Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb4b10a-e3bd-3c9e-b20d-d527c68ca004.roa
File: bbb4b10a-e3bd-3c9e-b20d-d527c68ca004.roa (raw, json)
Hash identifier: 8nNHfdpLG2BKw3c4kfZ3glFlKB3UREo/PWMzYLv1PGA=
Subject key identifier: 47:AC:91:0B:90:35:9A:6C:05:CC:D3:09:A5:85:8F:26:99:41:3D:EA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB820D43A2E3EAD3AAF020
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb4b10a-e3bd-3c9e-b20d-d527c68ca004.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:f000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:82:0d:43:a2:e3:ea:d3:aa:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=fa5ee668-1b3d-4e18-b065-1f3d139a353c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:46:59:05:2e:0a:fb:82:a4:b6:0b:6e:af:
5c:2b:a7:23:34:55:4f:eb:73:87:b7:68:0c:f7:d0:
9a:64:83:8a:4f:cb:d6:1f:3d:de:31:7d:fb:e5:a1:
3c:0b:5a:66:14:13:a0:56:39:20:1b:4e:c1:d5:64:
9c:e4:7c:e7:80:14:3c:49:7d:b4:87:e0:58:bd:b7:
c5:fd:f3:3d:60:43:a5:ea:33:49:b4:39:75:69:30:
d6:cf:69:34:9a:cd:6c:6a:d8:a7:d1:61:d8:40:be:
0f:60:a9:e5:d3:bb:59:53:13:92:c3:0d:ae:ec:68:
7e:d1:b5:94:2d:52:0a:a9:54:c1:ab:1d:46:5e:69:
be:68:57:7e:f2:bc:8b:ea:8a:4b:e9:a5:bb:28:7b:
a0:f1:0f:b6:58:a6:6a:c5:57:35:cf:b8:22:88:ad:
d8:d7:55:f5:b1:ce:21:59:af:8f:43:93:8d:a0:ce:
67:be:80:3b:95:06:a1:3f:e1:3c:43:6c:c9:df:ca:
eb:7e:63:c1:a8:0a:35:77:9a:db:c5:18:c9:4c:12:
3a:de:fc:ad:58:cb:b7:2e:ef:a2:de:91:e5:df:8f:
82:09:21:4f:43:be:4a:31:53:97:31:03:73:1a:05:
41:85:fb:d1:b4:89:df:99:05:33:39:45:a5:35:d4:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:91:0B:90:35:9A:6C:05:CC:D3:09:A5:85:8F:26:99:41:3D:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb4b10a-e3bd-3c9e-b20d-d527c68ca004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:4c:e1:b0:ea:d4:a5:37:bc:85:44:a8:14:d1:09:67:1c:d7:
28:c6:65:62:4f:8a:f2:7c:fb:7e:38:d0:55:ff:ff:b1:b0:48:
79:44:18:93:94:72:e4:7d:94:fa:cd:36:4b:d6:af:45:5f:9b:
bb:a7:d0:77:43:fd:de:ec:a6:0e:10:83:64:91:c5:36:ac:63:
a6:30:b7:ab:e9:21:cb:c3:c4:4e:fc:78:d9:d5:44:43:61:c0:
86:90:dd:8f:bf:f1:74:80:9f:b0:45:44:e3:04:fb:86:1d:40:
e8:d5:e4:05:ce:ad:78:0d:48:35:12:87:1a:68:a7:7d:81:b7:
fd:af:a7:e7:7a:e5:0a:0c:46:36:de:93:fe:ac:72:2c:95:cf:
12:73:a0:72:2f:b1:6c:35:d0:6a:47:96:ef:55:3a:bd:ff:ff:
d2:7f:0e:21:f0:ea:e7:98:50:a1:32:e5:bb:81:56:6d:e7:2e:
93:a4:dd:bc:30:bd:b4:ba:d5:0c:9b:1a:72:0f:50:eb:fd:cb:
69:19:f2:23:a6:ce:30:21:28:82:89:da:bf:24:44:66:07:9f:
78:94:fe:73:f3:ae:02:05:98:b9:70:81:45:5b:ad:f9:d7:07:
40:db:e9:15:2d:96:0f:6f:11:77:fe:68:d5:df:cb:94:aa:b6:
cb:89:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:53 2025 by rpki-client