Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa
File: e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa (raw, json)
Hash identifier: VR7V4djhy1vJ8vL4JTUIhBpMGbACICU0pVPK7JFgWfY=
Subject key identifier: B9:37:7D:06:34:5B:82:CE:66:7A:34:C9:62:54:07:FA:37:EC:4E:8C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424B1C19D7C6FAFD1C28FE10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 22394
IP address blocks: 2607:f160:2e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:1c:19:d7:c6:fa:fd:1c:28:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=a664e92f-3b25-41c8-8bca-4ae1888a9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:4e:ce:eb:f8:78:09:25:dd:b2:67:3b:83:
54:58:e7:cb:4b:96:21:ae:2a:3a:ed:af:cc:5c:d2:
d1:3b:24:be:2c:b7:db:be:c9:6b:d2:d6:a3:ff:5e:
5c:d7:e0:de:4f:88:da:74:ea:ac:80:12:ce:23:3e:
57:b7:0c:d5:7b:1b:76:88:83:ac:33:81:bb:9a:9c:
3b:b5:f6:7a:aa:7b:e6:5e:c0:ea:d0:01:f0:e1:8c:
28:4a:a8:6c:33:63:29:6a:25:48:53:1b:2b:c8:f0:
7f:e1:6e:23:04:80:93:d3:d0:42:2a:11:99:57:97:
88:20:7a:7d:4a:7c:12:fd:44:98:0e:ae:fc:df:7c:
99:0b:f9:91:fb:06:9d:de:51:45:24:b2:97:fc:71:
8d:1c:d0:70:99:a3:64:38:0f:55:f1:a5:4e:91:1e:
35:62:fe:1f:e2:b5:4f:9a:97:4c:e5:80:d2:52:1b:
d2:2f:57:bd:47:6f:8e:aa:a4:26:ad:72:60:55:69:
a1:74:31:0e:a7:ee:a6:71:fd:10:58:5c:19:b0:60:
e9:12:a6:cf:10:82:0d:a1:2b:66:49:8c:f1:0d:89:
da:8c:a6:99:8a:77:12:f9:1a:40:40:90:87:81:7c:
3a:74:df:47:2c:01:de:ec:e9:58:3b:14:49:5a:27:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:7D:06:34:5B:82:CE:66:7A:34:C9:62:54:07:FA:37:EC:4E:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e4bb3642-7cb4-3ffe-98a1-e91880acdfad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f160:2e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:eb:28:aa:bf:cf:c3:22:10:79:db:2a:eb:0c:1d:26:99:36:
03:b2:ba:39:aa:7e:ef:83:f6:3b:c5:40:00:85:c8:5a:b6:73:
5f:3e:dc:b7:2a:6a:1e:be:75:a5:05:d1:cb:d6:01:e0:df:86:
44:56:5d:9d:a9:43:e7:d6:be:3e:51:23:42:ad:42:d4:d8:74:
a0:65:0a:58:d4:ff:79:8e:40:0a:60:ff:97:24:d2:8b:26:9d:
43:46:c2:07:92:d2:4c:3a:de:05:9e:db:ab:8b:4e:54:28:5e:
6c:10:23:f6:70:bf:4e:b1:eb:8a:0d:a9:f8:79:c4:97:4a:1e:
3c:ab:40:3e:bf:a8:fa:2d:b2:e3:96:73:6b:c8:c7:f0:db:b5:
b1:e6:f4:02:a3:a3:40:7d:11:24:5a:c2:e2:09:f1:f8:8a:2d:
88:87:3f:41:fe:e5:58:d9:bd:3f:15:3c:83:ae:f4:29:17:f5:
e7:ee:54:6e:10:02:f3:59:38:47:2d:13:c4:1a:7c:9e:5a:2e:
0a:b2:15:99:5e:5e:00:c9:34:30:55:7f:65:c0:c9:0e:a2:5c:
c6:1b:bd:27:65:1e:a3:3b:e6:70:9e:e0:87:c1:df:45:b2:d1:
85:3f:e0:e5:13:56:1a:d2:c3:c8:6a:e4:f3:d0:69:99:47:87:
46:62:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:09 2025 by rpki-client