Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/526924a4-9abc-3bec-a601-dbf4552c7312.roa
File: 526924a4-9abc-3bec-a601-dbf4552c7312.roa (raw, json)
Hash identifier: K02HENQ6pXFy9NiMsXYehS8rTv/yF5ybWHxUcAQgKO0=
Subject key identifier: 00:69:D5:F1:7C:C4:54:E9:AC:2E:AB:D9:8A:71:75:0B:EE:BA:5C:BF
Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial: 010D0C9F432858483FA4FD357AEA9A4BBF2DBF80
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/526924a4-9abc-3bec-a601-dbf4552c7312.roa
Signing time: Wed 18 Dec 2024 15:15:15 +0000
ROA not before: Wed 18 Dec 2024 15:15:15 +0000
ROA not after: Tue 18 Mar 2025 14:15:15 +0000
asID: 16909
IP address blocks: 2602:f78a:90::/48 maxlen: 48
2602:f78a:91::/48 maxlen: 48
2602:f78a:92::/48 maxlen: 48
2602:f78a:93::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:a4:fd:35:7a:ea:9a:4b:bf:2d:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Validity
Not Before: Dec 18 15:15:15 2024 GMT
Not After : Mar 18 14:15:15 2025 GMT
Subject: CN=8bd44f47-8b46-46a4-b09d-bb6a039797f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:a3:ec:c9:ee:21:a1:42:a7:03:cb:ad:20:
e5:4d:f5:fb:df:9c:bb:76:6e:9a:de:a5:58:64:99:
0d:ae:24:3b:02:14:8c:31:1e:53:4c:45:74:86:f4:
20:b3:9f:4c:4a:23:d6:bf:80:f0:94:23:d8:cc:b3:
21:09:8a:77:6e:16:d5:ba:b4:26:34:e6:2b:fc:9d:
24:ff:f5:f9:79:e2:91:8a:9c:b8:09:1a:96:e1:a2:
38:02:b8:89:da:95:eb:88:41:53:eb:84:0e:7c:89:
e1:f8:8e:6e:be:e1:c6:e3:ba:44:9c:9e:f3:87:17:
54:01:1b:95:cf:5c:24:3b:77:e1:b7:32:c8:54:46:
58:cb:6e:86:99:ea:25:2c:b4:52:80:ce:b3:9e:77:
fa:49:62:b7:df:53:a4:b1:b9:b0:1c:bb:5b:1d:16:
f7:f1:54:87:90:37:c2:a9:77:10:5a:27:90:12:f6:
70:ca:0c:5c:69:f8:b0:02:88:b8:b3:30:e9:78:63:
97:5f:a2:87:c5:bb:9b:7a:c2:2b:87:b6:85:c7:a4:
69:eb:cf:92:f9:92:e5:d3:4b:fa:ac:c7:d1:a5:1a:
18:15:ef:52:8f:9d:4c:8e:e8:51:b3:3d:17:c5:09:
12:12:54:33:37:33:88:5a:70:65:64:8c:2f:5a:0e:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:D5:F1:7C:C4:54:E9:AC:2E:AB:D9:8A:71:75:0B:EE:BA:5C:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/526924a4-9abc-3bec-a601-dbf4552c7312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl
X509v3 Authority Key Identifier:
keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f78a:90::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:72:6d:4f:d7:1c:c7:14:0f:48:d6:49:2e:a4:ae:ca:55:69:
7d:df:37:99:8e:47:78:e8:ca:55:3c:94:c2:08:53:f1:cf:c2:
e3:44:1c:04:1f:fc:d6:98:e2:a4:40:2c:c8:55:a1:cc:3c:5c:
60:8b:30:02:02:fc:c7:52:86:b5:10:ce:fe:54:c6:34:aa:5d:
c1:b9:4a:51:4e:08:fe:3b:60:4f:79:6c:5d:0b:b8:64:19:7a:
1a:0d:27:b0:d7:81:2a:88:90:f5:f9:f5:0a:93:3b:56:50:3f:
a0:bc:88:88:e9:72:fe:1b:72:a6:fa:ce:5b:73:b4:bc:f4:83:
82:c3:27:2a:fc:30:d5:a7:7b:0e:f7:60:c0:d7:49:7b:30:a3:
a4:0c:e6:5d:98:74:60:92:1f:2e:92:64:1f:bc:f4:55:22:72:
78:00:a1:86:52:30:87:18:08:08:43:cc:e8:ea:67:83:58:40:
d9:57:54:02:eb:15:13:38:5c:ef:f6:60:e1:4b:67:ea:af:d0:
0f:51:2f:07:f0:e3:33:9f:42:ba:9c:bb:c3:da:8d:70:2f:d9:
ab:d5:22:c4:cf:d6:d6:16:8d:7c:c8:e0:cf:3b:9b:7d:9a:93:
05:57:42:30:5e:34:82:66:9f:55:62:73:ad:2a:44:b4:f3:b3:
62:59:e5:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg/pP01euqaS78tv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJm
MGFmMB4XDTI0MTIxODE1MTUxNVoXDTI1MDMxODE0MTUxNVowLzEtMCsGA1UEAxMk
OGJkNDRmNDctOGI0Ni00NmE0LWIwOWQtYmI2YTAzOTc5N2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY6j7MnuIaFCpwPLrSDlTfX735y7dm6a3qVY
ZJkNriQ7AhSMMR5TTEV0hvQgs59MSiPWv4DwlCPYzLMhCYp3bhbVurQmNOYr/J0k
//X5eeKRipy4CRqW4aI4AriJ2pXriEFT64QOfInh+I5uvuHG47pEnJ7zhxdUARuV
z1wkO3fhtzLIVEZYy26GmeolLLRSgM6znnf6SWK331OksbmwHLtbHRb38VSHkDfC
qXcQWieQEvZwygxcafiwAoi4szDpeGOXX6KHxbubesIrh7aFx6Rp68+S+ZLl00v6
rMfRpRoYFe9Sj51MjuhRsz0XxQkSElQzNzOIWnBlZIwvWg7z4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFABp1fF8xFTprC6r2YpxdQvuuly/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUz
N2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvNTI2OTI0YTQtOWFiYy0z
YmVjLWE2MDEtZGJmNDU1MmM3MzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmFlMzdmNWItY2ZlMi00YWVkLTg2
MTYtOTk5N2QzZjJmMGFmL2JhZTM3ZjViLWNmZTItNGFlZC04NjE2LTk5OTdkM2Yy
ZjBhZi5jcmwwHwYDVR0jBBgwFoAU61+QtmDWCOe68zylk+CiekPL5yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3
ZDNmMmYwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL3igCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGxybU/XHMcUD0jWSS6krspVaX3fN5mOR3joylU8lMIIU/HPwuNE
HAQf/NaY4qRALMhVocw8XGCLMAIC/MdShrUQzv5UxjSqXcG5SlFOCP47YE95bF0L
uGQZehoNJ7DXgSqIkPX59QqTO1ZQP6C8iIjpcv4bcqb6zltztLz0g4LDJyr8MNWn
ew73YMDXSXswo6QM5l2YdGCSHy6SZB+89FUicngAoYZSMIcYCAhDzOjqZ4NYQNlX
VALrFRM4XO/2YOFLZ+qv0A9RLwfw4zOfQrqcu8PajXAv2avVIsTP1tYWjXzI4M87
m32akwVXQjBeNIJmn1Vic60qRLTzs2JZ5Qg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:54:51 2025 by rpki-client