Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447a904-6317-3cfc-9ecb-6cd871bb436f.roa
File: d447a904-6317-3cfc-9ecb-6cd871bb436f.roa (raw, json)
Hash identifier: TQGmRlnf6NAWnHeF4qzFexrk8B5P7rJseGsEzoD0Ea0=
Subject key identifier: 4D:41:9A:DA:5E:DE:3F:7D:93:1A:16:A2:93:9C:BE:7C:FB:74:B5:D5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960887A4E6576DF01CBB340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447a904-6317-3cfc-9ecb-6cd871bb436f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1017:b498::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:88:7a:4e:65:76:df:01:cb:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=69dc0a36-453a-42ae-8dfb-a4953acb7e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:4c:3e:90:ec:14:af:1c:40:37:6c:8f:28:
dc:32:42:63:fb:3b:b6:64:26:c4:47:d0:e6:a0:05:
6d:07:bb:88:a8:27:1e:15:74:bf:d7:c4:55:db:1e:
75:1e:34:07:5d:5c:b8:33:4b:50:4e:7f:9b:08:39:
e9:04:fe:ac:6c:c2:b7:67:4a:7b:f2:a3:62:ff:19:
ec:95:c6:a3:87:7c:02:60:39:2f:af:34:7a:e7:34:
40:9e:0a:4e:f9:df:7b:8e:53:9e:98:0d:dc:c7:7e:
3d:01:a0:14:8f:9a:66:98:a4:97:d2:ac:c6:c1:7d:
ff:40:95:ef:f3:47:0f:4f:aa:74:81:fe:04:cf:db:
0f:32:5b:59:9d:1d:19:ee:5c:3e:f8:a8:8e:76:8f:
4a:60:65:41:63:41:65:9f:7a:e5:96:ad:28:c6:23:
14:52:ed:e0:26:55:7e:ed:7d:c9:cf:90:8b:ea:ba:
51:fa:13:be:4b:e6:8f:8d:4f:98:8d:75:4f:6c:82:
44:e9:05:f8:78:ab:33:6b:76:51:eb:98:7f:ac:e3:
0b:ef:2d:54:32:4d:13:e3:72:62:51:87:4f:ab:93:
f3:e1:5b:b0:7a:4a:3b:2e:d0:8a:96:40:a7:d4:bf:
d0:9a:18:2a:88:50:e6:33:9e:cd:69:5e:44:cf:c0:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:9A:DA:5E:DE:3F:7D:93:1A:16:A2:93:9C:BE:7C:FB:74:B5:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447a904-6317-3cfc-9ecb-6cd871bb436f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1017:b498::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ed:b4:82:0a:b6:a4:b5:b4:7b:12:ba:fa:88:19:26:ac:cf:
6e:7e:00:b0:5a:0f:48:a1:13:f0:e7:d9:9a:78:dc:e7:de:54:
fd:fe:05:98:8d:1c:db:d3:f5:91:ed:10:0e:ce:e5:f4:e3:a6:
1c:c3:7a:ab:3c:cd:9f:b5:1d:45:51:33:f1:ea:7d:cd:8c:2c:
83:4a:d3:82:9b:4e:e1:3c:9c:95:7e:66:99:40:63:a7:e8:43:
b0:26:9f:72:9d:fa:6d:09:3b:64:c7:e0:64:58:d8:aa:97:63:
df:fd:78:ea:12:92:7b:dc:5f:d8:32:b2:52:c6:a3:0d:53:e0:
71:29:57:59:e0:2f:91:ad:92:af:9e:46:71:1a:e1:b0:22:a6:
a9:f3:bd:9c:94:9c:af:ef:0c:0f:ae:e1:14:63:f9:d8:9d:d0:
ac:c9:54:55:65:0a:6a:82:1e:d4:3a:56:3b:2f:3a:d7:17:bb:
40:a2:cc:09:5e:08:d1:c9:ff:7f:d7:89:ff:51:f4:6b:a0:16:
7a:4c:73:c4:89:1c:64:fc:e1:16:08:29:17:59:12:5b:3d:a3:
e7:df:5c:51:db:18:ab:9d:3d:f6:6c:1a:72:cd:cf:61:2e:36:
e3:f8:f6:f8:53:37:77:1a:98:67:bd:a3:9b:b5:dc:03:f1:18:
31:7a:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:08 2025 by rpki-client