Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5a5b1a7-699f-3375-8fba-4922d1f5550b.roa
File: b5a5b1a7-699f-3375-8fba-4922d1f5550b.roa (raw, json)
Hash identifier: NVkrkCiCGpo4P2d90EclSLrXw5JGGYm8412VYm/fI5w=
Subject key identifier: F9:D7:2C:35:D2:E0:69:E2:6E:96:4A:37:12:D9:F4:3E:19:E3:E7:CE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB4F1D0FB82CAB79B5C680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5a5b1a7-699f-3375-8fba-4922d1f5550b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:9100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4f:1d:0f:b8:2c:ab:79:b5:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=fd347ab6-27e0-4960-9745-2e313fa0b8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:47:7d:a0:9c:41:9e:86:bd:89:fb:41:e8:
2f:82:13:36:b3:2c:2a:36:59:b7:e4:49:88:6c:d7:
5d:b7:84:f9:c8:b8:fa:c1:00:b3:23:c0:81:c1:37:
b8:c8:ce:7d:0a:09:fe:38:7d:6d:ff:a2:20:3a:24:
ae:9c:ab:33:85:74:c6:71:95:4c:f8:c8:82:0f:1c:
e0:03:57:6c:ce:31:0a:a2:26:19:a4:14:0f:5b:60:
58:b0:01:5b:3c:9e:93:8b:bb:47:0c:74:26:67:7e:
c5:c5:3d:74:26:3c:0b:46:09:48:c2:12:75:0a:11:
6e:bd:2c:fa:2b:c7:77:8e:a6:1e:96:10:a4:51:4f:
27:0b:7a:b5:9b:ca:9a:9b:34:60:5c:88:35:4f:93:
64:8f:9e:9e:b4:28:bf:11:e7:0b:cf:2e:be:7f:f2:
46:1e:b3:0a:4c:88:d5:23:87:87:4f:fb:3d:ca:12:
45:90:b0:68:c3:1e:32:a8:a7:f9:17:c1:d2:10:15:
5d:51:95:65:3a:41:03:dc:8e:4d:5c:73:b5:09:c2:
08:c1:ec:25:c0:ed:a0:35:92:99:96:12:cf:a6:55:
fd:7d:3e:fa:e9:ee:7f:e3:32:e0:48:19:7e:42:51:
4e:c0:8f:2b:c3:9e:59:94:52:53:f3:bc:5f:33:9b:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:2C:35:D2:E0:69:E2:6E:96:4A:37:12:D9:F4:3E:19:E3:E7:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5a5b1a7-699f-3375-8fba-4922d1f5550b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:9100::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:54:b1:44:fb:0e:24:e5:6d:b0:28:81:95:6a:e1:78:81:c1:
9b:3f:e0:cc:ee:97:0d:7b:4f:34:81:4c:8a:94:0f:62:39:7e:
92:38:ac:ea:be:68:eb:89:cd:0c:53:ad:4e:5d:79:8b:8d:ba:
67:f7:69:88:a5:ca:f0:4a:27:50:73:5c:7d:14:75:8d:63:b7:
fc:85:df:77:44:5c:b8:19:76:89:db:0f:80:8e:fc:f5:2b:9b:
18:ec:7b:fb:0b:59:00:6a:a7:c6:77:9e:b9:cd:4b:a8:ba:f0:
1a:33:c5:b6:46:d2:58:40:4a:1a:fe:5a:1d:ba:ad:d5:38:24:
7c:52:c4:94:52:7d:70:fa:c3:b0:0d:82:dc:ee:38:c8:44:98:
9b:f6:92:ea:94:39:a1:a9:0d:87:69:0d:66:b2:e2:1c:b8:69:
e5:7a:b5:88:a3:4c:2e:ee:a4:49:31:ce:65:7b:8c:a7:1c:83:
66:e6:2b:b7:ae:a5:00:53:9b:4a:b0:70:7a:84:ac:ee:ba:bc:
5d:28:91:8e:9b:55:e8:14:90:a8:ac:91:c9:8d:f5:da:c8:da:
3c:bc:be:66:c6:36:c2:65:bc:32:ac:1a:a5:98:0b:e5:74:0c:
c6:6c:b7:1b:87:29:2b:f9:70:95:62:cb:9a:6f:6b:84:37:d2:
e0:a9:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:17 2025 by rpki-client