Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f32cd5c9-f522-3eff-b8a2-bdab2cf77e3d.roa
File: f32cd5c9-f522-3eff-b8a2-bdab2cf77e3d.roa (raw, json)
Hash identifier: ppCQfrDZSyAdcm7OIeVMvJWYkpURgh5/eTvpwdkLokQ=
Subject key identifier: E4:6C:F5:86:36:6A:A9:B2:F2:9B:23:70:45:80:FF:12:CA:45:93:20
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607AA9A7374ED370BDB980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f32cd5c9-f522-3eff-b8a2-bdab2cf77e3d.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1014:b138::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:7a:a9:a7:37:4e:d3:70:bd:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=f2376a01-4f38-4dd0-8b95-d85f38e8b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:55:91:da:fc:e0:ae:ee:e7:d2:80:ed:df:e8:
6b:01:22:1b:fe:1a:34:40:3e:50:fd:1e:29:11:c6:
fd:6b:44:b9:21:0f:ef:aa:23:68:f4:ee:43:cd:3a:
b5:5d:8e:4d:4b:59:cc:d8:14:84:d1:34:d0:24:ee:
e8:46:cb:fa:6e:f9:2c:bd:83:84:fc:41:17:d1:9b:
ea:04:7b:10:aa:3e:89:3d:4b:8e:e4:a3:61:76:da:
8f:a7:45:70:38:91:1f:dc:26:55:ce:38:3b:aa:02:
3a:68:fc:7c:17:08:ad:ac:4a:40:1b:bf:b1:5c:f5:
a2:96:0b:5d:07:95:34:6c:8c:07:20:dc:c3:16:d5:
47:8b:59:e4:79:6d:a5:4d:9a:16:e1:55:43:af:23:
f2:a5:3d:1e:67:58:5f:59:a4:40:8f:de:4f:49:ef:
18:f5:ad:b0:c3:c1:93:ca:40:fb:d7:be:95:95:45:
2a:11:b7:4c:43:6a:56:67:09:68:35:7d:cf:e6:d1:
96:62:09:7d:48:fd:e4:94:2f:0f:dc:b6:29:bc:4f:
72:8e:e2:5a:fc:b4:9c:83:de:8d:bb:73:33:ba:39:
9b:1d:74:38:49:33:00:36:04:ff:33:d8:ad:04:ff:
1c:d1:49:ea:84:19:a3:2d:6e:20:44:7f:66:a3:0d:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:F5:86:36:6A:A9:B2:F2:9B:23:70:45:80:FF:12:CA:45:93:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f32cd5c9-f522-3eff-b8a2-bdab2cf77e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1014:b138::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:80:70:4b:89:02:bb:dc:d4:57:ea:61:43:c8:58:c1:13:e6:
c1:f8:90:a2:70:5b:ec:c6:93:8a:0f:0d:fd:f2:1f:2a:21:a4:
51:9d:3b:5f:36:3d:22:92:66:29:65:cd:22:4c:aa:96:98:83:
7a:00:75:fd:ba:e9:78:d1:36:22:b4:a5:96:16:26:57:02:6e:
ff:1c:4f:35:b5:fe:37:44:84:35:25:de:d4:80:32:cb:92:2c:
34:ef:d3:d2:7f:ef:3f:ee:b8:67:41:53:48:c4:cf:b0:bf:c1:
ed:18:c7:b7:d5:3f:ef:04:43:6b:9c:5a:ed:92:d3:10:41:52:
1d:dc:01:0e:00:80:0e:6e:9a:f6:83:41:b9:eb:7b:b3:9b:ca:
ca:10:9c:29:d7:16:0c:16:b5:7a:4e:d4:2e:7b:68:69:0b:96:
53:af:0d:f1:ae:9f:e5:2b:c1:64:14:61:07:0c:ea:13:a8:6a:
f6:ee:b2:d0:f7:c0:4a:7b:4c:d6:b8:9a:34:ea:a7:e2:23:09:
15:50:72:20:ca:e9:91:a8:48:a3:1c:da:c5:fd:32:90:4b:0c:
de:81:74:d2:e9:70:65:a9:fb:a1:5c:04:f3:08:3e:12:c4:97:
4b:a1:8d:53:a6:a0:e8:e6:96:13:16:61:1e:35:8d:dd:7c:5f:
15:bc:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:03 2025 by rpki-client