Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5dce83-fa4d-3045-8aa3-0692804be1ae.roa
File: db5dce83-fa4d-3045-8aa3-0692804be1ae.roa (raw, json)
Hash identifier: Emqpi/YjrDfHxY9IjL6+GUCMxrnIP6ccm/HoHd9rAJs=
Subject key identifier: 86:72:2C:0B:2F:BE:4F:29:F0:C4:71:6B:ED:1B:F0:33:0E:07:72:17
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB4F8F6857058A4702FB60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5dce83-fa4d-3045-8aa3-0692804be1ae.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1003:a410::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4f:8f:68:57:05:8a:47:02:fb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d23840b0-9b26-4b3b-98c3-235e6073a086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:e8:b2:5b:0a:f9:5d:b3:3d:5a:a9:ef:ac:
90:d1:28:d0:27:dd:40:b2:a2:7f:d1:8c:ac:ef:50:
74:0e:87:ee:55:7a:51:29:af:a6:84:90:8d:8e:22:
9e:f8:19:fb:0b:d6:49:58:80:77:5b:cd:de:43:e5:
65:a4:ba:49:a5:62:cf:58:50:75:03:31:89:25:fc:
37:2e:07:cc:7c:de:b2:d1:61:c3:3e:9a:c3:04:4a:
5a:a3:4c:ff:57:7b:09:2e:46:95:83:91:3c:f8:10:
85:d6:19:b2:8d:b1:e9:f7:c8:44:c8:52:66:06:b5:
a8:65:18:24:72:98:fb:44:28:3f:1c:a9:cd:fc:48:
0e:41:75:ae:60:56:03:3e:39:42:e4:63:44:b3:99:
4d:8b:2a:77:7a:a9:b3:d5:ce:3b:af:b0:82:51:ca:
f3:da:4e:5b:89:b0:9a:d1:4d:d2:a7:5a:ff:b0:68:
f8:de:ef:29:1b:e1:94:53:73:96:95:d8:48:8b:4b:
c3:09:5e:10:af:5e:7e:d6:8e:33:19:65:d6:02:0f:
20:d3:91:b4:22:9b:55:18:c3:80:60:9a:88:de:0d:
37:68:48:54:db:c0:72:cb:ac:28:e1:99:34:6a:52:
18:05:ca:29:5c:24:f0:30:4d:90:d1:ec:26:fc:fe:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:2C:0B:2F:BE:4F:29:F0:C4:71:6B:ED:1B:F0:33:0E:07:72:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5dce83-fa4d-3045-8aa3-0692804be1ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:a410::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:5a:2b:e4:1c:42:c8:34:5c:d7:80:59:88:bc:0f:1d:62:28:
3e:0b:4a:48:41:2a:d8:f6:2d:1f:d4:72:0f:61:14:85:89:ba:
cf:1d:d8:e4:d2:7e:f6:5a:90:40:85:3c:0f:db:f5:c6:dc:94:
d1:c8:e1:49:44:14:ea:93:80:4b:a8:09:10:e0:23:f0:0e:46:
62:c2:0f:5b:e7:45:b4:dd:8d:6d:e7:41:45:a8:3b:1b:f2:99:
96:a3:d2:2c:41:6f:f6:ec:2c:c4:28:c2:da:d7:0d:42:46:03:
ab:99:67:bc:e5:4e:b9:af:47:39:8f:1a:05:ad:f8:57:41:57:
ce:a1:9f:66:f4:8f:b0:e5:7a:74:a8:82:75:01:cb:c1:1e:1b:
cc:ff:05:e8:bc:dd:6c:22:05:4c:33:cb:e7:48:b1:9c:29:83:
72:6d:2d:e8:f2:80:cb:9a:d5:8d:42:0d:05:a0:93:9c:c3:33:
8c:04:03:47:11:1f:da:aa:d1:9c:41:0d:6a:af:15:17:b3:66:
28:73:6e:82:ba:a6:e2:70:89:f6:41:35:22:92:5f:aa:9b:d6:
2d:e0:62:39:ec:e8:8c:61:8c:a7:6d:52:69:4e:17:ba:c3:da:
f9:02:6e:d3:af:06:14:65:c5:fa:03:e1:ab:51:b1:25:d2:2a:
8b:52:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:37 2025 by rpki-client