Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
File: 4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa (raw, json)
Hash identifier: 5F+FcJVJ4kvtaFMXqWZIQOyzpiRTAiyk47H3GMBpp+4=
Subject key identifier: CA:25:31:D2:D4:46:1A:93:F3:E7:7F:D0:64:4E:6C:97:5A:69:7D:DF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696084BFA72E5EFE0B3B7C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1015:d000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:84:bf:a7:2e:5e:fe:0b:3b:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=b14775d1-5e66-4e50-a1bc-0480bfacec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:3a:4f:b4:f5:cf:d4:90:92:c5:fe:77:a2:
27:21:8a:31:8e:c2:66:26:46:31:9e:48:58:64:40:
d3:75:5e:1b:3c:83:5b:c9:01:d2:0a:6f:7e:65:d1:
db:9f:b9:d8:cf:fc:a5:27:3e:a4:80:de:ce:d3:61:
dc:51:d7:8a:13:1a:c5:99:f2:e9:ad:f4:00:5b:86:
e6:a1:b2:84:11:f6:b5:ff:0a:2f:04:89:c4:53:44:
e6:c8:18:8d:ad:0c:01:e4:63:78:4a:ad:7f:52:39:
0d:75:7c:2a:bc:d1:f6:2d:ce:76:aa:22:89:ae:34:
9d:79:ee:31:ae:56:c8:49:cf:c4:c6:f4:84:b5:cb:
53:16:d5:15:5a:1d:10:ec:a6:6e:d9:e3:ae:c9:48:
a5:5c:39:53:10:57:f8:e0:74:32:15:b5:38:4f:45:
b3:b6:65:2c:61:6c:1f:40:d7:23:aa:cf:20:4e:de:
62:54:0e:a3:f7:2e:09:4f:ea:1e:51:ee:05:3f:8c:
15:86:e7:26:49:06:54:b7:d9:f1:3f:17:fa:47:79:
e7:0d:82:b6:f5:be:53:ba:d1:55:b1:6b:91:76:14:
9d:c7:e5:7b:79:0c:bc:a8:a8:6c:75:52:92:78:57:
2b:d6:3a:f3:05:95:96:e1:f6:3c:63:b5:d0:0c:80:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:31:D2:D4:46:1A:93:F3:E7:7F:D0:64:4E:6C:97:5A:69:7D:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c48add0-c899-3f0b-a930-0aa11c6d73e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1015:d000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:27:5b:8e:eb:cb:11:f8:6e:0c:61:61:20:04:af:28:8b:dc:
ba:b5:8c:5c:55:a8:32:58:3e:74:64:ff:7e:b7:08:58:3d:14:
c4:16:50:1e:74:8f:47:a1:d9:3e:95:d8:f0:ea:3a:55:39:e8:
34:87:87:7d:80:81:e7:3e:fa:42:62:f8:b0:05:2b:1f:5d:b4:
13:1a:2d:28:11:9b:4c:e0:2c:df:8c:fe:ba:24:72:bb:19:74:
4e:e1:dd:ff:f3:b1:15:47:b6:ca:60:56:89:e9:bf:1e:b9:a8:
dc:4c:80:33:cc:49:5a:06:dc:f5:2d:a9:b1:9c:4b:3e:9e:43:
b4:1a:6d:97:e4:86:90:ea:66:c5:34:24:ce:87:92:39:99:d3:
a8:66:17:59:23:fd:ab:31:5b:33:7d:04:54:fa:4b:25:ee:86:
18:5f:64:79:a1:1f:f1:e6:03:06:d9:3b:5e:7c:fd:cf:72:8e:
f5:f0:a6:34:3d:09:2b:be:fa:50:23:47:f1:26:8d:6a:48:1c:
69:88:18:2f:1c:b8:06:fb:ea:63:0d:05:ec:69:22:3f:64:92:
8b:53:d4:a1:c5:10:ef:3d:81:9d:0b:b8:6b:30:59:72:1b:05:
28:b8:d6:f6:87:6d:12:77:dc:98:2c:a0:04:5c:7e:4d:84:4a:
39:bc:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:28 2025 by rpki-client