Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/4840b1f0-6467-36ad-8d54-df9d69c40ae7.roa
File: 4840b1f0-6467-36ad-8d54-df9d69c40ae7.roa (raw, json)
Hash identifier: LpmM9v6we/0G2P14HUwzYJgR2nx8q8+iUuQ1EgkeGus=
Subject key identifier: 36:7D:4F:53:07:62:1F:15:AC:89:9A:40:50:13:60:39:90:DD:7E:12
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F432858482E0CBA86C7DD4C70F8FB0A00
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/4840b1f0-6467-36ad-8d54-df9d69c40ae7.roa
Signing time: Thu 12 Dec 2024 07:59:43 +0000
ROA not before: Thu 12 Dec 2024 07:59:43 +0000
ROA not after: Wed 12 Mar 2025 06:59:43 +0000
asID: 401507
IP address blocks: 2602:f78a:30::/48 maxlen: 48
2602:f78a:31::/48 maxlen: 48
2602:f78a:32::/48 maxlen: 48
2602:f78a:33::/48 maxlen: 48
2602:f78a:34::/48 maxlen: 48
2602:f78a:35::/48 maxlen: 48
2602:f78a:36::/48 maxlen: 48
2602:f78a:37::/48 maxlen: 48
2602:f78a:38::/48 maxlen: 48
2602:f78a:39::/48 maxlen: 48
2602:f78a:3a::/48 maxlen: 48
2602:f78a:3b::/48 maxlen: 48
2602:f78a:3c::/48 maxlen: 48
2602:f78a:3d::/48 maxlen: 48
2602:f78a:3e::/48 maxlen: 48
2602:f78a:3f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:0c:ba:86:c7:dd:4c:70:f8:fb:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 12 07:59:43 2024 GMT
Not After : Mar 12 06:59:43 2025 GMT
Subject: CN=31a74ba0-3ea9-4de8-90fe-cc62e7e453d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:a2:78:71:ad:ab:b6:3f:ae:a5:cf:63:6b:
7a:bf:25:39:e6:15:6a:bd:a0:7f:a9:3e:a2:d7:c4:
6d:ad:12:04:37:f8:4d:d8:f1:b7:52:b3:39:43:cf:
7e:88:5b:c7:25:b3:0c:62:1b:a1:77:6f:33:91:68:
f3:f9:c0:61:7a:23:eb:ea:12:65:d8:e3:e2:44:f6:
96:5a:ba:b4:07:b7:e3:59:44:ad:c0:2a:9b:79:0b:
e3:7e:88:0a:7f:e0:39:1c:16:58:ea:02:07:31:36:
a4:6b:23:4a:1a:78:bd:88:e0:03:34:04:08:33:7a:
3d:17:d4:eb:bb:17:8d:32:dc:56:25:48:81:66:ba:
b9:80:2a:1a:2e:d1:29:aa:d5:96:f2:3e:5c:d3:70:
1d:78:07:92:94:87:4a:51:07:98:f9:16:04:ee:16:
28:4d:22:2a:ad:c2:9a:ac:8b:63:1c:eb:e8:2f:1c:
91:3c:85:32:95:a3:5a:07:84:cc:b0:f1:ac:1a:fb:
c9:a9:93:d2:5a:a0:dd:fe:89:13:3e:43:e5:d7:14:
a9:06:9b:25:ca:6d:93:f9:38:f2:b3:13:ff:cc:b5:
a6:6b:a7:64:9c:f5:c6:21:82:7d:2d:11:d4:59:99:
d8:a7:84:a1:61:2d:ba:e5:82:38:63:74:3d:71:07:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:4F:53:07:62:1F:15:AC:89:9A:40:50:13:60:39:90:DD:7E:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/4840b1f0-6467-36ad-8d54-df9d69c40ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:30::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:a6:91:3b:2c:94:e8:7c:fb:53:e3:0a:dd:e7:66:df:95:d1:
7b:61:98:07:5d:27:32:bf:64:a6:ca:2e:96:a9:78:3e:e9:22:
1a:87:58:b8:43:e8:78:ff:7a:03:ce:6a:0d:c9:d2:f7:36:5c:
e9:84:0b:f1:02:3b:63:51:24:36:31:5e:ce:1c:dc:1f:e4:d2:
97:40:34:ab:9e:d0:de:b4:86:8e:79:72:1e:e0:39:de:64:14:
d6:3c:0d:e9:8a:4f:5c:f1:dc:fe:f2:c5:1e:3d:da:a0:87:2e:
af:86:1d:ad:59:c2:7b:44:31:3f:18:3c:e9:5a:9d:ac:50:7d:
dd:a1:1a:bd:a1:09:cd:fd:f7:bf:8b:e7:b1:fe:3d:52:b4:a4:
f6:e6:33:88:18:db:0d:3a:69:51:eb:83:37:c8:be:d3:04:22:
cb:ee:38:d2:63:38:75:b2:f9:1b:3f:df:59:a1:b0:3e:36:a4:
9e:89:8a:ac:b4:0e:81:72:b5:54:da:e0:94:e2:91:7e:43:d8:
d8:7f:13:69:85:c6:31:8d:1e:54:cb:8a:89:69:fc:7e:01:2c:
5c:8f:9d:57:97:b3:80:95:bb:2c:54:33:5e:17:33:e6:b4:c7:
50:5c:6f:3f:f4:e9:17:0f:8a:6a:1d:41:5d:d2:e0:95:80:d3:
ce:93:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:23 2025 by rpki-client