Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa
File: 4f7d63f1-0347-307b-af54-f3d44f4608a8.roa (raw, json)
Hash identifier: csfP92Omu//EjxnQsSyC3arczIvvc2Q33hrNKgLydFk=
Subject key identifier: 9D:D6:93:1E:61:42:57:0C:0D:BC:E4:90:E4:57:05:6E:8E:76:36:AE
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC310A53E6C2F9047C6D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 3360
IP address blocks: 2607:f028:121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:31:0a:53:e6:c2:f9:04:7c:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=165d0782-6f15-4d82-8c65-639bd4e4d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:45:fe:a3:26:a9:e4:52:57:5e:00:c6:22:
8d:af:c3:12:d7:09:4a:e5:f9:61:3e:b6:5d:ea:e5:
9d:97:af:91:41:ac:10:f5:04:db:45:8d:2f:47:2b:
e9:4d:b7:a6:c0:6d:76:8f:9d:30:dd:b5:c2:66:37:
4d:a5:cf:51:8c:3c:b3:cb:02:f6:7a:e7:83:86:93:
c7:a8:2f:91:c8:62:c0:a1:5f:f8:66:f1:a3:f0:e2:
8e:2b:4e:93:13:8e:5d:61:a4:73:0d:e4:02:bc:54:
33:9d:78:ac:dd:04:43:b7:77:12:a1:b2:c3:6b:24:
13:ab:ff:21:9d:ce:ed:92:ea:ae:ff:47:8f:c3:04:
44:43:a1:f1:6f:c1:24:a6:fe:7a:7b:49:39:63:56:
70:f1:a5:d9:48:19:63:df:17:13:6b:db:42:3f:81:
18:28:73:65:68:94:69:2c:67:1f:0e:a8:c0:32:15:
c8:6f:ee:44:a3:d3:75:9f:8e:52:d4:63:5f:43:25:
25:bb:1c:4f:67:64:ce:ab:cf:10:21:df:d9:59:8d:
30:e7:48:51:66:13:fb:f3:64:8b:2c:21:3b:81:c2:
09:2a:7d:a4:89:89:a3:45:21:6c:ee:45:19:3c:6d:
a0:2a:85:fa:3b:a4:bd:ef:95:8d:0e:5d:fe:d7:73:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:93:1E:61:42:57:0C:0D:BC:E4:90:E4:57:05:6E:8E:76:36:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4b:dd:90:b7:29:dd:cf:99:a1:10:d9:f2:9e:87:3e:a0:cd:
ab:40:17:2a:7b:ba:7d:b3:98:fd:b2:a2:08:d5:09:72:51:d9:
1f:54:3e:62:58:5d:6d:4c:d4:4e:24:bf:e0:41:64:4b:0b:81:
f7:73:25:e0:48:6f:60:40:1e:27:1e:4f:43:14:4b:29:97:fb:
95:00:30:ff:c2:19:a8:cb:11:2a:6d:83:dd:1b:7d:22:e2:fc:
83:08:8b:42:8d:c5:ef:cc:77:29:0f:7d:b7:ec:22:7e:cd:99:
43:ba:b5:6f:75:f8:2f:fe:9f:eb:ef:eb:eb:88:9e:ad:78:71:
92:e0:84:c1:2c:08:0f:e9:d6:6e:84:a5:b2:b8:d6:b2:69:a0:
24:42:cd:b7:ca:31:12:0b:b2:dc:a9:58:2c:dd:7f:df:60:46:
dd:88:87:01:5b:58:06:88:88:a4:73:b5:ce:a8:ae:23:28:c1:
20:c2:95:56:5f:b6:c0:ec:7d:4e:ac:f0:25:29:3e:4f:99:f6:
42:ab:7b:99:54:1a:ed:28:89:f4:37:e7:b3:e7:7a:78:75:52:
a7:bd:f3:13:0f:41:cd:36:e1:aa:10:df:89:50:d5:ef:98:75:
0a:fd:5d:96:5f:ac:85:c2:13:3b:67:37:c3:49:21:7d:f2:7a:
ca:fd:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:58 2025 by rpki-client