Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/9c7f4315-3ceb-38b5-81e3-41868077a065.roa
File: 9c7f4315-3ceb-38b5-81e3-41868077a065.roa (raw, json)
Hash identifier: Jf8KmK5HCvV/UqIX4aw8ajj0e82Nlp8ZWkLZljx38TA=
Subject key identifier: 04:40:67:D9:07:40:94:9C:3C:0A:35:A3:B1:EF:F5:76:FA:A6:97:E9
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F432858483127DB1655C73CBD171A9900
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/9c7f4315-3ceb-38b5-81e3-41868077a065.roa
Signing time: Fri 13 Dec 2024 10:41:48 +0000
ROA not before: Fri 13 Dec 2024 10:41:48 +0000
ROA not after: Thu 13 Mar 2025 09:41:48 +0000
asID: 16909
IP address blocks: 2602:f78a:40::/48 maxlen: 48
2602:f78a:41::/48 maxlen: 48
2602:f78a:44::/48 maxlen: 48
2602:f78a:45::/48 maxlen: 48
2602:f78a:46::/48 maxlen: 48
2602:f78a:47::/48 maxlen: 48
2602:f78a:48::/48 maxlen: 48
2602:f78a:49::/48 maxlen: 48
2602:f78a:4a::/48 maxlen: 48
2602:f78a:4b::/48 maxlen: 48
2602:f78a:4c::/48 maxlen: 48
2602:f78a:4d::/48 maxlen: 48
2602:f78a:4e::/48 maxlen: 48
2602:f78a:4f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:27:db:16:55:c7:3c:bd:17:1a:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 13 10:41:48 2024 GMT
Not After : Mar 13 09:41:48 2025 GMT
Subject: CN=0117de75-f126-4e87-bf46-b4e202846eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:00:d8:f2:3f:07:0f:32:21:69:b0:b8:e5:
18:f8:88:78:e3:3b:79:5e:4e:a8:5d:49:dd:e0:ac:
a3:26:18:33:c2:ae:0f:16:79:ed:07:ef:21:ab:44:
c1:5c:08:2a:2b:4c:b2:09:aa:7d:e8:1d:56:69:d9:
7d:a8:f8:76:ca:78:fe:bd:68:83:a8:73:c6:6b:96:
9f:3e:64:25:cf:f7:8a:92:bc:e1:45:6d:71:85:4d:
64:ad:7d:25:e3:c7:be:56:db:bf:8c:1e:45:0b:9d:
06:50:84:d1:00:b2:c4:bc:20:89:52:ff:67:a4:3e:
46:1e:e6:5a:fb:ec:89:10:98:f1:98:c4:57:f6:39:
86:7c:00:0c:c4:6c:80:02:76:2a:12:e1:a0:1b:7e:
e6:b4:6c:3b:67:f9:1f:8b:64:19:cc:ac:91:da:b5:
ee:09:d7:f8:b1:7b:55:78:c9:e3:8b:1f:c1:ff:89:
a6:fd:40:c6:cb:a0:97:2c:76:9d:06:b4:db:e9:95:
70:1d:50:92:0c:3a:de:67:fd:60:1e:06:27:86:d7:
48:9f:a6:f1:39:77:8a:bd:81:99:91:e2:12:c9:b3:
45:2d:c4:5a:4f:f4:5d:53:66:8a:68:ae:d5:33:f3:
88:f0:54:35:e7:58:d5:e1:74:1d:56:5f:c3:0d:89:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:67:D9:07:40:94:9C:3C:0A:35:A3:B1:EF:F5:76:FA:A6:97:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/9c7f4315-3ceb-38b5-81e3-41868077a065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:40::/47
2602:f78a:44::-2602:f78a:4f:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:70:11:d1:50:aa:3f:ef:7c:32:38:6f:25:1d:78:19:0d:92:
