Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa
File: a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa (raw, json)
Hash identifier: lIy7aLXJIPo0b7ldRXbMEbMXkE3p4YbNMEtMwj51ILg=
Subject key identifier: 27:8C:51:99:94:C5:AE:0D:5D:8A:D2:9F:93:18:7B:99:CB:F0:7F:A5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960896627B4B0D6DABAE900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1017:d010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:89:66:27:b4:b0:d6:da:ba:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=23dbd073-7132-47d7-958c-a2d07670a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:33:a7:e6:5f:b9:8c:38:4b:6d:f7:86:21:
36:09:d8:64:11:c6:06:2c:32:51:4e:7c:e5:6d:6d:
f9:67:5b:94:36:04:2f:61:b1:34:5b:77:2e:aa:dc:
0b:61:59:53:4c:3a:d2:93:4f:5d:84:1d:09:8b:0d:
6e:4e:46:db:ed:b2:e5:32:da:68:26:01:c0:0a:7c:
09:16:b1:75:58:d3:55:1b:0c:25:91:30:39:b6:29:
f3:ca:9d:53:9c:f8:c2:ad:d1:5a:b5:a7:22:c5:b4:
9a:2e:2a:07:8f:9d:72:03:ca:02:a1:7c:2e:fa:27:
f6:e0:3c:2c:c2:37:5e:fa:46:63:cf:22:2a:03:32:
cc:4d:c4:57:bd:95:4a:b0:26:a8:bd:67:1b:a1:26:
28:10:a4:9d:7b:5d:49:b8:d6:1e:3d:43:0b:83:c4:
62:2f:44:33:e5:ac:eb:9f:a1:03:dc:49:d0:a9:57:
cb:6f:5e:c6:31:ed:2a:ce:d0:df:12:91:d4:ce:b7:
7f:e2:d5:84:15:4c:de:f7:59:d3:92:37:48:87:f7:
39:4f:a8:3d:35:27:55:59:f6:84:96:f9:fa:8c:05:
c1:7d:7a:f7:c0:1d:b3:c9:4c:70:01:06:06:e0:eb:
4b:f4:0b:6a:1c:da:4b:e4:c3:81:86:b2:02:02:94:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:51:99:94:C5:AE:0D:5D:8A:D2:9F:93:18:7B:99:CB:F0:7F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1017:d010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:bd:9f:c6:9d:19:d8:76:be:90:b1:78:af:0a:cc:23:db:8c:
ab:6e:cd:3b:20:ca:c3:95:94:d7:e2:7b:ed:95:d7:cc:ee:5e:
f4:e3:0b:fe:41:d9:19:9e:bb:cf:4c:a1:ee:59:1d:87:27:ff:
66:90:c2:0b:7c:23:11:4f:2c:0e:a3:18:b7:cc:35:dd:9e:53:
90:f3:54:11:96:f2:55:02:fb:4a:ea:eb:ef:92:cf:51:63:b6:
c2:6a:2d:00:ef:11:66:ba:ce:78:c5:e5:21:f6:30:62:46:66:
c2:e9:da:68:e2:8c:e8:04:3f:28:68:9c:56:ab:1b:31:51:38:
a9:66:5d:04:a3:42:5f:7b:12:98:12:e4:22:9c:8c:0c:18:4c:
d9:e6:e3:39:d3:c9:29:e7:8e:84:70:6a:70:f2:30:7d:27:35:
64:69:75:fc:95:99:e0:b7:32:80:41:0a:0f:df:6d:fb:e5:e4:
49:08:c0:a1:ad:ff:cd:52:9d:26:6c:e3:9a:7f:2b:03:9a:ac:
8b:91:6d:d1:58:99:56:93:a7:d0:21:a2:e5:41:f5:2e:70:f8:
55:e8:9b:ab:f7:20:e2:dc:d7:a4:c7:33:cb:e7:53:ab:07:4d:
4a:87:6a:0a:d6:d4:c5:44:ed:ef:b3:4e:8d:28:88:86:6a:b8:
cf:a5:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:17:49 2025 by rpki-client