Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/5c94742a-dbac-37aa-b6e6-278851dbecc9.roa
File: 5c94742a-dbac-37aa-b6e6-278851dbecc9.roa (raw, json)
Hash identifier: S3u+k+oDIVm4Bp1FhZjAbiKZlYj283DkvJcrCrS8SZg=
Subject key identifier: D4:48:94:5A:7C:39:D2:BE:3E:73:95:3F:8D:1C:58:D8:25:AC:5B:BE
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F432858481DCE4F21738321001DFB8940
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/5c94742a-dbac-37aa-b6e6-278851dbecc9.roa
Signing time: Fri 06 Dec 2024 12:21:01 +0000
ROA not before: Fri 06 Dec 2024 12:21:01 +0000
ROA not after: Thu 06 Mar 2025 12:21:01 +0000
asID: 16909
IP address blocks: 2602:f78a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:ce:4f:21:73:83:21:00:1d:fb:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 6 12:21:01 2024 GMT
Not After : Mar 6 12:21:01 2025 GMT
Subject: CN=a835c170-0c54-4702-918c-b22836bd93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:72:af:59:ab:00:9a:df:01:d2:f8:3e:a8:
a4:cb:7d:2e:96:0f:8c:c1:f0:03:ca:41:d7:f4:40:
43:e9:ea:25:1a:44:25:50:0b:24:ee:6a:16:1f:6d:
02:4c:c0:44:6a:e8:ae:fc:0b:8a:27:ae:08:0f:1f:
98:d8:dc:d1:08:63:8b:21:cf:c3:d8:6e:22:e1:15:
0e:e5:97:18:ee:6b:07:9f:73:a5:7b:5d:41:f8:64:
cd:5e:42:ad:86:ad:dd:e2:bc:07:4a:0b:66:32:1e:
10:4d:0b:d9:b6:6e:72:12:46:b9:c5:5c:e8:df:e0:
eb:5c:a4:23:18:df:f4:6f:d5:c5:cc:12:35:c4:d9:
42:94:52:36:cb:9c:51:bc:15:cb:f3:a5:ce:ef:fd:
15:74:fd:03:15:21:2b:c0:b8:48:8d:cf:90:e9:3b:
71:b6:58:29:68:14:06:b5:a1:2e:94:69:cf:3a:89:
b9:d1:1f:33:37:cc:eb:bb:40:ba:cc:cc:76:a5:78:
25:2a:56:4f:2c:3b:12:79:2a:25:df:6b:04:11:47:
e3:ca:0f:87:44:39:71:49:1c:bf:52:cf:9c:a2:ad:
d1:05:11:df:09:68:7c:1f:5e:28:16:08:dd:00:12:
9c:03:ed:ca:8a:51:cf:a6:8f:17:39:ad:c8:31:8e:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:94:5A:7C:39:D2:BE:3E:73:95:3F:8D:1C:58:D8:25:AC:5B:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/5c94742a-dbac-37aa-b6e6-278851dbecc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:3a:93:66:44:84:dc:d9:23:d3:bf:a1:5d:fa:24:d1:27:12:
d4:05:f7:81:2e:ca:3b:1b:a7:dc:b7:4b:34:77:d3:4a:3d:df:
ac:a3:81:e2:37:7c:f7:40:24:bf:24:9c:57:c4:89:a2:c8:37:
b0:5a:30:5c:b2:f4:42:b8:da:58:ba:a4:da:21:cc:64:ba:7c:
d7:26:0e:6a:2f:31:76:da:0f:01:a9:43:2c:3c:fa:9a:64:ec:
0f:b2:e8:56:e6:d3:66:f5:e3:d5:17:d7:4b:ce:86:12:1a:68:
e2:62:95:0d:ab:b3:02:ab:31:43:4c:18:f2:ab:8b:3c:3b:0b:
99:64:02:ce:02:0c:e5:46:0c:ee:bb:f3:04:01:01:5a:1c:cd:
06:19:c6:99:fe:75:e3:a4:00:7c:bd:7e:75:2c:95:8f:e8:b9:
63:9e:bd:ba:f7:55:5b:35:73:78:51:59:ec:ce:ae:60:51:1b:
4a:c5:f1:07:2e:d9:88:40:46:51:1d:43:85:f0:ee:b3:d7:e0:
4f:c4:23:89:fe:07:55:1b:f8:23:ce:75:9a:dd:8a:57:7d:3c:
07:7d:f2:5d:06:94:85:e7:cf:c1:96:0e:96:b7:95:f4:f6:47:
70:3a:cb:9e:72:59:a8:20:de:25:ce:f9:32:19:09:32:4b:9b:
60:5d:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:13 2025 by rpki-client