Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fd5eef5-b61a-33c3-a521-a094cd74d1e4.roa
File: 7fd5eef5-b61a-33c3-a521-a094cd74d1e4.roa (raw, json)
Hash identifier: iT/sSeT9/382puUR3OpglgWOzBX34i7poY7ZfMzj2eI=
Subject key identifier: D0:9E:C5:00:1E:44:B4:48:3D:7D:F6:DD:23:C2:0B:BB:1C:44:53:BB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB5AA07286282E5ADF9680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fd5eef5-b61a-33c3-a521-a094cd74d1e4.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:b0b0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:5a:a0:72:86:28:2e:5a:df:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=22075a30-b861-4067-a8be-b403e3239ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:f1:9f:dc:94:3c:27:66:a4:43:03:55:93:
98:b9:5f:28:aa:07:83:6a:d8:09:4e:bc:a5:50:7e:
7c:2e:10:1b:68:d8:ea:eb:7f:a7:05:8f:9a:e8:d2:
5b:30:69:f5:41:cf:34:55:b5:83:8c:ec:90:ce:ac:
3b:83:29:bf:f7:04:3a:ec:47:32:46:3f:d6:7e:89:
bd:6c:45:84:7d:d9:ea:f2:a0:f2:ef:35:71:39:f3:
14:29:e1:f5:6d:0e:b2:67:68:7a:7e:65:f1:25:43:
8d:91:cd:c4:4a:b7:44:31:1c:a0:ff:d8:5a:0a:4b:
1b:a7:ba:10:9f:f4:de:32:a6:cd:99:68:a4:76:81:
d5:d5:b9:04:74:41:18:a7:a4:0d:b7:53:3b:cb:0a:
b1:1e:a8:7f:42:22:7c:40:a0:1c:83:07:d8:38:1d:
93:05:b1:8a:bf:fc:09:56:85:13:8e:42:c9:fa:39:
fd:e5:7c:97:d4:88:63:e2:58:1d:6a:7d:04:a4:cf:
46:fe:cf:b8:85:90:6b:b4:ff:28:a9:a3:07:62:0e:
71:6b:9c:a0:59:da:97:ed:cd:cf:27:f2:22:cc:c5:
43:71:2c:a9:49:6f:2e:8a:dc:97:d4:f4:2b:7e:df:
0b:2d:81:22:a8:3a:96:6c:01:02:8f:4b:3b:1a:10:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:C5:00:1E:44:B4:48:3D:7D:F6:DD:23:C2:0B:BB:1C:44:53:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7fd5eef5-b61a-33c3-a521-a094cd74d1e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:b0b0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:3a:36:8c:f6:8e:ed:4b:7f:0e:b1:97:7a:d1:94:e9:93:f1:
cf:ec:8a:c4:d7:a8:7c:45:e9:7e:aa:d8:95:d5:4b:cd:c1:9f:
27:61:d6:ba:90:b1:35:a9:4d:62:43:b8:8e:4d:d4:5c:e2:19:
7c:5e:33:25:b7:94:d8:17:e0:a7:60:59:11:0f:71:e6:44:d6:
c0:aa:89:28:df:d4:a0:ec:e7:8f:69:ac:3f:b5:c3:91:59:6a:
7c:26:55:95:83:3f:bc:bd:ce:fb:86:c5:c8:d7:cb:d2:a9:16:
13:85:b3:d4:cb:5c:60:b3:10:a4:bc:b7:44:a7:31:e4:56:f7:
5a:c8:1c:6f:10:b5:46:51:a9:c7:bd:c6:af:2f:9c:dd:a1:2b:
31:5c:d6:7a:cb:e6:11:bc:1c:ea:12:9b:2c:93:a8:b6:12:45:
4e:5b:d2:39:f6:d8:c5:bd:df:8a:93:f6:a8:a7:0e:6e:b1:83:
b1:71:1b:5e:32:d6:ad:f6:d2:c6:80:4c:26:c1:d3:0d:4c:ec:
82:fe:fe:b5:fa:9e:d1:ef:06:7a:a3:2a:55:86:a9:2f:0c:e2:
25:ea:40:8a:0b:cc:50:9f:87:e0:65:eb:dc:ab:20:26:56:b2:
04:23:38:bc:50:9b:5e:3e:70:12:5c:3b:59:ec:29:09:fb:74:
24:15:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:39 2025 by rpki-client