Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f348e087-b04f-376b-a4f8-8324246bc223.roa
File: f348e087-b04f-376b-a4f8-8324246bc223.roa (raw, json)
Hash identifier: 4hUrLjnQlg6vXKQDvcdBqVcn4Li6IMa8IUNJKgzCAqo=
Subject key identifier: FC:9D:A2:D7:98:F0:46:D3:15:68:CB:98:C0:1B:D9:CF:A6:32:27:A1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858486960861DDC5E79515C6BAD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f348e087-b04f-376b-a4f8-8324246bc223.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1016:b120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:86:1d:dc:5e:79:51:5c:6b:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=2309dc7d-772e-4112-b806-344d2b3c085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:c9:14:3c:2a:93:f1:ea:a3:71:e7:7f:63:
42:d4:48:43:d7:5c:0c:7e:df:20:59:f6:d8:d1:73:
e9:83:d3:84:78:f3:7b:ff:95:4d:19:0e:d8:d7:80:
90:92:17:ff:d3:a8:d6:d0:08:63:e3:70:fb:c8:e1:
11:9d:3e:fe:47:92:c1:0f:2a:48:8c:15:f7:58:a6:
42:0d:44:f8:c8:a6:38:d4:f3:13:5e:71:93:e5:5f:
cf:77:14:93:18:e6:b3:9c:75:8a:b6:05:9f:65:a5:
ef:21:0e:9b:0d:e3:2e:61:87:44:ef:b0:0f:0d:cd:
c4:f6:fe:82:83:e2:72:aa:ac:9f:57:19:f9:44:d6:
74:da:09:4a:3e:d9:51:dd:2d:3c:97:0b:e6:3d:7e:
7c:39:bc:cf:8a:c9:71:60:aa:9c:03:60:67:a8:9d:
1c:5f:56:8a:8a:39:de:34:f7:2a:fe:20:cc:d8:16:
a3:ca:95:c6:2e:bb:3e:9e:fd:09:4b:c9:07:82:f2:
9d:8a:53:9f:7b:41:0c:39:c8:dc:25:a8:51:c6:3c:
30:25:55:8f:0a:1b:90:52:d2:50:db:97:15:54:84:
f6:01:ce:df:1b:5f:45:ca:99:d1:34:12:d1:09:16:
b1:4b:5f:b7:da:a6:16:fa:54:b4:1e:5f:69:29:ec:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:A2:D7:98:F0:46:D3:15:68:CB:98:C0:1B:D9:CF:A6:32:27:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f348e087-b04f-376b-a4f8-8324246bc223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1016:b120::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0b:ee:c6:fd:42:14:a8:76:ee:cf:24:d0:59:58:f4:e1:15:
1b:4c:60:42:36:27:10:66:87:e1:0b:68:3b:2c:23:2a:d8:b1:
0b:b6:97:92:38:41:b0:44:ce:ac:05:95:f8:f0:e4:63:7a:c3:
f0:70:1e:10:21:83:5b:6f:f5:75:57:74:b2:77:5d:0b:12:34:
b7:fa:37:27:21:d5:a5:6f:ba:49:e3:37:70:89:36:9b:93:fe:
bd:7b:8d:bd:65:1c:9a:78:7b:c7:25:ba:84:92:27:12:d9:8f:
85:49:4e:e2:92:3f:c0:10:fb:17:a3:5f:c2:0a:a6:07:78:ad:
43:b2:fc:2b:d7:7a:3a:15:53:1e:a0:c2:c2:aa:9a:28:a7:84:
17:06:36:e5:49:cb:f0:a3:f8:89:8e:4e:2e:41:33:22:35:a6:
52:d6:db:ff:1d:4e:51:eb:91:fd:a8:25:31:ce:c4:ec:df:83:
fd:3a:83:9a:71:8d:f0:e0:f5:44:37:b3:4f:32:ad:4c:34:d8:
ac:a9:01:bc:c1:2c:22:1e:51:d0:6c:d1:d3:ff:0b:a8:6e:55:
7b:42:53:9c:2c:32:de:c1:89:07:60:ff:64:7a:e5:e1:40:e7:
fd:bc:d5:16:a2:90:f7:f2:2b:1e:10:15:0d:6b:b6:d8:56:d9:
a9:8f:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:33 2025 by rpki-client