Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a2d54c9-b09a-3cf3-b97f-1dc872117e9c.roa
File: 8a2d54c9-b09a-3cf3-b97f-1dc872117e9c.roa (raw, json)
Hash identifier: SPjPBVn9+e6PKym5GNbt5r+erYOVrOhvVAbBIWKQYrk=
Subject key identifier: 9F:29:FF:19:A4:8F:1F:39:D2:69:12:8B:76:E5:1C:12:BF:77:69:28
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869608959ABF5582FC3AA1000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a2d54c9-b09a-3cf3-b97f-1dc872117e9c.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1017:d000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:89:59:ab:f5:58:2f:c3:aa:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=2148b497-81a2-40fd-8ab6-402670197167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:85:ca:05:e6:a2:cd:d8:63:d7:fd:db:51:
5c:18:42:81:d0:6f:46:42:81:b7:f7:e1:9a:8f:be:
d4:53:32:80:ed:f9:c4:fc:64:29:22:53:66:ae:fd:
d2:b6:b6:c7:5d:eb:6f:eb:8f:49:63:15:99:33:37:
0e:5e:6d:6e:62:e7:5d:e1:eb:3c:4e:b8:8b:be:ff:
2b:02:dc:78:5d:c9:d0:42:b9:ab:21:43:41:82:b6:
df:12:83:5a:f3:8e:b2:02:18:5d:06:3b:76:72:53:
c5:bb:3b:c9:cb:94:88:50:59:4b:23:36:c2:ef:00:
3d:93:9f:e2:82:46:10:77:79:0c:c2:e3:51:13:7e:
2c:b4:e2:bd:94:4d:9e:e3:26:b0:e5:46:7b:5e:ae:
57:89:6c:36:7f:64:5b:69:35:cc:70:91:71:ba:7a:
d6:5d:02:f1:e3:94:7b:6d:78:21:33:41:b5:c2:27:
5e:2a:87:5a:79:2b:9c:3d:1c:56:e4:4b:4e:b7:32:
08:9b:b6:a3:cf:1c:65:57:2b:41:7a:e5:c3:e1:27:
4f:d5:9a:9e:9c:88:7e:91:94:36:81:05:f8:ea:48:
7a:8d:b3:03:32:98:29:a0:e8:89:62:12:bf:2f:13:
32:d2:d6:ec:36:73:8e:13:7f:8d:9a:9f:d7:7d:5f:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:29:FF:19:A4:8F:1F:39:D2:69:12:8B:76:E5:1C:12:BF:77:69:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a2d54c9-b09a-3cf3-b97f-1dc872117e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1017:d000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5e:cd:d9:44:98:72:e3:73:c5:b6:c9:56:08:45:fc:8b:1f:
34:91:93:fc:79:87:4a:3d:a3:72:f8:43:1b:26:6a:1d:6a:33:
2e:46:0b:ee:f9:6d:8a:0e:72:c6:c1:6f:54:71:14:05:23:5a:
f1:c1:e1:1b:9c:3f:22:e7:4b:f1:06:ef:e0:ff:6c:f7:de:44:
24:c9:a3:22:2e:7a:4a:f8:66:c9:c7:7f:1b:05:d8:4f:73:13:
ee:01:0a:08:2b:e3:63:b8:65:4f:44:bf:0f:ca:cf:84:b0:0c:
c3:eb:e8:71:58:73:cf:40:81:80:f0:7c:ae:e8:c6:1e:c4:0b:
e6:be:d9:cb:18:c0:64:2e:c0:2b:71:00:0d:b5:e9:55:c3:91:
45:af:68:e9:bf:56:a1:72:7d:00:a8:40:94:5c:27:5c:9d:07:
44:54:b1:90:4f:65:d6:0d:85:4e:1a:30:dd:be:38:4e:1a:1c:
40:4f:ea:e3:91:c1:f7:8d:a6:02:7b:98:a3:c9:a8:51:7f:e3:
ca:51:9d:80:f7:38:52:cd:0f:7e:d3:0f:57:bd:f9:85:6b:a6:
d7:29:fe:1e:60:e9:d7:47:db:8e:52:d2:0f:1c:79:1f:55:c2:
a7:17:71:05:31:51:b8:37:15:b8:fb:78:6f:74:58:5c:cc:f9:
1b:b2:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:52 2025 by rpki-client