Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/3855862e-3948-3c0e-9571-ef0448ba6f0f.roa
File: 3855862e-3948-3c0e-9571-ef0448ba6f0f.roa (raw, json)
Hash identifier: qJBYoWOzghQ5R5XvmcnjEGIIBcA2Ey53+hAYrmxmnc4=
Subject key identifier: 6B:9E:E9:A3:24:7E:76:7E:A1:FB:DB:FF:19:44:0A:EB:AA:92:AB:0E
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F432858481DEBDED735ED2223425FADE0
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/3855862e-3948-3c0e-9571-ef0448ba6f0f.roa
Signing time: Fri 06 Dec 2024 13:20:35 +0000
ROA not before: Fri 06 Dec 2024 13:20:35 +0000
ROA not after: Thu 06 Mar 2025 13:20:35 +0000
asID: 16909
IP address blocks: 2602:f78a:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:eb:de:d7:35:ed:22:23:42:5f:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 6 13:20:35 2024 GMT
Not After : Mar 6 13:20:35 2025 GMT
Subject: CN=677b08dd-1d1f-4f24-adc1-eb0ad35033c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:20:9d:c0:f4:9c:79:f8:e2:97:fa:51:d7:
94:c1:5d:a2:57:90:30:9a:4a:5e:e5:50:a6:74:ab:
77:1d:cb:3b:f5:3c:33:ec:f8:d7:1b:8c:fc:10:d1:
06:83:5b:dd:ed:57:f4:e6:aa:cc:2f:d7:71:d6:98:
24:cd:5d:37:a5:03:1d:ce:6c:df:03:f5:09:f6:80:
15:ee:69:20:c5:4b:db:ef:16:27:aa:1a:53:2e:b3:
0c:4d:d2:e1:3a:da:51:17:95:66:dd:2f:a1:9f:1c:
fd:98:5f:2e:ad:0a:b3:7d:57:70:d0:46:55:77:e7:
2e:ea:e7:a2:eb:d6:50:d2:b6:19:a1:3d:95:c2:ca:
51:26:7a:1f:23:2e:04:2f:67:09:68:6d:b8:75:af:
2c:7d:4d:eb:40:7a:3b:a2:1c:a5:50:8d:ee:1d:92:
75:b3:87:b0:39:fa:26:fb:84:86:ff:4c:4c:00:86:
e3:ae:ec:9e:5b:8f:ad:ff:d8:16:51:ac:f4:26:09:
46:0c:d9:84:2a:fa:b8:db:d7:d8:98:28:ee:c8:04:
46:fb:30:bd:5d:6f:c3:a1:83:dc:09:2b:a9:0d:79:
7f:64:b4:46:60:c3:6b:4b:1b:76:bc:ab:51:31:f1:
04:87:03:d1:19:6a:23:77:4d:6b:35:b0:96:29:dc:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9E:E9:A3:24:7E:76:7E:A1:FB:DB:FF:19:44:0A:EB:AA:92:AB:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/3855862e-3948-3c0e-9571-ef0448ba6f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:5f:f9:e0:68:ad:10:92:61:e8:69:00:8f:a1:97:cb:60:7f:
2c:5d:1c:6f:93:2c:3d:7d:22:d8:0c:8f:4a:8d:65:c2:13:93:
04:8f:89:eb:24:cd:58:9f:5c:38:4c:70:db:ec:d5:bd:5f:8b:
0b:3f:c9:1a:0a:ef:71:34:b2:3c:71:b5:a2:d4:02:50:0e:18:
6b:cd:2c:ab:b1:b5:d5:15:f3:eb:09:12:71:8b:ef:4e:25:e2:
65:c9:9e:3b:45:bc:20:0d:97:88:df:ea:de:dd:53:92:69:36:
a7:55:2c:36:ec:f7:d4:59:85:80:80:b0:cc:2c:91:c5:dc:f8:
40:a4:f5:1a:51:b0:4b:86:a5:bb:76:8d:11:09:33:5f:98:a1:
ff:f1:65:b2:06:5a:43:23:8d:55:f9:fc:46:ba:6c:fe:0a:40:
e0:fa:29:e0:58:39:94:dd:4b:fc:ec:0d:5d:46:9f:39:42:e2:
4e:46:2b:d0:e7:2b:c6:b1:ea:93:4b:67:e2:d2:f6:17:b7:95:
2d:69:05:64:31:a2:14:c2:c0:60:5e:db:13:22:b4:87:19:a1:
2f:8a:80:fe:8d:86:84:93:39:70:8d:8b:91:86:a8:91:c0:6c:
b6:c6:69:55:ff:ba:65:a9:07:c8:c3:db:d2:69:2a:01:f0:b5:
81:be:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:39 2025 by rpki-client