Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e060f2b4-1e6f-3074-89eb-f8a0197769d1.roa
File: e060f2b4-1e6f-3074-89eb-f8a0197769d1.roa (raw, json)
Hash identifier: YOErq5CJfdVzPWEf+yCn2m12kL/dgK0nw/hnYGaJCOo=
Subject key identifier: 0F:9C:89:53:91:DA:03:4F:C6:EC:3E:FE:F4:A1:98:02:0B:3C:AE:20
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607CE2E0E77EE45953D480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e060f2b4-1e6f-3074-89eb-f8a0197769d1.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1011:b120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:7c:e2:e0:e7:7e:e4:59:53:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=76a4bde8-c425-43f8-ac05-60c95f624302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:ce:30:c5:8d:aa:05:88:5b:1b:db:1b:f7:
15:76:24:af:fa:91:66:14:41:49:fa:0d:2d:75:7e:
90:81:ed:0b:55:ea:c8:0a:86:a6:28:04:51:db:4c:
61:de:c3:af:f8:5e:45:84:ea:7e:ce:5b:35:73:10:
58:76:36:c3:ac:06:ca:0d:c3:23:ca:89:5b:ae:41:
b3:c5:be:29:ca:39:fd:9c:6f:9d:fa:d6:fd:b2:98:
76:a0:25:74:2a:b7:ff:e7:25:38:a6:05:57:ca:6a:
b8:e4:35:fa:19:95:b9:23:b9:03:bf:4f:4c:f2:0e:
0e:ec:c4:fb:d3:de:82:3d:0a:4c:ce:79:2c:4b:22:
a6:ba:a3:a5:e6:76:e9:17:c6:8a:c2:3d:8b:81:6f:
08:b9:45:c5:0c:dd:28:ba:20:0c:b1:12:25:50:4b:
f6:f3:19:e7:17:ea:ed:35:98:e9:1f:4c:b7:96:49:
49:5b:75:57:f5:ab:c6:6e:1f:bd:d2:06:40:4f:30:
df:f5:54:2c:74:b5:11:13:1f:51:11:5b:06:43:60:
1b:b6:7b:33:29:e6:9a:f5:23:2c:f4:30:d1:e9:ad:
34:18:49:25:1a:6b:72:0e:82:20:53:41:bf:7c:04:
58:fc:1d:c4:01:59:76:9a:8d:2d:f5:81:5c:61:7b:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:89:53:91:DA:03:4F:C6:EC:3E:FE:F4:A1:98:02:0B:3C:AE:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e060f2b4-1e6f-3074-89eb-f8a0197769d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1011:b120::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:9d:7f:2b:c2:9e:08:eb:61:d1:42:38:77:d6:2b:38:c8:29:
56:9d:1b:0d:0c:d0:b3:a2:b7:cd:ea:39:01:f0:01:6f:6b:b2:
4d:2f:44:a0:58:2a:d2:51:62:82:f2:1f:59:8b:00:a9:b6:5b:
37:5f:27:0b:f5:6f:6d:62:70:0b:93:0d:30:78:ae:73:3a:23:
7e:6d:c9:3b:34:bb:4d:e5:70:4c:8e:49:de:5a:1b:9b:13:3c:
53:b4:f2:37:10:5c:66:8d:b3:86:82:a8:3e:93:91:7b:2c:0b:
a9:c3:9b:97:d0:d6:73:43:3f:f8:d5:93:1d:bd:d2:c5:d1:58:
c7:d7:6b:60:a2:17:1d:88:a8:2f:c4:5a:1b:e8:a5:01:86:c3:
2b:1e:d0:01:42:d8:49:87:90:f4:7f:9a:07:97:71:c5:66:f5:
57:92:bb:c4:55:32:a5:83:3d:44:21:87:d9:50:aa:76:b9:89:
82:34:6a:a6:c9:a7:19:ef:f6:4f:99:91:4f:cb:e2:a5:65:0e:
b0:df:b6:a5:c2:f1:0d:0d:0a:24:2d:a4:4f:a5:f1:c3:43:e7:
19:8a:42:fb:39:28:bb:cd:b4:c9:b3:9c:94:00:4d:29:9b:dd:
20:30:44:5b:14:19:a8:d5:08:54:2c:d6:c9:88:fa:da:e8:ca:
47:42:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:01:11 2025 by rpki-client