7f:97:31:d9:ea:aa:81:1f:78:28:f8:ec:be:ed:51:ad:2d:04:
94:4d:0b:96:fd:0b:ba:be:09:c1:4a:81:3c:2a:8c:71:60:3e:
e9:38:d8:49:5b:09:59:a8:07:d4:35:ad:65:11:d9:32:52:cd:
ec:67:a7:ad:67:2e:f4:2d:ef:72:6b:e5:6e:9c:2e:65:1d:98:
88:c9:40:44:b6:10:53:f4:06:d2:29:26:ca:e7:f8:71:68:8e:
81:c0:fe:f7:91:6a:07:7d:c9:d3:21:3a:2b:3c:67:30:93:8e:
fd:ed:ae:89:de:40:02:92:3d:bc:87:74:53:d4:36:ad:88:2f:
16:83:16:96:b8:64:34:0c:c0:91:70:43:3f:55:a0:e7:b5:72:
34:55:e7:0d:6a:75:f2:c3:b9:42:29:9e:52:3d:2e:91:ca:fa:
01:3b:b9:e3:9c:02:ee:e3:67:a5:24:b8:4f:fb:76:a3:73:dc:
d8:4b:39:08:e9:1f:ac:93:56:8f:2c:84:cb:7a:bb:36:5f:b1:
aa:4d:94:40:d9:9e:2c:45:a6:bf:c5:e9:23:9f:f4:b7:3f:5d:
8e:0a:24:fe:a6:9c:c9:80:7d:7b:03:e7:5c:73:e3:22:ba:14:
2e:98:9d:88
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEgxJ9sWVcc8vRcamQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJm
MGFmMB4XDTI0MTIxMzEwNDE0OFoXDTI1MDMxMzA5NDE0OFowLzEtMCsGA1UEAxMk
MDExN2RlNzUtZjEyNi00ZTg3LWJmNDYtYjRlMjAyODQ2ZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HMA2PI/Bw8yIWmwuOUY+Ih44zt5Xk6oXUnd
4KyjJhgzwq4PFnntB+8hq0TBXAgqK0yyCap96B1Wadl9qPh2ynj+vWiDqHPGa5af
PmQlz/eKkrzhRW1xhU1krX0l48e+Vtu/jB5FC50GUITRALLEvCCJUv9npD5GHuZa
++yJEJjxmMRX9jmGfAAMxGyAAnYqEuGgG37mtGw7Z/kfi2QZzKyR2rXuCdf4sXtV
eMnjix/B/4mm/UDGy6CXLHadBrTb6ZVwHVCSDDreZ/1gHgYnhtdIn6bxOXeKvYGZ
keISybNFLcRaT/RdU2aKaK7VM/OI8FQ151jV4XQdVl/DDYm7bQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFARAZ9kHQJScPAo1o7Hv9Xb6ppfpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUz
N2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvOWM3ZjQzMTUtM2NlYi0z
OGI1LTgxZTMtNDE4NjgwNzdhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmFlMzdmNWItY2ZlMi00YWVkLTg2
MTYtOTk5N2QzZjJmMGFmL2JhZTM3ZjViLWNmZTItNGFlZC04NjE2LTk5OTdkM2Yy
ZjBhZi5jcmwwHwYDVR0jBBgwFoAU61+QtmDWCOe68zylk+CiekPL5yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3
ZDNmMmYwYWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcBJgL3igBA
MBIDBwImAveKAEQDBwQmAveKAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACHAR0VCqP+98MjhvJR14GQ2S
f5cx2eqqgR94KPjsvu1RrS0ElE0Llv0Lur4JwUqBPCqMcWA+6TjYSVsJWagH1DWt
ZRHZMlLN7GenrWcu9C3vcmvlbpwuZR2YiMlARLYQU/QG0ikmyuf4cWiOgcD+95Fq
B33J0yE6KzxnMJOO/e2uid5AApI9vId0U9Q2rYgvFoMWlrhkNAzAkXBDP1Wg57Vy
NFXnDWp18sO5QimeUj0ukcr6ATu545wC7uNnpSS4T/t2o3Pc2Es5COkfrJNWjyyE
y3q7Nl+xqk2UQNmeLEWmv8XpI5/0tz9djgok/qacyYB9ewPnXHPjIroULpidiA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:12 2025 by rpki-client