Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
File: 95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa (raw, json)
Hash identifier: K1ohuWahqWQ/OjqbbPJci7R1lwhtX8WUwBX4anF7SNs=
Subject key identifier: A3:40:A1:A0:6C:8F:81:03:7D:AF:84:70:4C:C8:55:49:03:15:0B:F9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400CDBA0E3FD0E8B9478B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:b1ca::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:cd:ba:0e:3f:d0:e8:b9:47:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=74fc76d8-c5a1-4839-a884-8474a04843a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:9c:3d:b1:44:86:05:82:2c:31:5f:51:3d:
0f:9b:97:82:ad:3d:4d:91:f0:3f:88:a5:77:9b:0e:
92:30:2c:4c:19:64:a8:b3:cd:ff:23:61:6a:ce:aa:
7b:bf:91:25:fb:5d:c1:73:04:18:f4:74:b6:3d:21:
2e:f1:29:88:5e:af:b8:20:8b:1c:b9:4b:2e:a3:26:
63:6d:01:2c:06:78:93:84:d0:6a:fd:a8:34:3f:56:
ad:d9:f0:42:a0:f0:af:7a:3d:0c:ab:60:3c:f3:37:
73:0f:47:bc:e7:ce:ab:26:7a:cc:27:0d:0c:34:39:
9b:59:01:cd:c0:bc:cd:54:50:8c:57:5d:32:f4:3a:
a2:cb:26:5c:0e:a4:4b:ee:7c:24:34:f1:9b:3c:1b:
ec:6b:57:7a:e0:bc:44:eb:46:a6:23:98:49:8b:49:
b7:f5:67:a6:18:ed:ab:8c:0d:3d:a1:06:4b:e3:85:
a9:99:c4:c8:55:5f:22:15:5e:fa:9c:f0:5b:c4:0c:
2a:07:24:ae:fd:0f:d0:0e:85:75:9f:96:7f:87:93:
65:54:f8:35:91:03:80:55:e1:08:ea:0d:82:76:93:
e5:af:39:4f:b7:a3:ab:a4:20:df:13:32:78:76:4e:
dd:32:af:3b:ed:51:02:9e:47:88:89:68:5c:ad:f3:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:A1:A0:6C:8F:81:03:7D:AF:84:70:4C:C8:55:49:03:15:0B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:b1ca::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:cc:98:11:84:2e:8e:96:03:6d:e0:b2:75:ab:d9:31:02:a9:
41:e9:b3:0a:0e:fd:44:de:3d:32:d1:b1:2f:09:8a:91:6a:88:
8b:f9:26:fa:33:d9:4b:4a:1f:94:e4:0c:a4:09:64:45:be:51:
3f:13:51:8d:da:8f:02:7f:6c:da:46:f1:b6:9f:b8:1f:71:ed:
0f:9f:3b:dd:83:89:77:00:d6:10:ad:de:9e:69:02:a6:1e:af:
18:98:2a:d2:db:3d:9d:4d:f2:c2:21:55:14:ba:32:f1:e3:6e:
a1:b3:d3:01:66:96:cd:eb:86:80:96:82:eb:19:e6:b6:84:e4:
e3:b1:32:2f:e0:96:b3:2e:b0:de:57:17:5a:0c:96:62:42:8e:
8c:1c:8d:7c:9c:18:ae:fb:24:95:6d:a9:98:10:a6:c0:e3:8c:
31:29:57:9d:c8:d4:a1:c3:43:90:2e:26:54:98:5c:7e:fb:ad:
95:a7:5c:cf:c2:38:91:8d:50:3c:9c:16:8e:f9:ee:40:2c:37:
45:4b:be:17:80:95:a9:22:e6:f4:dc:dc:31:51:c4:a5:22:f1:
d7:81:4a:16:cc:6d:ab:ef:1f:5c:c5:1a:1d:79:6e:ec:7f:32:
dd:c8:8b:e6:5f:ec:d6:91:b8:d4:0e:99:ab:a2:fd:c2:f9:8c:
38:40:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:04 2025 by rpki-client