Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa
File: cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa (raw, json)
Hash identifier: 4MZ7/wSItAGzYGu7+HsPx5u6VqrQ0nWqetVCp4cwnEU=
Subject key identifier: FA:88:EB:04:68:2B:33:61:37:91:CF:31:AD:CA:AF:81:A5:8A:57:98
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB5982365E992FFD321E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1008:a020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:59:82:36:5e:99:2f:fd:32:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2f5a46ba-df06-4aad-899e-73ea3da1db61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:4d:b9:ea:ed:47:ca:3f:e6:06:f2:fa:af:
1a:2f:7d:f3:71:27:da:17:46:01:f5:52:30:1d:92:
af:06:37:88:17:01:b7:86:c6:e7:50:5d:ee:7d:0a:
16:6a:aa:94:a5:95:e0:c2:40:42:35:70:df:e9:17:
41:af:c0:6f:15:87:21:17:74:53:49:e8:88:0d:dc:
58:68:74:25:49:be:8a:ca:6c:c8:76:42:75:84:d2:
6a:dc:48:7a:28:30:f0:51:bc:a1:74:85:9a:0a:c7:
1c:a5:20:8f:f8:11:00:17:af:b3:25:c8:eb:bf:b4:
c3:eb:90:89:96:ef:41:51:10:82:43:dd:af:b4:53:
c2:8a:25:52:87:71:0a:19:d3:2f:5c:a6:d6:93:18:
99:ab:58:73:94:4e:07:f1:39:a2:06:6d:90:38:79:
35:7b:f7:de:e3:3f:b7:70:bc:6b:d8:67:b1:3b:60:
a4:86:ef:26:00:d9:ea:51:f8:5d:5a:85:6f:94:25:
dc:65:dd:10:ca:58:a2:7c:2c:a6:fc:93:48:92:88:
8e:08:41:38:4c:e7:35:37:21:54:e4:bc:4a:91:ea:
80:51:25:2b:78:7a:19:a3:a0:df:03:d3:1a:1d:59:
4b:48:7c:7b:a8:48:8d:5c:4f:8b:51:c9:73:31:21:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:88:EB:04:68:2B:33:61:37:91:CF:31:AD:CA:AF:81:A5:8A:57:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfa6eb6b-f234-3d68-ad5c-01ad9137054a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1008:a020::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:88:01:01:26:82:2e:ff:93:d4:30:b3:e5:c7:af:f9:e6:30:
d4:43:ab:01:60:8f:43:9b:23:c6:7d:67:e1:0b:79:b5:cd:de:
5a:84:e2:9d:91:86:d5:f4:bd:ed:57:6e:ae:84:e1:7f:b6:ee:
0a:eb:3b:f5:22:e5:06:5f:41:58:ab:f0:a0:4a:4f:e6:85:ec:
e5:61:35:d5:70:d9:75:00:f4:66:b3:47:ec:8e:ed:7c:18:85:
87:3c:8f:1f:ae:fe:fe:1c:0e:08:32:6c:4d:9c:d4:d9:8c:48:
5c:e1:30:ae:8a:2d:b2:d6:35:d1:18:06:46:5e:4a:ff:b5:1c:
66:9c:b8:9f:9b:f1:68:6a:6e:74:63:93:eb:0a:7d:57:15:47:
ad:b8:d2:e3:1a:3b:9f:f4:c9:69:d4:33:7d:19:f6:59:11:45:
68:e5:1a:dc:e3:39:52:5e:4c:8d:df:f4:41:81:bc:c7:4b:b0:
a7:10:4e:8a:67:99:e3:d6:35:91:50:f1:34:98:41:92:bb:7a:
7c:4b:f0:10:ab:5b:7a:b9:d7:80:48:ca:5e:82:ab:7d:66:8b:
a5:b5:b6:9f:ef:69:00:a5:ae:20:e3:20:79:99:4b:15:41:86:
ee:b4:aa:5e:7f:2a:f7:76:6e:6b:57:25:cf:f1:f0:75:31:98:
2a:eb:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:01 2025 by rpki-client