Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/58f5ec0b-dddd-33a0-8be5-66229d25cdff.roa
File: 58f5ec0b-dddd-33a0-8be5-66229d25cdff.roa (raw, json)
Hash identifier: YBt3d2wo2PcRvB3uhfnH5u+sNljadmxQnYl/nNgqZ/o=
Subject key identifier: 52:7A:D0:FD:C5:15:F9:6C:AF:72:15:70:7A:A8:71:BB:DB:5C:03:D3
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F43285848125A4369207EB07D41073E80
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/58f5ec0b-dddd-33a0-8be5-66229d25cdff.roa
Signing time: Mon 02 Dec 2024 09:53:18 +0000
ROA not before: Mon 02 Dec 2024 09:53:18 +0000
ROA not after: Sun 02 Mar 2025 09:53:18 +0000
asID: 415810
IP address blocks: 2602:f78a:ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:5a:43:69:20:7e:b0:7d:41:07:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 2 09:53:18 2024 GMT
Not After : Mar 2 09:53:18 2025 GMT
Subject: CN=f5fb0ad8-eed5-4cb6-9b33-1dc1a0a88665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bb:96:6f:a4:c0:f9:70:4a:08:3e:85:3e:f2:
fd:b7:f5:07:3b:8d:9d:fa:14:e4:34:3d:69:85:03:
e0:bb:95:ac:1b:b0:bf:a9:52:9b:19:bd:6b:74:c8:
e0:55:d6:15:77:48:16:c9:76:3f:42:f2:97:af:88:
fc:0a:4c:1a:74:0a:44:2a:1e:a8:e3:ab:ac:b8:43:
5c:2c:5b:97:31:11:db:1b:9a:a0:5d:c4:52:1d:99:
6b:b8:9f:41:3f:b3:7d:c7:da:e8:1e:27:5c:d3:c0:
fd:09:fd:07:3f:22:8e:34:e6:6d:17:7e:ab:25:7b:
84:fe:77:29:60:1f:33:e2:94:85:55:65:71:7d:1e:
af:1f:ac:f0:d3:29:53:ad:38:5a:82:ab:71:d2:a0:
b6:7c:9c:86:00:14:07:50:18:0a:54:2f:2b:91:eb:
0b:fe:94:9f:82:7c:c7:41:47:7f:af:9e:fe:33:a3:
d0:24:c2:5b:62:63:bf:01:0e:97:44:ba:08:fe:82:
a6:1c:11:ea:c6:55:46:dc:e1:3e:7e:28:32:4c:03:
b6:86:71:10:d1:27:bd:a6:eb:60:46:fa:1f:18:bd:
e9:ad:4c:af:f7:da:6a:db:9d:80:6b:d8:2f:47:52:
84:17:4d:85:f4:0d:9f:43:43:fc:e6:55:5f:9c:a5:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:D0:FD:C5:15:F9:6C:AF:72:15:70:7A:A8:71:BB:DB:5C:03:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/58f5ec0b-dddd-33a0-8be5-66229d25cdff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ef:57:80:7f:61:f7:8a:6a:a9:65:d1:ae:4d:69:90:ab:92:
72:f4:8a:63:8d:6f:6e:05:99:94:a2:e1:a8:d4:af:95:6a:18:
0e:53:89:80:42:f9:30:25:e5:05:40:88:6f:3a:cc:2a:56:98:
21:7e:4d:6d:ab:62:fe:39:88:94:4d:fa:45:55:f3:1b:e8:aa:
fc:40:14:f4:52:fa:aa:63:c8:eb:a0:64:06:a5:11:4c:a3:ea:
00:d8:29:40:0a:22:19:fd:d1:0b:b3:f2:00:ac:46:08:97:a6:
f0:b2:6d:e6:49:99:0a:a2:32:a6:fc:eb:fd:02:b7:52:ed:9d:
e2:d2:4f:69:e4:95:2e:74:f4:b5:8a:05:0b:e0:39:02:b8:73:
7a:a5:27:0d:bd:17:5e:a3:c3:8e:1f:3c:59:06:94:dc:7d:bc:
76:9a:4e:41:2c:3a:34:e0:47:9c:cf:eb:cb:3d:32:82:f0:51:
b5:5b:95:5f:92:62:66:04:a4:7a:f8:55:a5:2f:8a:7c:0f:9d:
e5:23:60:99:32:05:b6:ff:63:f0:88:11:e6:07:16:6b:7c:75:
93:59:a1:5b:0e:87:fa:49:df:9e:f4:16:d3:17:f6:9e:f2:8b:
12:a1:c2:31:2b:40:0a:68:1a:46:e8:1f:a0:43:e0:0c:8a:86:
cd:e5:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:12 2025 by rpki-client