Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffad2bc1-59bd-30ee-afaa-491cf4de53e4.roa
File: ffad2bc1-59bd-30ee-afaa-491cf4de53e4.roa (raw, json)
Hash identifier: rT5vGtxeikq0w6OIF1iI5VFBFXLxZLUFGyiEwGzMJKA=
Subject key identifier: 67:04:9A:6C:96:51:7D:9B:05:06:E5:AD:58:34:DF:63:5B:0E:96:5D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848696078062BDCFAA3E9B8A6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffad2bc1-59bd-30ee-afaa-491cf4de53e4.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 6167
IP address blocks: 2600:1011:a120::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:78:06:2b:dc:fa:a3:e9:b8:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=88ed9adf-45c4-470f-80b2-9c7be6f9a01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:ec:25:bc:5b:29:71:b8:75:4b:01:c0:8f:
71:4c:0b:06:2b:5e:27:17:b3:7d:dd:4f:1a:bb:60:
20:97:62:e8:08:c3:59:c9:19:d3:9d:52:20:26:8f:
2e:56:69:8b:1c:cd:6e:29:01:78:4d:05:17:1e:89:
d7:48:6c:c0:a7:32:0f:36:ed:06:fc:59:2d:47:e4:
e2:62:7a:d8:76:ac:f7:93:89:94:7c:49:d2:71:ef:
84:27:ad:0c:1d:60:57:ac:c6:1a:2f:f4:f0:89:8e:
13:8f:21:dd:49:65:a5:28:84:a2:0b:83:82:70:17:
e9:b6:4e:71:9f:9d:dd:66:e8:b0:ca:03:a5:f0:51:
d3:df:ae:d2:c4:67:5e:7c:96:29:05:70:86:62:0a:
f3:96:ed:26:b6:dd:f0:9d:f1:6d:e3:df:00:ce:5f:
bf:c4:cf:d3:4b:04:cc:4f:20:a6:a8:09:26:8e:82:
61:49:5c:83:f1:ea:ec:aa:fa:00:ab:07:a9:55:71:
57:89:b0:75:c0:28:39:bc:9a:04:ed:f3:33:d6:69:
4f:ef:7b:47:14:9e:b1:3c:ef:39:54:4f:6a:76:d2:
0c:39:87:13:70:f8:73:0e:59:87:41:21:8e:c7:0b:
3b:27:da:9f:4e:d0:a5:2d:61:5b:c2:30:45:64:68:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:9A:6C:96:51:7D:9B:05:06:E5:AD:58:34:DF:63:5B:0E:96:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffad2bc1-59bd-30ee-afaa-491cf4de53e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1011:a120::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:21:e7:63:51:d4:14:b7:04:76:54:20:00:b1:1e:df:c3:59:
b5:5f:1b:83:07:58:a9:b2:88:56:5b:b7:20:c8:20:61:49:21:
9a:e8:25:2b:50:81:f8:49:75:50:b4:19:e5:49:7e:be:13:ce:
18:9d:dc:2a:d8:45:3f:b9:0a:62:28:d5:31:da:b4:52:0b:3f:
4a:c0:fc:ad:e5:74:fb:23:ec:c1:3d:2e:86:83:87:61:ba:e8:
f3:89:5c:6e:ee:13:e8:14:da:b8:b5:2f:d5:fb:73:52:f3:ce:
c2:b7:8d:d7:52:8f:f6:bd:cc:c8:66:98:fe:af:c6:28:ac:90:
c9:cb:bc:62:d3:61:07:09:a7:bc:76:db:d3:46:5d:bb:b9:c1:
1a:ed:33:75:35:be:4e:cf:01:9c:c7:f7:4d:fd:3a:ef:ab:4b:
18:c9:34:0c:7c:bf:7c:1e:4c:34:21:af:23:6f:05:f3:0a:cd:
62:08:ee:ab:ad:77:8e:54:1a:2f:2b:2b:67:03:94:c6:62:91:
9c:04:bd:ce:3b:94:5b:18:7d:fa:1e:07:90:2b:5e:f3:bf:aa:
1c:85:42:28:97:0c:97:19:74:b0:41:a3:d9:0b:ab:c3:de:5e:
c9:24:35:44:26:2e:a6:39:4b:3d:d4:f6:bf:1e:db:ae:04:57:
6d:58:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:48 2025 by rpki-client