Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9994df6-97ef-374b-8673-d2ab66b124f1.roa
File: d9994df6-97ef-374b-8673-d2ab66b124f1.roa (raw, json)
Hash identifier: KngePCcwanjdJ8pglbCYTfC2QeuztDamyixW4BoAZd0=
Subject key identifier: 6B:34:02:44:14:55:43:8A:25:EE:D8:B3:79:3A:13:6A:A7:E1:64:51
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7F93071EDFC267FF0B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9994df6-97ef-374b-8673-d2ab66b124f1.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1001:b150::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7f:93:07:1e:df:c2:67:ff:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2fcac3ed-9a11-4cfd-b514-56e16c4abc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f2:46:71:25:ad:f4:8a:7e:9c:51:71:36:8f:
e9:f8:a4:38:57:2c:f8:e7:56:37:8a:c9:9b:dc:8d:
71:60:b7:77:97:e4:00:ca:7c:b3:1d:7e:2d:9c:22:
92:b5:da:4d:c0:46:6e:fd:08:c6:61:9f:55:22:b4:
81:c2:3b:cf:c9:a6:6f:dd:07:d3:bb:cf:f4:da:9d:
e3:9e:1b:88:84:56:8a:d4:23:55:3a:51:3b:2e:6e:
d5:54:ae:8d:2b:c9:be:15:a8:e3:84:46:53:7c:8c:
90:99:91:93:68:58:4e:2f:a4:28:d3:83:c1:a4:48:
14:97:2b:b0:8d:e9:0f:30:77:13:97:9f:da:fe:26:
77:30:43:10:f9:6d:f7:f2:2f:54:07:76:f9:ea:5d:
bf:9d:65:d9:28:9d:8c:eb:34:3c:18:8f:a5:c1:f5:
d1:56:fb:7e:68:bb:8b:eb:22:d0:1a:11:b4:b1:c6:
45:bc:ae:cd:25:67:29:a7:1c:4c:a3:29:88:14:07:
d6:2b:fa:a1:de:9a:67:b9:83:7a:4a:08:89:68:97:
ce:ad:0c:85:8d:45:88:8b:ff:0d:e1:72:0f:2e:e5:
12:90:13:b1:77:30:e2:07:9c:cf:e8:86:2b:97:5f:
31:be:37:30:6a:39:04:92:39:74:76:a2:f3:77:33:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:34:02:44:14:55:43:8A:25:EE:D8:B3:79:3A:13:6A:A7:E1:64:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9994df6-97ef-374b-8673-d2ab66b124f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1001:b150::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d8:4c:32:e7:04:2d:9d:20:b7:83:e9:ba:23:23:0f:b5:49:
e0:fa:c2:4c:cc:fc:4d:a4:00:29:6c:5a:64:55:ec:98:c1:2a:
b8:4a:15:f5:4b:38:33:ce:ac:b6:0d:4a:19:75:9f:6b:f6:70:
1d:ec:02:e6:a6:01:c6:61:5e:31:44:80:f2:e8:25:e7:71:4a:
b1:91:a9:45:b4:69:83:d5:62:87:77:94:c2:18:90:fb:2b:ea:
d9:b9:d2:11:1f:a9:be:dd:ea:a7:56:90:f8:55:d2:39:b1:ad:
92:e2:d2:7f:d3:69:a4:07:85:df:be:22:c1:fd:89:a4:c6:f1:
e6:e9:87:f1:e3:85:e6:f6:09:39:b5:ed:ca:aa:e1:a6:ce:7f:
31:7e:eb:4a:77:56:09:ce:c2:76:b4:49:c3:4e:49:f5:c2:9c:
5a:c8:65:f6:26:42:31:2d:56:00:ae:c9:19:fa:a0:58:b5:04:
4a:9f:4f:72:ff:69:3a:e0:69:f7:af:1e:73:ad:11:c1:2a:8f:
8f:1e:4c:be:1f:51:79:86:66:03:5e:ee:f5:06:a3:f0:e9:53:
29:aa:5a:3a:6c:82:24:84:c4:0a:d2:00:ea:6a:60:c1:2e:e4:
eb:3d:db:91:ae:23:89:46:de:79:d4:26:87:64:ca:fe:00:7a:
b3:22:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:29:11 2025 by rpki-client