Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa
File: e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa (raw, json)
Hash identifier: TrFc9ar7BenOWVq9i4cFaTEygX9v+wGr1OQNTsjdlYw=
Subject key identifier: AC:3A:40:3D:0A:58:E0:DA:8A:65:B1:3E:61:F0:9A:AF:D6:3A:5F:5B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848A400CF1C08B6E8D227073CF0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:100d:f000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:cf:1c:08:b6:e8:d2:27:07:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=f8254e2e-3ea9-49f7-ba47-1ec74377a4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:1d:c5:ac:35:25:ac:35:75:cf:67:90:1b:
12:08:b7:77:db:a5:7c:5f:8a:5f:db:f7:b2:b0:37:
8c:18:f0:04:c8:26:e3:6d:a1:79:f0:35:56:5d:e5:
54:80:07:c9:12:cf:79:8f:74:38:4b:c9:04:25:b2:
a6:58:4e:8e:33:52:41:35:e3:31:83:3f:43:dd:b8:
1d:60:07:5b:9a:a1:e7:4e:74:be:77:b4:1b:0d:a4:
22:07:a6:45:be:1f:5d:64:ce:d7:09:da:0a:d0:4b:
9d:b6:a3:5e:bf:de:76:1e:68:76:cf:f6:32:ed:25:
9e:e1:34:30:a8:2e:5f:42:73:81:7a:e4:2d:32:6d:
9b:8d:4d:cd:aa:d1:ff:67:d8:2b:04:9d:56:35:c5:
ec:cf:6f:02:c6:22:6d:89:ca:50:c9:59:91:45:d5:
6d:1c:cc:0c:d7:e4:e9:24:66:65:a8:bc:7d:07:f5:
1f:26:3c:2f:07:07:da:54:5b:98:70:12:74:ed:bc:
cb:04:3d:f9:d3:36:b1:cf:67:90:35:55:6f:83:c2:
84:4f:d0:b2:db:54:e8:a3:81:39:c6:b2:6a:ae:c7:
d7:7a:fd:1d:d6:40:a0:b7:7c:df:f7:94:1e:90:d4:
23:a8:c3:56:06:0e:9a:e7:59:c6:3f:b7:db:b5:02:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3A:40:3D:0A:58:E0:DA:8A:65:B1:3E:61:F0:9A:AF:D6:3A:5F:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e34e82d7-2829-35aa-bc3a-2cc74c307b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:100d:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:f0:57:0a:a4:9e:92:3b:ba:d7:9e:80:26:bc:95:da:21:16:
2f:bc:71:74:f2:69:f5:67:bc:67:89:e1:48:3d:b8:2a:19:e5:
ab:25:e5:6c:18:76:df:69:56:d7:8e:3b:b7:e8:ac:f8:65:7c:
b1:96:dd:4b:62:c8:2f:46:df:d1:e8:43:8e:25:80:7b:01:e9:
e5:80:d1:3e:de:6e:9a:fe:65:90:66:00:ed:98:9b:0e:f1:1d:
c5:62:97:45:50:30:06:b2:a5:e4:22:bd:b2:b8:ab:19:d2:08:
d5:b2:7c:a0:fa:94:3c:63:28:00:0c:d9:ed:9a:0f:41:05:94:
05:12:d4:e3:db:9f:88:79:66:da:35:e2:e8:2e:ca:e4:f1:4f:
51:d1:a0:54:c2:e0:67:d8:c7:38:f7:de:cb:61:4e:95:77:02:
9f:ce:55:fd:36:f3:26:78:d2:de:cf:cf:de:ca:14:08:99:2c:
c7:7d:64:b6:52:05:9f:bb:97:a7:93:a3:6c:b3:cd:48:9c:f4:
66:a8:b7:02:59:4c:f1:83:0e:e6:6b:f2:36:8a:57:5d:b6:ce:
19:a1:be:8d:a4:5a:0c:3d:63:bc:83:23:89:62:c5:bc:44:17:
9a:e9:3b:ae:fd:db:aa:40:0e:11:e5:af:8c:9b:6e:71:45:93:
86:ef:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:02 2025 by rpki-client