020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:72:37:37:d8:8e:bb:f8:77:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=a2c8afc9-0847-44b6-95e5-548de3bdd82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:79:5c:cd:c4:53:70:73:d9:6b:eb:07:65:
6b:25:02:53:04:15:3e:14:8b:fd:2d:01:16:ab:3d:
29:6a:f0:06:64:42:f1:0b:c4:58:0d:8b:4b:52:8f:
07:43:65:53:0b:78:b6:87:68:ec:4d:c5:01:cc:4f:
85:7b:bd:ff:43:65:58:a0:c7:4e:86:ec:cf:52:9a:
91:59:66:56:93:25:5b:84:b9:de:33:13:81:5f:c1:
f1:9a:87:5e:fe:d3:41:25:ae:68:dd:66:d0:46:7d:
32:77:bb:58:74:14:bd:3c:ee:e4:89:bb:48:fb:e6:
d8:fb:e8:b2:0c:28:4f:af:20:73:d4:86:80:94:0d:
f5:5a:8f:ea:b5:f1:96:a4:cd:92:80:94:e9:d7:8f:
0b:e6:b1:fe:ee:93:b7:04:60:38:43:56:c2:aa:88:
ee:9f:fd:37:8f:3c:15:a5:4b:14:f4:d9:7a:83:cd:
aa:15:93:09:bc:a5:a9:60:28:87:b1:e6:51:de:f2:
ac:86:8e:64:f8:36:55:63:ad:4a:cb:1d:a5:b5:09:
d6:11:6d:43:ea:00:2f:17:23:d6:c2:a7:b9:fc:a8:
f1:77:90:58:57:12:0b:f5:70:5e:af:07:0b:1f:6b:
44:2f:8a:3e:7a:17:31:6c:3b:1f:2f:10:a9:4b:ac:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:EB:99:FC:4E:4F:7A:81:3D:06:8D:02:D1:39:5D:5C:42:B0:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39823a85-f672-3f9b-8cc6-10d150e6732a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:b020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:d9:b1:7d:44:d7:01:41:e6:04:43:a0:5c:68:ae:32:19:25:
2e:c6:2b:3c:c4:8b:3e:93:8e:0d:d9:5c:5b:fb:9a:9b:39:7e:
65:4e:f7:d5:b2:6c:5d:28:6a:31:71:46:7c:80:8b:8c:f4:35:
52:72:96:d7:b6:8a:62:32:60:47:24:87:be:fe:b2:61:dd:b9:
7a:91:f7:42:3b:18:e4:85:b5:0c:75:10:71:ce:04:22:56:fb:
4c:68:b6:21:66:1f:91:47:be:7f:2d:13:6f:95:d9:0e:01:41:
36:15:ad:27:dd:46:19:3f:4c:cf:58:93:c8:03:48:8b:f4:53:
14:e6:1c:20:da:bd:21:0c:42:34:c5:67:cf:89:42:db:6f:22:
48:b5:39:73:9b:fb:65:27:48:f6:53:59:f2:df:6f:a6:45:89:
ef:0e:87:63:c4:33:92:d4:ba:e5:ca:3e:24:fc:ec:14:b9:23:
8d:77:ff:10:29:4d:2a:0a:67:7e:90:82:b2:d8:d4:5c:0d:7e:
90:1e:75:f0:09:9b:f3:0c:fd:2b:1a:3e:37:65:44:ab:25:e8:
6e:c3:20:a5:ab:ac:a2:f9:86:08:17:21:4c:2b:ba:e5:88:90:
6e:9b:44:6a:4d:24:42:a1:f9:15:1a:e5:fb:64:99:fc:ab:af:
53:5a:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:29 2025 by rpki-client