Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa
File: 901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa (raw, json)
Hash identifier: XIO/4AQSWdznJIzO22o8iGAXmWHUmrFwTwY6QXLm6SI=
Subject key identifier: 05:25:BD:C0:6E:85:18:03:53:B9:22:27:51:95:B4:6B:7B:15:FC:56
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607E4192F0F8338F0ABA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1011:b340::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:7e:41:92:f0:f8:33:8f:0a:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=48b16e65-8464-40f9-a74c-500ccc0e93a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:9e:ff:17:67:bd:da:11:e9:84:8e:bf:d8:
b2:d9:97:c1:5e:b3:1a:9e:10:ea:6f:18:5a:5e:38:
f5:25:16:f2:17:12:02:f0:a0:9c:98:fe:9e:b4:c8:
d6:5f:02:61:cf:83:3d:d6:a9:b0:98:03:0b:f7:28:
80:ea:38:6b:5d:a7:92:9a:a7:6c:49:29:d9:05:c6:
38:b2:1b:2b:c0:f3:c5:e4:75:49:85:83:20:96:fa:
cc:09:5a:d8:20:44:07:ef:7d:51:1c:bb:18:30:df:
0e:22:75:00:23:d7:c0:c9:8b:29:66:2f:9b:65:8c:
56:bf:1e:ba:b6:5d:3a:41:d7:88:18:3d:df:d1:30:
8f:96:8e:da:5d:1e:ae:05:5a:ba:4b:34:e7:7b:0c:
6e:ce:83:97:ac:43:1e:7b:f5:cc:e4:4f:34:08:0d:
6a:42:97:41:33:2a:05:db:70:14:62:4b:91:d6:2b:
e1:f9:ff:19:cd:42:81:63:c7:cd:51:4c:d1:d4:68:
11:e4:6c:e6:a2:c4:c4:0c:31:bd:61:b1:3a:8e:49:
6f:ff:b1:76:e8:5f:e9:52:3b:9a:c3:65:bd:de:f6:
aa:1a:a7:6c:4a:3d:bd:90:16:fd:70:2d:ff:d0:c7:
4d:ee:38:61:9b:27:17:9c:cf:3f:e2:a6:59:06:55:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:BD:C0:6E:85:18:03:53:B9:22:27:51:95:B4:6B:7B:15:FC:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/901e0d5d-e04a-30fc-85b7-2ba80ac0222e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1011:b340::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:65:23:ee:76:be:bc:e6:a0:54:39:c0:dc:e2:94:1d:81:78:
2b:0f:08:05:ad:3a:8b:a5:18:7f:95:9f:62:13:77:24:37:37:
52:a4:f6:e7:7c:3f:19:f5:e3:cf:4e:2e:aa:75:ef:ee:5a:8c:
18:1e:91:04:a3:4e:4e:38:70:b9:d9:70:d3:db:0e:7e:e7:b1:
1a:bc:ef:17:6a:89:f0:ab:65:c0:3d:98:35:0b:82:89:e1:d9:
79:bf:7e:d5:70:c5:91:21:40:d2:ba:fc:01:a3:47:23:6b:2e:
40:9d:04:7a:54:34:14:74:93:50:aa:87:30:0c:30:6a:49:6d:
d8:23:2d:36:f3:ef:d6:cc:6d:22:4d:6a:4b:ad:93:fd:ed:6a:
49:e4:e1:b2:c6:5d:29:e3:0c:7e:ab:3c:51:d0:6c:b9:3f:fe:
cb:88:97:4b:6f:3f:ae:9e:ae:ca:4d:9f:47:21:a6:d9:f2:4c:
c8:01:15:24:0c:e4:a0:97:bd:1f:d9:4d:02:54:14:71:86:a7:
4f:94:65:7a:de:01:b3:bd:a3:25:e3:f8:8f:6f:20:be:a5:fa:
8c:83:1b:e2:56:96:fc:b0:fb:87:18:c2:5e:8b:06:c4:15:97:
3a:8c:cb:94:1b:f6:91:fe:71:f6:d2:3c:c7:15:7f:9c:ce:9c:
fb:08:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:03:14 2025 by rpki-client