Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d34134e1-d70c-3cf6-bb0a-8cd7c985b241.roa
File: d34134e1-d70c-3cf6-bb0a-8cd7c985b241.roa (raw, json)
Hash identifier: IpvjKcQmW6ZmJrlQFtbusTLzzxxITLcSoesamrTYaoU=
Subject key identifier: 80:2C:5A:71:5A:8D:62:15:EF:1A:59:F6:EB:CA:8F:46:CB:3A:33:CD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696081BCC8F176908E7CF460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d34134e1-d70c-3cf6-bb0a-8cd7c985b241.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1012:f010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:81:bc:c8:f1:76:90:8e:7c:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=64a6ec8d-50fd-46cf-a36f-dbda4f6dc7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:7d:3d:33:64:0d:54:6c:ae:2b:35:c8:6a:
b2:03:2d:7b:0b:28:a1:bd:3e:3f:14:2b:ae:f0:8a:
3b:4f:7a:50:bd:f0:f1:f9:76:de:32:d4:7e:1d:b0:
24:3b:f4:41:56:08:0a:6b:a7:1f:64:10:f2:88:a8:
92:6f:7f:39:5a:9b:e2:4a:33:3a:83:45:dd:03:60:
9e:64:2a:78:fd:3f:a9:44:6b:e6:ab:a5:04:32:79:
8a:a3:1b:ca:78:4b:b4:3e:3c:65:f4:0b:33:96:12:
87:5c:90:54:32:5c:d8:83:8a:34:5c:e4:71:f9:1f:
fb:41:86:eb:c6:18:b1:4b:a1:35:88:70:84:b5:43:
7d:58:58:e5:8b:20:b0:b7:ae:06:47:fc:6f:e3:e1:
1a:cf:54:dd:6a:ad:8c:7c:47:5c:4b:e2:22:28:e8:
bd:9d:eb:4c:b5:e1:91:d2:66:db:3b:f2:78:e7:c8:
94:53:94:ac:54:96:33:ed:86:95:13:92:81:53:48:
d7:71:22:0c:54:ed:89:bc:6d:a4:ce:18:16:55:d1:
84:59:e1:e6:6c:f5:0d:24:69:f8:dd:9d:2f:b5:51:
0d:23:8f:52:6b:48:29:c5:ea:0d:55:15:06:00:2b:
79:ab:b6:c5:2b:5b:cc:89:5c:93:6e:6a:6e:89:d8:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:5A:71:5A:8D:62:15:EF:1A:59:F6:EB:CA:8F:46:CB:3A:33:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d34134e1-d70c-3cf6-bb0a-8cd7c985b241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1012:f010::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a6:5b:ef:e7:82:bd:09:77:03:40:94:cf:7c:9a:32:f2:70:
dc:b6:39:7f:41:4c:d5:cd:a9:25:ce:11:cf:21:05:46:8a:6e:
4b:ee:65:eb:23:d8:ec:ac:fc:28:1e:21:c4:71:df:db:b7:6d:
be:bd:e3:ac:47:b1:ac:0b:d6:3c:55:4a:1f:2f:3e:cf:42:b7:
0f:8b:a2:f3:09:6c:f3:1f:ea:df:97:36:30:0b:01:ca:24:25:
20:b6:9e:83:8a:42:80:96:03:6e:7a:fd:be:df:93:fe:d8:99:
9d:17:3b:89:26:e4:29:54:05:06:a4:15:c6:5b:34:09:72:11:
91:b3:1c:fe:db:5a:3d:54:20:d0:19:48:18:ea:7b:d0:b7:86:
b5:04:f2:14:a7:92:99:7e:f7:de:ec:4d:3a:ff:4c:3d:ee:78:
a7:c8:84:ef:70:09:52:7f:bf:b1:c8:f5:ba:aa:20:38:65:09:
46:f9:98:ea:32:08:a8:f3:e5:2f:6d:f5:88:bc:1d:58:2d:1f:
62:3f:6a:a0:92:cf:4b:d9:f4:cb:17:56:08:80:97:4a:a8:df:
5e:d9:bd:3b:7a:4b:64:33:69:7d:de:1a:24:9c:6c:55:24:1f:
32:24:ee:48:2b:ed:51:d7:75:75:6b:67:07:85:ae:6a:73:e0:
36:e3:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:47 2025 by rpki-client