Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/8012efc1-c273-3cc6-8dbb-5fdc556093f4.roa
File: 8012efc1-c273-3cc6-8dbb-5fdc556093f4.roa (raw, json)
Hash identifier: tvTWVRjZ8EH36YAzLz3ZHHev02mKLWy3xkREo3Ax65E=
Subject key identifier: 67:51:A9:B9:55:6B:1D:19:46:F5:81:CF:6B:96:F0:1C:DE:6C:99:C8
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F43285848405FF1B9BC71807E68D31BC0
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/8012efc1-c273-3cc6-8dbb-5fdc556093f4.roa
Signing time: Wed 18 Dec 2024 21:31:56 +0000
ROA not before: Wed 18 Dec 2024 21:31:56 +0000
ROA not after: Tue 18 Mar 2025 20:31:56 +0000
asID: 16909
IP address blocks: 2602:f78a:50::/48 maxlen: 48
2602:f78a:54::/48 maxlen: 48
2602:f78a:58::/48 maxlen: 48
2602:f78a:5c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:5f:f1:b9:bc:71:80:7e:68:d3:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 18 21:31:56 2024 GMT
Not After : Mar 18 20:31:56 2025 GMT
Subject: CN=a700b1c7-7fd0-43e8-9b67-0b96ecad06aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:1a:17:69:9a:14:04:eb:25:b2:b6:f0:7f:
f8:04:10:4f:98:60:b5:d1:b6:80:2c:db:b9:cd:93:
d5:da:9c:ac:5d:97:92:d1:e1:8c:5e:0d:a7:d0:27:
83:a7:cc:c9:21:61:98:62:36:97:c7:0a:68:71:7c:
36:9f:77:fa:a8:6e:ee:32:6a:25:ef:80:b3:4e:bd:
32:c7:09:55:5a:7c:bb:b6:83:a0:54:05:08:7d:b9:
98:2c:0f:33:fd:3e:ee:f0:58:81:ba:d4:3e:d8:d7:
38:72:ea:31:9d:a4:6a:52:71:4a:9f:b2:c4:67:82:
c0:6c:b1:1e:87:f8:75:69:10:be:d1:85:c7:f3:80:
42:38:bb:c4:85:23:2a:d6:2a:cf:f2:79:28:9a:3d:
14:71:4d:24:97:2f:b0:16:6f:7e:fb:75:85:08:bc:
2c:df:83:5c:aa:c0:9f:da:1a:c5:0a:63:7d:82:43:
50:f6:3c:67:f4:7e:12:a4:c7:f2:e8:51:8b:90:54:
d7:91:1e:7b:3f:1c:2c:0c:cd:93:76:21:5d:70:cc:
5a:c1:b8:bd:70:01:88:d2:3c:22:71:ba:4c:5f:d1:
e2:c6:e1:ba:af:b1:13:55:3b:97:67:a2:94:48:4c:
5c:fd:53:cf:cd:40:b0:27:c4:e2:c5:dc:2e:be:16:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:51:A9:B9:55:6B:1D:19:46:F5:81:CF:6B:96:F0:1C:DE:6C:99:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/8012efc1-c273-3cc6-8dbb-5fdc556093f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:50::/48
2602:f78a:54::/48
2602:f78a:58::/48
2602:f78a:5c::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:51:58:c1:f2:4d:91:4d:3d:da:a2:9e:c6:fb:61:cf:bc:75:
f7:e4:4e:fd:27:17:eb:cd:78:d9:ff:47:e2:85:64:bc:95:e1:
6e:58:f3:c3:9f:78:d4:85:38:6b:b1:7b:61:f3:81:99:2c:07:
5e:13:0d:00:de:96:dc:72:7e:66:1b:a3:12:33:91:e0:12:f3:
07:7d:20:48:40:8f:3a:87:a1:f6:ca:4c:4d:74:c6:c3:9e:a4:
86:0a:7a:4e:cd:c2:92:12:25:fc:90:c2:ee:db:61:f4:94:e9:
fe:f8:89:c6:da:62:da:83:65:49:b0:7c:5f:4a:88:18:a9:7d:
37:a6:70:6e:26:0c:c3:7c:85:08:8a:17:de:b7:26:67:fb:2c:
c4:49:af:b2:e5:9d:79:89:4b:9c:54:af:44:93:57:33:1b:1a:
bb:3f:87:32:cf:08:28:ac:fe:cc:dc:81:0d:1e:ef:8a:96:1a:
72:38:f2:7f:00:97:d9:33:f6:c9:5c:81:2f:82:5e:af:31:fc:
8c:be:8d:a7:77:48:9c:91:dc:08:f9:d2:cb:27:de:5d:7f:fe:
35:f9:1c:40:b0:2c:6f:25:f4:eb:7d:86:04:94:4b:50:5f:0f:
02:7b:91:78:e1:7b:76:36:c8:90:38:24:cf:6d:0e:0e:e4:d1:
bc:e0:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:56 2025 by rpki-client