Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f580a4b6-0d85-3a49-a7ac-4848896126db.roa
File: f580a4b6-0d85-3a49-a7ac-4848896126db.roa (raw, json)
Hash identifier: v22gLF547l7IRbRGV9qfD8W+2xZW4NjuJQmgQlk3dhE=
Subject key identifier: 9A:29:8C:0C:AC:62:D5:29:09:3C:D7:A9:CE:AA:9C:76:42:87:D8:F3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584869607217BFBB3A0D19C26B20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f580a4b6-0d85-3a49-a7ac-4848896126db.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1010:b000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:72:17:bf:bb:3a:0d:19:c2:6b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=b8a03c1f-1277-4e2d-9230-c702517ee19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:1b:32:eb:b1:56:d8:39:9f:3e:b9:c2:56:
af:c8:43:a4:6d:29:03:d5:0e:ce:f2:90:ab:82:9b:
c2:1d:d1:5f:fc:f4:96:96:07:8b:b4:91:cd:0b:98:
15:f3:5d:a0:d3:14:b5:c4:72:3e:b8:0e:1c:c9:2c:
cc:ef:f9:1d:33:c9:f5:ed:dc:66:bd:4c:34:8a:b3:
d5:e3:31:e6:7b:03:d0:0c:90:54:6d:8d:8a:bb:0f:
d7:bc:fd:6b:29:93:14:d2:db:9b:4a:60:85:66:25:
58:83:69:35:4b:21:e3:15:a5:52:0c:23:30:a3:df:
52:39:9f:1e:1c:35:80:8f:5e:35:9f:49:7f:1f:39:
b4:39:be:49:5d:fe:fa:e7:d9:16:fc:81:61:ca:11:
1c:f4:3b:4a:a5:83:3f:3a:76:c5:77:ab:c9:32:4c:
5f:e4:ea:60:68:c6:5c:e1:21:f4:f7:a0:bb:d1:c0:
a7:a5:71:2d:73:08:25:9c:af:ab:ec:cc:56:32:9d:
44:e3:1b:cc:57:10:1b:2d:ee:57:a5:38:23:75:76:
0e:cb:f8:c7:7b:a1:62:82:f9:95:98:1f:7d:a9:40:
c8:bf:79:15:fd:f1:ff:46:35:6c:ae:74:6a:33:0b:
43:36:4f:47:77:4a:04:97:bc:41:b3:08:19:b2:12:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:8C:0C:AC:62:D5:29:09:3C:D7:A9:CE:AA:9C:76:42:87:D8:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f580a4b6-0d85-3a49-a7ac-4848896126db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1010:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ab:5c:31:1a:e2:d8:dd:eb:1f:a5:89:3b:41:55:02:4e:b3:
60:7a:79:5e:74:5a:98:21:ed:13:d3:4a:4c:eb:f9:68:58:3b:
e4:b2:77:62:61:64:00:98:3a:80:18:aa:bc:cd:94:f9:e3:88:
12:4a:79:ca:6d:e1:b1:2c:1d:c5:72:04:e7:ab:5e:77:05:16:
6b:25:3a:98:ec:ba:88:7a:49:39:b5:f2:8d:bd:2e:f6:8a:01:
45:16:67:23:e6:72:a9:14:04:c3:5a:64:95:c3:ad:e0:e8:ac:
26:4b:d2:de:cf:22:d1:ad:a7:2d:a2:7e:a5:9f:82:eb:af:47:
a7:68:ab:89:70:88:ca:7a:d2:41:d2:42:5d:3c:72:3d:bd:3f:
ce:ad:f9:ee:69:e0:bd:c0:1e:ce:84:bc:88:15:c4:af:a7:bd:
42:59:29:04:a2:01:ae:48:21:4c:f7:c1:22:87:f5:57:4a:0a:
eb:36:c1:9c:ae:74:b1:29:df:4b:85:7e:68:de:29:2c:f7:a0:
18:69:8b:4c:47:ab:c0:ea:76:5c:77:fc:47:76:d1:96:37:64:
64:87:e3:65:d1:7f:9b:9d:7b:b7:dd:bb:cc:c7:1e:3b:c6:7b:
23:62:bb:9f:51:1f:02:20:2c:22:00:56:93:4b:f5:73:0d:3f:
42:93:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:37 2025 by rpki-client