Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
File: 41bc444d-fc17-342e-a87d-42693e9d75f4.roa (raw, json)
Hash identifier: N7trlTtNuJougC1/8YrctZpUF0I88wXLuF83r+wDQwI=
Subject key identifier: B5:83:BB:D6:0D:7D:73:14:CD:D8:46:19:09:C3:DB:5A:38:1A:40:B3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607988B712E05E7E001C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1014:b020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:79:88:b7:12:e0:5e:7e:00:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=2ab5d36a-1b4b-4c3e-9706-6e4c60d2db0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:56:d6:59:47:cf:ee:cd:e9:d6:7c:68:57:
88:1f:d2:2f:d3:8f:95:2a:cb:e3:31:21:70:8a:d3:
6c:29:a9:25:c5:d6:63:09:2f:5d:0f:be:97:ac:fe:
f4:ac:50:2d:ae:59:0e:a1:59:66:77:a9:8e:c8:dd:
40:1a:7f:5f:ba:38:46:d1:fe:9b:d6:ce:44:b6:e1:
23:9c:5a:60:e1:82:21:20:ff:41:9d:99:9e:01:a1:
e5:00:5e:18:48:66:25:ee:a0:b3:14:1b:5e:c9:4f:
fb:65:df:43:1f:6c:a4:6a:25:99:7a:1b:3d:e8:8e:
ce:27:96:3d:28:b0:1b:9a:53:77:c4:9f:40:aa:e9:
9f:7a:1b:45:09:4c:fe:8f:45:15:a6:35:62:ed:5e:
b1:a8:21:ce:e0:da:23:5c:93:a4:e3:0a:98:02:29:
00:cf:df:9a:6a:6e:c4:52:c5:73:4f:12:13:6d:cb:
7a:24:39:75:95:28:45:7c:bf:d9:b8:b7:ae:f1:89:
67:06:9c:fd:93:ac:61:e2:74:38:a6:43:42:ad:2d:
07:ab:0c:c3:4f:a7:55:de:59:6d:51:0e:d2:89:4c:
8a:b9:3e:9b:8c:9a:b7:f5:30:a7:96:c6:2a:b2:db:
65:43:d6:05:02:ac:ee:a2:2e:e2:32:e8:95:20:3f:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:BB:D6:0D:7D:73:14:CD:D8:46:19:09:C3:DB:5A:38:1A:40:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bc444d-fc17-342e-a87d-42693e9d75f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1014:b020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:cc:f6:bc:dc:63:c5:b2:79:cc:e6:1f:9a:3f:1a:5d:ef:f6:
77:c2:8f:bc:c0:29:78:dc:02:93:3e:63:85:71:dc:cf:c1:e6:
e0:d1:09:ad:73:9a:2f:6a:5c:7d:b5:f3:8a:4b:15:93:81:59:
ca:28:a4:ac:89:61:e0:d1:59:81:1c:6d:44:e4:6b:d3:3c:d2:
3d:2d:8a:3a:06:27:1c:b2:ff:62:a3:39:8f:d9:bb:fa:4a:59:
96:9f:b7:cb:6d:db:6e:3e:57:f5:a2:ba:aa:29:67:30:8c:38:
5f:c4:47:70:b1:4a:23:12:52:79:9f:1a:cc:41:84:35:0c:c7:
26:18:3b:d2:35:92:38:bb:cb:ff:ee:cb:50:cd:5e:26:72:0a:
e3:aa:88:75:45:5f:00:aa:02:17:91:af:36:f6:ba:ec:5d:d6:
a9:88:11:74:9f:a1:f3:fa:70:21:99:89:c9:4c:cb:ec:1f:22:
5e:70:5a:45:ea:86:7a:f3:1e:35:d1:e1:64:bb:72:36:f3:52:
fa:27:22:a8:f8:2e:ea:18:94:ef:60:a2:cc:d2:90:5f:69:e7:
fe:e1:50:15:ea:cc:88:6d:0f:e6:fd:8b:a5:96:72:c1:de:e8:
f3:06:0d:4a:2f:da:9d:54:01:56:7b:a4:39:d4:34:5e:a6:b2:
a1:13:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:25 2025 by rpki-client