Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa
File: c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa (raw, json)
Hash identifier: mcAbcXDiISasjc5A+pK7V24ozbIXrZwZmBASjUT7Ytw=
Subject key identifier: C8:20:04:A6:50:3C:78:DA:97:E3:92:57:9C:28:A1:8C:E0:16:49:86
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607D0B7F79DB57D50FFE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1011:b130::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:7d:0b:7f:79:db:57:d5:0f:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=55da336e-58b3-4903-b2f3-d901b99b252e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:db:1b:e1:67:b8:12:f5:74:18:68:cb:60:
68:24:a2:af:d3:57:21:29:34:d5:7a:54:c7:d4:d6:
2f:6b:2e:07:e7:b5:72:fc:a9:4a:4b:d9:03:7f:36:
1c:37:f4:58:2d:ac:73:a7:26:e0:1a:27:e4:6a:c9:
1b:6f:c9:b8:e2:bd:2a:77:e4:e0:49:cb:ae:89:35:
0f:95:1e:21:17:ac:45:1a:3d:3c:e8:6f:3d:ed:d2:
a0:a2:2e:de:c2:53:29:fc:8e:41:11:63:ce:8e:bc:
41:c0:e0:8b:11:6a:16:66:26:f7:59:29:93:44:80:
2f:8d:3a:39:51:0d:99:69:e4:03:74:79:bb:59:08:
5f:c0:d2:94:bb:c7:37:f2:d5:e5:1d:f3:81:05:f2:
12:53:bd:d1:94:a5:4e:af:f0:ea:fa:54:de:12:08:
a3:43:94:cf:52:53:f1:59:65:66:8a:66:5e:f1:4c:
e5:3a:a0:2d:00:e1:c9:1a:f5:10:9e:e6:63:b4:60:
42:cf:dd:fb:cc:b7:f3:a7:a5:6e:ec:f0:2a:bb:49:
12:8a:58:f0:0d:ac:44:eb:81:6a:ef:43:a5:e2:60:
63:20:c2:f8:cc:39:81:df:31:0a:a9:9a:8e:ac:90:
de:f1:19:15:19:4a:35:98:3a:69:df:17:81:26:7d:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:04:A6:50:3C:78:DA:97:E3:92:57:9C:28:A1:8C:E0:16:49:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1011:b130::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:8d:61:e5:ab:ba:6f:da:84:d2:a8:bf:15:22:1a:46:27:1e:
3e:11:b7:73:fb:e1:f5:ea:c3:a1:d1:cf:fb:b3:6e:86:b4:e1:
50:d0:00:58:47:4e:36:b1:53:16:07:3e:76:85:3e:7e:c6:a8:
31:b5:bc:40:bd:a5:69:a1:32:58:db:a9:ad:42:dd:51:12:ca:
45:56:b7:24:36:af:82:3d:29:fa:c8:46:da:f5:6d:a6:3d:28:
d9:f4:1c:95:80:45:1c:e6:49:cc:7b:ad:c9:27:96:df:2f:77:
58:bb:0e:cc:81:e4:be:da:a6:75:a2:ea:41:fb:a5:f4:79:b3:
9c:84:4d:96:7b:a4:29:4a:27:ba:03:cf:e4:37:20:bc:5e:3b:
41:e7:cf:b3:a2:79:c6:39:1f:fe:f8:e1:74:64:45:d4:79:86:
35:8a:fc:5a:40:10:d7:09:6a:0c:22:0d:8b:1c:bc:0a:bc:87:
f5:68:83:cf:20:5e:5c:4a:31:d0:38:dc:a4:58:91:8f:8e:99:
53:c5:74:8d:1a:b4:69:01:3c:8d:37:3c:c9:45:44:73:e0:b6:
4b:13:c6:03:3c:04:2c:4a:2a:28:cc:88:ce:34:c6:4c:8a:e7:
74:3f:d0:2d:60:51:dd:29:f4:12:39:16:34:72:e1:a3:4a:93:
82:11:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:13 2025 by rpki-client