Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa
File: a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa (raw, json)
Hash identifier: O/eUcHx1Q3AcBb4up7EeZ2W+YU3ruSd55FgBeep/NCQ=
Subject key identifier: 2E:76:BD:41:6F:60:D3:ED:51:1E:BB:24:76:8E:91:60:07:8B:05:E8
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F432858482714000923CEC64550711E00
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa
Signing time: Mon 09 Dec 2024 20:03:43 +0000
ROA not before: Mon 09 Dec 2024 20:03:43 +0000
ROA not after: Sun 09 Mar 2025 19:03:43 +0000
asID: 16509
IP address blocks: 2602:f805::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:14:00:09:23:ce:c6:45:50:71:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: Dec 9 20:03:43 2024 GMT
Not After : Mar 9 19:03:43 2025 GMT
Subject: CN=c1e3197a-15ad-4be7-9683-6138c00c8751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:9e:6a:86:3c:e0:31:84:7a:0e:56:2f:11:
46:f6:b7:c2:c9:a5:a6:27:0b:95:bc:4f:eb:c7:40:
33:8b:48:89:5a:6e:69:4f:ec:aa:e7:e6:c2:8d:f2:
da:df:1f:d5:bc:92:f4:0c:15:84:7f:ba:c3:a0:ec:
8c:67:21:bd:f4:aa:d2:f8:3f:26:cd:9e:da:87:15:
65:df:73:f7:3f:c9:27:57:7f:5f:26:2d:a2:84:cd:
0a:e3:1a:36:3c:21:5c:48:30:df:ba:0e:cd:66:93:
ba:b9:e2:67:45:90:2b:2a:56:6c:4d:ba:cd:f5:a0:
61:0f:7f:59:08:64:73:26:59:92:3f:a2:be:20:ff:
67:09:f5:8b:1f:42:c5:15:68:87:f7:04:95:0b:53:
18:39:ec:74:3d:8f:91:94:da:68:af:d5:cc:c8:d8:
ba:ff:7d:1c:7b:70:c9:3f:a9:3b:ab:64:1b:bf:6a:
05:2c:2f:db:b2:1b:c5:51:e8:e5:dc:18:eb:7b:2d:
9c:fc:ff:26:d6:79:80:a7:84:0f:18:6e:57:66:fb:
28:a1:22:e1:22:21:ff:b7:0f:a1:81:e9:eb:6f:a2:
96:e1:64:dc:fc:46:a9:5b:71:75:6b:01:a7:ec:08:
5e:dd:fa:9b:71:3a:90:bc:3c:68:50:5d:08:93:0e:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:76:BD:41:6F:60:D3:ED:51:1E:BB:24:76:8E:91:60:07:8B:05:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:5c:60:48:43:31:96:68:c5:e1:92:6d:b4:f0:a9:27:51:a0:
36:83:a8:9c:74:09:07:30:be:53:81:6a:42:2f:82:ec:19:65:
0f:ae:77:b2:be:38:f5:7d:1d:8a:84:df:74:6f:2d:21:90:8e:
e5:5e:9f:5c:d2:0e:15:7b:40:01:0c:34:7d:f9:aa:2e:e0:a6:
4e:0a:d1:ec:1e:39:21:bc:e2:b2:1b:5e:62:ad:b6:3d:da:05:
78:26:95:b9:e2:ba:69:e6:d4:ca:38:cd:bd:25:b5:cc:95:a6:
53:ef:d8:b7:94:0b:5c:d8:1c:dc:14:db:0d:68:ca:2e:9e:af:
66:89:19:fc:b3:d0:67:35:99:00:8a:77:fc:fa:7b:c2:1e:0b:
30:f4:03:b7:46:2a:16:b7:3a:e2:ea:54:2b:43:00:96:9b:05:
d1:24:71:1e:b6:d2:07:a8:7c:0e:e8:9c:3f:25:d9:02:7e:fa:
46:36:e6:29:a5:56:f0:96:1e:0e:67:ad:dc:85:c9:f9:6f:27:
95:72:20:b4:87:a3:c0:13:57:32:74:25:9e:30:3d:9e:97:56:
0c:ef:01:16:0c:5c:5c:75:08:1d:cf:50:e7:10:e2:49:37:64:
b8:6a:e5:84:81:18:f4:1b:d5:b2:4f:d0:ec:ea:df:6b:ba:e4:
b8:ef:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:29 2025 by rpki-client