Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/be2ce394-e0cf-3987-9662-da9b1138018d.roa
File: be2ce394-e0cf-3987-9662-da9b1138018d.roa (raw, json)
Hash identifier: ccnIXIKO364foXjFxShaC5MS+i/RaLk4v268Td893ms=
Subject key identifier: 17:A8:45:63:CC:7C:D6:D8:E4:00:69:A3:3F:3D:8A:10:92:8C:84:88
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F432858481DD3CB426640EECA547894C0
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/be2ce394-e0cf-3987-9662-da9b1138018d.roa
Signing time: Fri 06 Dec 2024 12:32:04 +0000
ROA not before: Fri 06 Dec 2024 12:32:04 +0000
ROA not after: Thu 06 Mar 2025 12:32:04 +0000
asID: 16909
IP address blocks: 2602:f78a:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:d3:cb:42:66:40:ee:ca:54:78:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 6 12:32:04 2024 GMT
Not After : Mar 6 12:32:04 2025 GMT
Subject: CN=4a1f5309-6c54-4848-8adf-d8dc8563c907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:90:39:4d:bd:08:7b:05:cb:84:47:ba:70:
33:67:b7:b6:3e:e8:18:f2:e6:33:c5:bf:fc:a0:d8:
dc:89:23:4a:2d:e7:dd:47:03:73:b4:2e:c2:6a:a9:
12:0a:d4:a5:ef:12:a6:d8:52:b5:4d:d7:df:46:fc:
48:61:51:e6:0c:38:6c:e0:ac:3b:5a:6b:85:e6:0b:
d0:e3:0f:a4:f5:75:20:8c:af:03:a3:9b:02:21:10:
1e:eb:70:e5:a8:6c:64:36:66:04:2a:69:d3:42:6f:
5e:d1:73:f3:19:c3:06:10:e7:c8:e8:ab:09:6a:f7:
f0:9e:54:38:1b:b4:ed:2b:df:7f:03:d6:d4:0a:7d:
77:9a:f8:c5:19:0e:9f:c8:00:ac:6a:53:b2:4e:0f:
f0:46:e7:94:13:81:21:8f:3d:bc:c1:52:db:e3:4f:
91:99:80:b3:39:bc:f8:6b:69:b6:e2:07:10:a1:cf:
1c:6e:d4:55:1f:ec:7a:07:61:e6:f3:e9:16:4c:22:
2d:be:c9:9c:0f:cf:ca:99:b5:7f:7e:22:98:1a:f5:
9a:4e:28:3f:55:b9:30:46:be:18:1a:92:5e:72:92:
d6:b9:7e:f3:34:d3:34:2c:a2:c4:ba:25:83:18:00:
a2:d7:89:9f:ea:d9:48:cb:2f:b5:9b:1c:0e:fa:b1:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:45:63:CC:7C:D6:D8:E4:00:69:A3:3F:3D:8A:10:92:8C:84:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/be2ce394-e0cf-3987-9662-da9b1138018d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:57:9e:49:bb:c2:81:22:21:5e:c7:30:87:ca:59:5a:ab:04:
dc:73:8e:7f:0b:74:20:0e:b5:c0:0a:5f:0a:a0:d8:1f:bd:31:
1a:1b:4e:7e:0d:e8:6d:5d:96:77:f1:63:a7:9b:25:b6:c5:3e:
9e:29:c6:39:d8:3d:92:95:ac:c7:54:1c:69:63:26:2c:df:8f:
7c:42:d2:54:0c:f7:f2:47:ed:e1:44:37:06:99:89:d2:ce:bb:
af:bc:44:a5:cf:c7:18:83:c2:0a:f6:9a:71:1c:1d:7e:e2:83:
89:ce:44:89:e6:e7:e2:88:f1:e9:04:f7:94:e7:23:a8:b4:db:
1a:e5:6f:42:f9:4b:b6:ed:77:1f:0c:65:92:55:63:f2:6f:d1:
29:d4:51:e1:68:27:f3:21:a9:e7:b7:9e:91:14:c2:fa:c6:fc:
84:62:97:06:bf:94:74:0f:f8:f0:d5:b4:2a:17:0f:5c:b8:0f:
4a:ed:b9:a1:5c:a2:d6:2a:fc:5e:19:08:61:c1:f4:d4:46:a8:
bc:7d:cd:a7:a9:56:df:5c:7d:37:e9:c7:d8:ee:6f:e2:32:6c:
a3:39:a8:80:bb:8b:69:8e:f9:9d:b1:a4:81:f9:74:ab:66:76:
9c:5b:ae:8e:8e:ee:31:e4:97:bd:bf:bd:04:4f:93:fa:df:02:
08:de:64:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgd08tCZkDuylR4lMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJm
MGFmMB4XDTI0MTIwNjEyMzIwNFoXDTI1MDMwNjEyMzIwNFowLzEtMCsGA1UEAxMk
NGExZjUzMDktNmM1NC00ODQ4LThhZGYtZDhkYzg1NjNjOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI2QOU29CHsFy4RHunAzZ7e2PugY8uYzxb/8
oNjciSNKLefdRwNztC7CaqkSCtSl7xKm2FK1TdffRvxIYVHmDDhs4Kw7WmuF5gvQ
4w+k9XUgjK8Do5sCIRAe63DlqGxkNmYEKmnTQm9e0XPzGcMGEOfI6KsJavfwnlQ4
G7TtK99/A9bUCn13mvjFGQ6fyACsalOyTg/wRueUE4Ehjz28wVLb40+RmYCzObz4
a2m24gcQoc8cbtRVH+x6B2Hm8+kWTCItvsmcD8/KmbV/fiKYGvWaTig/VbkwRr4Y
GpJecpLWuX7zNNM0LKLEuiWDGACi14mf6tlIyy+1mxwO+rHHJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBeoRWPMfNbY5ABpoz89ihCSjISIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUz
N2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvYmUyY2UzOTQtZTBjZi0z
OTg3LTk2NjItZGE5YjExMzgwMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmFlMzdmNWItY2ZlMi00YWVkLTg2
MTYtOTk5N2QzZjJmMGFmL2JhZTM3ZjViLWNmZTItNGFlZC04NjE2LTk5OTdkM2Yy
ZjBhZi5jcmwwHwYDVR0jBBgwFoAU61+QtmDWCOe68zylk+CiekPL5yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3
ZDNmMmYwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3igAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADxXnkm7woEiIV7HMIfKWVqrBNxzjn8LdCAOtcAKXwqg2B+9MRob
Tn4N6G1dlnfxY6ebJbbFPp4pxjnYPZKVrMdUHGljJizfj3xC0lQM9/JH7eFENwaZ
idLOu6+8RKXPxxiDwgr2mnEcHX7ig4nORInm5+KI8ekE95TnI6i02xrlb0L5S7bt
dx8MZZJVY/Jv0SnUUeFoJ/Mhqee3npEUwvrG/IRilwa/lHQP+PDVtCoXD1y4D0rt
uaFcotYq/F4ZCGHB9NRGqLx9zaepVt9cfTfpx9jub+IybKM5qIC7i2mO+Z2xpIH5
dKtmdpxbro6O7jHkl72/vQRPk/rfAgjeZCE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:13 2025 by rpki-client