Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/39157143-3421-3b2e-b94a-a102addf2800.roa
File: 39157143-3421-3b2e-b94a-a102addf2800.roa (raw, json)
Hash identifier: TjzJbL8ZKCr9e2Ycn9zbUUmE6iw0N7DgIJ+KxUmKGQI=
Subject key identifier: 7B:04:FE:9F:8C:F4:65:67:5B:87:09:69:84:B8:FE:05:45:2B:3C:1D
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F43285848166DCF8CD0848C86DAE2E7A0
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/39157143-3421-3b2e-b94a-a102addf2800.roa
Signing time: Tue 03 Dec 2024 20:55:56 +0000
ROA not before: Tue 03 Dec 2024 20:55:56 +0000
ROA not after: Mon 03 Mar 2025 20:55:56 +0000
asID: 401507
IP address blocks: 2602:f78a:42::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:16:6d:cf:8c:d0:84:8c:86:da:e2:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 3 20:55:56 2024 GMT
Not After : Mar 3 20:55:56 2025 GMT
Subject: CN=c75a8442-af05-4955-9411-5de84b4a9d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:fc:f4:ae:64:0b:b4:bb:c1:03:30:a1:dd:
db:b1:be:e2:86:b3:98:01:b3:e7:d0:05:6c:88:b5:
3f:f6:fb:e1:0a:44:93:f6:de:df:73:24:74:f0:6e:
b0:eb:f2:8f:19:af:9c:29:ef:92:f7:37:1a:3b:c2:
ed:30:98:e0:bb:5b:9f:da:46:da:b4:21:37:24:36:
a2:1d:67:d4:b6:29:71:2a:18:8a:65:d7:d9:e6:f4:
b9:85:e1:68:ed:25:0c:a3:fb:2c:a3:e2:c2:d8:d8:
c4:d6:87:ad:3f:58:ca:d8:14:23:58:87:ae:2b:47:
03:43:19:36:21:82:16:5a:d2:06:f4:60:61:2f:66:
9a:51:d5:fc:5a:04:88:04:1b:d3:9f:00:05:a5:ca:
a9:9f:31:c7:32:13:54:4e:1b:3a:5d:71:bd:26:cd:
26:3f:1f:68:37:d6:61:68:a6:46:06:c2:9c:bc:85:
8c:6c:b5:91:c0:b2:14:6f:dc:4b:b3:9e:cd:43:1d:
07:a3:e9:50:04:7d:32:99:73:8c:40:8a:45:8d:2b:
70:ba:61:b7:98:16:23:e9:0b:71:39:29:98:94:0f:
d1:18:b9:0d:dc:20:8c:c6:af:c7:38:d9:98:e0:1c:
c5:6f:7b:1d:6a:43:5c:cf:a2:bf:28:1d:e8:f3:4e:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:04:FE:9F:8C:F4:65:67:5B:87:09:69:84:B8:FE:05:45:2B:3C:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/39157143-3421-3b2e-b94a-a102addf2800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:42::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:1f:29:4d:d8:bf:93:5c:b8:55:2b:9d:70:da:ce:20:9d:d5:
be:30:3e:09:af:30:f0:5b:95:2b:f2:aa:25:96:a5:1e:09:6e:
9e:ca:2b:85:04:56:b3:f5:c0:d4:1b:ff:13:aa:a4:99:3a:b6:
5f:67:39:17:61:39:1f:03:b0:5c:f4:4f:4f:8d:c2:f7:ad:7d:
b5:57:d1:22:fe:b4:f6:69:bd:c3:57:3c:a6:96:68:41:66:44:
18:d7:30:7e:dd:94:f5:76:dc:d8:e1:53:cd:c4:a0:81:c3:b7:
e8:d3:92:42:31:4f:54:79:a2:86:a1:d4:6f:7b:02:0d:fd:c5:
72:c7:a0:22:5e:d5:16:ea:65:be:75:ee:f4:c3:21:16:9e:1f:
15:4b:ac:c3:8c:f8:cd:00:2e:5e:aa:88:1b:f1:31:b7:24:9f:
09:de:85:2d:32:a9:d3:87:57:f7:a2:d9:d4:24:14:23:7c:91:
b6:41:49:d4:9f:17:27:45:52:56:fb:c7:5c:a4:a5:fa:32:92:
2f:e0:1a:5c:a6:d5:23:ee:af:90:10:3a:ea:07:f1:c4:90:78:
a9:e7:1e:75:d0:08:f3:72:81:a1:b1:5e:d7:15:8c:48:d8:e2:
bf:c9:5f:5a:01:48:3a:14:74:03:3a:41:89:1e:ce:60:c4:94:
e4:2d:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:04 2025 by rpki-client