Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a71a2c3b-bde2-35dc-90e4-1a3ad7af453c.roa
File: a71a2c3b-bde2-35dc-90e4-1a3ad7af453c.roa (raw, json)
Hash identifier: rttUFbDg0qbETo3rPY/Ki9nT3WS4/wBAC56NcHK7Dgg=
Subject key identifier: 01:1C:0A:3F:DD:57:D8:90:2F:1C:D2:76:43:3D:5A:CE:11:D2:24:E2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696083EC3E3E515773F6D5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a71a2c3b-bde2-35dc-90e4-1a3ad7af453c.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1015:b110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:83:ec:3e:3e:51:57:73:f6:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=4d4fc67d-21c8-469b-82d3-5380501c474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:9b:c6:ef:9f:af:d7:b9:77:d2:2b:c2:65:
c6:dc:cd:b3:68:df:f8:8e:da:5b:45:76:d4:42:3d:
c8:be:42:f9:a8:42:12:38:04:96:cf:ed:6c:95:7d:
b6:55:0d:de:51:ad:d9:21:ba:48:3f:02:a8:40:d3:
6b:d7:c2:eb:81:92:26:18:ac:a8:12:d9:06:3b:47:
1a:ba:79:bd:79:41:4f:c5:2a:67:b6:b1:25:ad:f8:
25:d6:f2:35:4c:00:b3:71:3f:fa:12:59:fd:aa:a3:
26:b6:47:0c:cf:ae:f8:46:5f:51:b0:ed:59:58:75:
8b:00:6e:c4:4a:7f:3e:88:e3:f9:8b:96:53:1d:aa:
22:ba:ab:45:f3:26:68:36:f3:f1:fa:f6:32:7d:3c:
65:ed:d3:42:83:93:4d:4b:ec:88:72:bc:de:19:8d:
7d:e3:42:51:62:58:09:51:7d:3a:01:98:8b:cc:d4:
f8:30:64:5e:7f:24:92:d6:f0:91:9c:b8:94:03:7b:
bd:0b:2a:3b:36:84:98:a6:4d:07:e9:0c:cf:e9:96:
5f:68:bc:11:28:42:94:0e:93:d6:10:97:a8:3a:00:
a9:6b:44:a7:49:e9:4e:a7:e2:97:70:09:e0:eb:48:
b5:95:e3:85:f1:26:ba:66:66:2a:8f:e5:e4:80:d8:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:0A:3F:DD:57:D8:90:2F:1C:D2:76:43:3D:5A:CE:11:D2:24:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a71a2c3b-bde2-35dc-90e4-1a3ad7af453c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1015:b110::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:24:c7:a4:36:c6:a8:ec:36:52:3b:bf:bb:e3:3e:4f:94:c5:
94:cc:70:96:6d:71:f3:92:1d:28:9c:fe:b1:64:e9:de:0b:5b:
a0:a8:00:3c:5a:ae:60:34:37:da:fc:65:f7:99:b6:09:02:13:
44:44:a5:6c:37:b8:90:5c:a3:53:39:b9:13:f1:b2:6d:b1:e3:
21:bb:a2:bb:1a:b2:4f:38:f9:0e:7f:66:46:81:9b:ec:44:74:
27:c7:19:fd:c1:54:f7:0c:86:e4:8d:fb:b7:8b:32:8b:1b:6b:
9d:fe:0b:27:ea:d5:d5:c7:ce:d9:78:18:db:a4:c3:84:e9:fd:
0f:5f:d6:5e:9e:46:01:75:30:2d:b3:55:ba:b1:a1:2e:54:bf:
df:a4:18:70:db:87:e4:19:00:15:b5:c5:db:10:90:03:1e:29:
b7:68:fd:e3:06:14:bd:bb:46:55:93:35:42:ea:76:4c:e6:b3:
01:2f:87:87:84:79:0c:73:7b:a6:03:99:e0:d9:70:6d:91:ea:
c4:6a:e5:60:91:ea:f3:49:ac:7a:93:53:17:a7:2b:03:83:e5:
c5:ac:84:69:2d:f2:5a:c4:f2:a4:11:9c:e8:6d:c6:00:d2:6c:
43:16:e6:20:58:6a:ed:22:b3:ef:dc:30:90:47:98:33:d3:b7:
31:4d:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:36 2025 by rpki-client