Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/56c0a81b-2cd1-36c5-933d-aafd62e2418a.roa
File: 56c0a81b-2cd1-36c5-933d-aafd62e2418a.roa (raw, json)
Hash identifier: XBwzkXgEX7za+NtMsxwL2+5SGxqnA5byMIFaNOEkrVk=
Subject key identifier: D4:EA:29:25:BB:28:02:1B:76:37:00:C5:D2:30:77:D1:57:6E:6E:B8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960749175E581F217E52440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/56c0a81b-2cd1-36c5-933d-aafd62e2418a.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1010:b110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:74:91:75:e5:81:f2:17:e5:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=9e37c69f-9291-49bf-8bd0-f44f3f9a5012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:0c:74:8c:64:66:bf:a0:b9:8b:52:f2:2c:
a3:7a:e7:23:0f:72:bd:ea:63:92:e3:dd:37:b7:ed:
1e:98:81:ee:2d:72:d3:d5:97:e5:a4:0e:6d:1b:ba:
4d:75:e1:65:d5:cf:d4:89:e6:0c:fb:c9:4f:ec:8e:
1c:d2:f8:f4:8d:5f:51:6a:4a:f1:e5:18:69:8b:8d:
90:7a:26:bc:fd:02:9c:94:5e:d7:72:d7:fb:43:67:
60:7d:d7:1c:56:d9:69:42:3f:46:8d:1c:06:fd:95:
64:c2:c9:43:e3:1e:e8:43:49:4f:1f:31:c5:a1:34:
3f:59:c9:5a:99:fb:7f:8c:89:fd:44:eb:e7:e5:37:
4e:92:fc:e4:8c:b5:37:4e:f6:f1:2a:c0:82:89:e8:
0c:bf:b0:bd:58:7d:b7:48:77:c0:1e:2e:70:2e:11:
9d:27:d1:55:ae:97:fe:ff:d3:91:af:87:e9:85:69:
4e:14:9d:7b:69:7b:96:91:18:1f:d3:d2:2f:bb:c2:
98:21:85:47:83:84:80:7b:cd:df:1c:44:c6:cf:9e:
73:09:28:d2:f2:c1:1e:92:83:1c:ea:7e:80:2f:f5:
fd:b5:32:6f:35:83:c6:8d:ae:b7:fb:b0:b7:7a:49:
60:09:1b:56:44:74:7a:35:e4:62:d5:b3:78:7c:d1:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:29:25:BB:28:02:1B:76:37:00:C5:D2:30:77:D1:57:6E:6E:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/56c0a81b-2cd1-36c5-933d-aafd62e2418a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:b110::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3d:9f:78:cd:ef:d6:75:f0:05:b3:75:ee:ec:34:07:11:8b:
43:e6:11:c2:94:2b:1e:62:27:32:2c:5e:5e:b4:64:f5:2c:dc:
e1:3f:2d:e3:8a:7a:fe:77:9b:d5:de:ef:cf:b9:2b:7f:f4:e3:
76:c0:2b:47:3e:4e:9e:09:f1:63:2e:9d:8a:3c:45:eb:d1:8f:
70:cf:b7:78:a3:57:4e:92:87:f0:6b:8e:16:f3:f8:59:00:31:
54:f9:0e:f8:68:f7:db:df:fe:83:e2:31:eb:ad:e4:f6:1e:e8:
ea:10:2e:cf:a4:3b:e0:58:25:69:ac:95:34:57:50:e5:f2:9f:
2a:f0:84:37:1b:ac:21:b2:68:74:25:b8:5e:9a:71:fb:b8:15:
f1:5a:7b:a8:f9:1e:b6:b8:6a:b2:94:6e:b7:bb:fc:15:f2:ac:
b4:57:7e:90:f4:43:c4:ca:6e:74:ab:1b:4f:de:56:e0:51:7c:
fc:f2:b3:83:0b:dd:14:8e:f3:c5:82:59:73:0f:9f:6e:6c:46:
4f:65:2c:0f:68:df:6c:3c:23:76:f8:35:0e:65:a9:53:6f:a1:
cc:cb:e3:f6:44:f9:73:48:3e:55:fe:85:30:50:a6:b2:6e:c2:
81:d2:45:55:6e:bc:00:64:38:48:7b:4b:93:6b:a9:62:2f:82:
e9:d1:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:28 2025 by rpki-client