Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/daded584-af1e-3276-975f-7b64f4ff0777.roa
File: daded584-af1e-3276-975f-7b64f4ff0777.roa (raw, json)
Hash identifier: QuagSpHrePUp4LZbY65v29WbFBwBznAymrlKdlkRV/k=
Subject key identifier: 32:C1:4F:0E:02:4D:1F:3A:AE:80:17:B0:FD:14:F1:E3:D1:C1:B1:23
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F4328584829CD49FDAD9226AF780FDD80
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/daded584-af1e-3276-975f-7b64f4ff0777.roa
Signing time: Tue 10 Dec 2024 19:28:40 +0000
ROA not before: Tue 10 Dec 2024 19:28:40 +0000
ROA not after: Mon 10 Mar 2025 18:28:40 +0000
asID: 401507
IP address blocks: 2602:f78a:20::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:cd:49:fd:ad:92:26:af:78:0f:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 10 19:28:40 2024 GMT
Not After : Mar 10 18:28:40 2025 GMT
Subject: CN=a721d604-d929-4b1d-a623-4a1748d2a2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:b1:d2:ca:b1:e4:da:09:69:06:f8:8a:fc:
06:bd:91:10:4e:aa:81:37:a0:7c:b2:c6:4a:98:f6:
a8:5c:fc:d0:98:d5:4b:a8:9d:de:8e:7b:37:db:a3:
80:95:65:c6:72:5a:18:92:ab:84:53:6e:1d:a9:25:
8f:a6:a6:02:5f:95:0a:2e:00:7b:24:b1:ae:7d:38:
f3:49:51:23:66:a5:2e:8f:99:6f:e9:19:c4:72:b8:
9a:ad:d2:e7:ae:be:0c:26:7d:8c:53:e8:88:f1:49:
88:7c:a8:94:ab:64:e4:5c:af:ff:e2:3f:e4:74:a3:
e9:70:2a:08:4d:85:3e:94:74:40:b4:b7:0d:55:07:
6b:bf:6d:9e:d5:b6:a0:ee:fb:af:23:04:82:c9:a7:
0f:df:a2:ba:1e:a7:b0:eb:d8:9c:6f:1b:04:5d:a7:
a4:83:a2:60:8c:dd:f5:6c:aa:1c:18:25:d2:2d:8a:
04:79:c8:b0:f3:3c:43:75:dc:b5:0d:75:d5:e7:08:
73:b3:be:fc:ae:b7:0a:69:2f:59:82:64:0c:65:66:
5f:da:09:1c:9f:1d:6d:38:d8:d1:fa:2e:20:a2:94:
68:18:9e:2c:28:af:68:28:cd:c6:56:f9:68:26:0a:
40:73:99:4c:8d:25:e5:f3:b0:95:63:98:81:2b:fa:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:4F:0E:02:4D:1F:3A:AE:80:17:B0:FD:14:F1:E3:D1:C1:B1:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/daded584-af1e-3276-975f-7b64f4ff0777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:20::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9b:25:ff:7c:dd:eb:a9:31:9b:1a:03:4a:24:65:65:d9:a3:
fe:c1:87:a2:22:58:2a:68:80:92:6e:d6:1f:63:9a:68:04:1f:
09:a1:35:02:6e:da:ec:f1:1f:b5:5e:55:62:b9:97:e9:ac:ef:
50:e8:79:16:99:b8:af:f5:e9:98:87:12:cd:ea:6c:54:80:6e:
bb:41:d6:5a:8a:4a:26:72:4f:78:03:da:86:1b:de:60:4e:27:
4a:f9:be:05:30:a1:1e:6f:ad:f8:63:66:38:33:48:23:df:02:
ea:ed:c0:8e:26:87:ec:d8:0f:4b:68:2e:3b:a2:9d:c6:c2:54:
a7:0e:75:3c:d5:7f:b7:ba:cc:b0:50:06:f4:68:78:0a:55:5d:
97:fd:ad:19:2e:40:f3:37:3a:1d:66:72:61:75:a1:7d:26:70:
a5:04:64:62:29:86:60:ee:eb:cf:79:4f:fc:72:22:4f:05:02:
0f:a9:3d:09:4d:d1:5d:0d:36:94:bd:10:f9:cd:ff:15:e6:06:
e2:5b:50:c6:cc:bd:4f:4e:e8:74:c4:63:15:46:b5:7f:0a:58:
0a:e5:5a:a7:83:03:64:2d:ea:be:7d:e0:4e:e9:4f:3b:99:b0:
09:e4:d5:97:be:c6:20:a9:fb:89:a6:2c:d8:0b:9b:53:bf:f2:
f2:c1:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:49 2025 by rpki-client