Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941f84bb-b643-3daa-8455-81b8d1796c57.roa
File: 941f84bb-b643-3daa-8455-81b8d1796c57.roa (raw, json)
Hash identifier: 4EHqOd/W4qIybFrCYrkPZEJRJdjKQqVPJi32B8whF74=
Subject key identifier: 12:15:2D:42:B8:0B:CA:BA:A1:5D:49:0B:DF:BB:96:D3:7D:79:BC:4F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB85A0DD78A7C2474011C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941f84bb-b643-3daa-8455-81b8d1796c57.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:b300::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:85:a0:dd:78:a7:c2:47:40:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a14ba794-fef7-4476-89ee-cb174c2a7d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:20:e3:04:9d:32:cc:cb:a3:08:91:24:2e:
9e:ab:ac:e8:5d:aa:b2:79:d7:f8:7b:37:35:58:df:
30:b0:3e:47:9f:9e:10:fb:16:c7:d7:e2:ad:06:78:
7d:3e:00:39:b7:3b:f2:b0:54:54:e5:c0:e0:6c:91:
04:15:8c:3e:9d:b9:68:cf:27:64:42:b1:85:fb:51:
00:df:b7:d0:e7:bd:e9:3e:ab:84:64:0a:eb:43:88:
c2:5b:31:b4:6e:1d:ab:f2:91:d9:bb:9b:0c:29:5f:
16:0a:f0:ec:5f:4f:52:2e:be:ef:b1:2d:fb:45:ab:
08:bc:68:08:f5:33:af:6d:cf:8b:a8:8a:5a:eb:e0:
1d:3e:f0:f2:fa:fe:46:13:bd:90:71:c6:bb:64:22:
df:c5:80:42:67:df:4d:42:9e:53:f4:d6:5d:65:a9:
68:a1:56:bd:b4:52:3e:3e:5f:9f:98:c9:72:6e:7d:
3e:ed:33:61:4b:f5:d6:bc:53:ea:4b:14:bf:59:34:
30:cc:0d:57:02:bd:0f:cb:e2:57:be:a6:4b:7d:cd:
43:5d:52:25:31:96:cc:ba:54:ac:54:14:79:f0:84:
b0:45:47:f2:e1:07:49:25:54:99:2b:16:03:9a:d6:
74:95:5e:e0:43:41:56:3e:02:1d:bd:de:62:55:72:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:2D:42:B8:0B:CA:BA:A1:5D:49:0B:DF:BB:96:D3:7D:79:BC:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941f84bb-b643-3daa-8455-81b8d1796c57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:b300::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:db:bc:d7:63:0e:3f:e3:0f:9d:ee:90:8a:6a:ae:68:b2:32:
a2:bc:35:d0:11:fc:d6:65:31:1a:9f:c4:4f:48:39:16:ff:e6:
50:be:2f:45:84:ba:fc:56:d2:7e:cd:ab:e2:2c:68:52:41:ce:
90:1b:38:11:ed:ba:1e:cc:5a:5d:4d:19:ea:0c:7b:66:9b:76:
02:f5:a3:37:96:c7:8e:da:6c:32:25:20:a4:a9:e3:8b:da:e3:
e3:b7:65:6f:c4:d4:3a:41:3b:62:7b:dd:97:25:30:25:e2:42:
55:1e:0b:50:1c:94:86:ea:77:ca:db:fb:5f:21:49:f0:ac:79:
c1:91:34:9a:46:e0:79:e5:bd:5d:c5:43:76:59:c4:74:59:25:
1f:13:ed:56:7a:7a:c6:89:c4:38:03:09:0b:e6:6e:97:ea:18:
9f:74:00:27:f7:bf:b0:81:e7:43:54:0c:9b:18:8d:d8:3c:4c:
b9:f5:aa:f9:19:58:32:6c:7f:34:62:bb:8f:4d:0b:88:65:1f:
9b:e5:3d:74:db:ea:dd:ab:9d:33:3e:32:03:04:b9:a7:90:59:
b4:ea:27:4d:88:4b:73:5d:2d:91:50:fc:b1:dc:28:c7:5c:78:
5a:b3:23:16:54:e7:30:9e:91:86:43:64:d0:0b:94:d6:c1:b9:
20:42:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:34:52 2025 by rpki-client