Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f90665e-f858-3af4-8f7e-e6eae3138d71.roa
File: 8f90665e-f858-3af4-8f7e-e6eae3138d71.roa (raw, json)
Hash identifier: cE9/9s2SU+VzbOi6mMLq+R6fQJz+Uj1/aIpxcYD0+zg=
Subject key identifier: B7:0F:59:FF:4F:3C:7A:C0:74:37:D5:D9:A3:96:45:0A:CD:AD:8C:31
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC36B13474E8BA99884E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f90665e-f858-3af4-8f7e-e6eae3138d71.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 202
IP address blocks: 2607:f028:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:36:b1:34:74:e8:ba:99:88:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=0c7c01ff-8bc4-4ec5-b676-45087a2d3dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:d7:fd:72:b0:13:2f:d3:2c:bc:33:d2:79:
41:bb:ea:11:f8:93:31:cf:c3:16:f7:14:ee:60:fb:
73:09:99:93:7f:c9:84:59:2f:f6:2a:ba:89:1a:bb:
d1:03:3e:2d:34:96:cc:22:3e:ac:cb:b2:46:9b:cc:
75:54:5b:c7:da:9a:2e:e0:51:68:6d:0c:49:c5:8b:
44:ad:e4:21:34:cd:95:44:2f:b4:8d:0c:9d:15:4c:
8c:2b:ae:6c:6c:2b:37:fd:ea:9c:3a:d5:56:f3:3e:
49:df:f3:10:92:56:f8:39:00:a8:6a:74:01:a8:95:
3b:71:8b:4f:a4:a1:87:ae:2b:fb:65:7f:72:ab:01:
89:4c:1d:93:e9:89:c9:33:0e:0c:2f:2a:05:a9:c6:
41:d1:34:35:28:24:23:13:7f:5f:69:64:4d:07:26:
2e:e7:c8:09:fe:2f:f8:3e:a9:b9:55:28:54:c0:81:
08:93:63:9c:75:6a:07:76:47:22:92:09:10:5a:95:
8d:cf:ec:96:01:2c:a8:d9:3d:4c:31:3a:d7:58:b3:
ad:ee:a3:c2:72:0e:f7:ed:0b:12:ba:6c:dd:6f:18:
ae:2e:40:d3:9b:72:76:15:2d:33:c1:ab:fe:63:68:
9c:3a:80:2d:6c:45:54:ed:43:f8:45:12:d2:af:18:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:59:FF:4F:3C:7A:C0:74:37:D5:D9:A3:96:45:0A:CD:AD:8C:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f90665e-f858-3af4-8f7e-e6eae3138d71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:102::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:0a:0d:f4:bb:ab:dc:9f:7f:37:ad:a0:42:ad:a2:e7:01:84:
37:dc:11:d0:ca:ca:78:c5:67:46:5c:8d:0d:af:c8:d0:54:7c:
3e:9e:1f:e4:3c:f6:05:4b:69:e2:f2:b5:4e:97:e0:a7:eb:76:
7a:d9:c5:11:53:86:ee:70:98:d5:b6:fc:9e:21:e4:01:fe:60:
4f:b4:a1:df:7a:0f:b2:83:15:b2:25:5f:2f:5f:6d:1e:62:c0:
f4:97:4e:3c:25:57:91:a3:cc:90:fe:26:cd:32:8a:89:72:b7:
b6:a5:1e:51:09:de:8e:67:21:3a:f5:c5:4f:f2:96:e5:b4:40:
a1:03:e7:cf:4d:af:70:31:a0:15:29:23:eb:8a:14:e9:97:c4:
c6:51:49:43:eb:e1:83:f2:2b:ff:76:26:13:cc:a1:7f:b9:53:
43:48:67:d4:01:2d:a0:3b:23:2a:ab:cf:31:f1:e6:bc:75:04:
a5:a6:fe:0d:8f:90:d8:ff:0d:46:f2:b6:e1:30:20:16:6f:43:
9c:83:f5:9b:a6:5d:28:b3:2e:31:11:17:7e:10:18:79:ff:1d:
8d:da:17:11:53:46:3e:67:7e:2a:68:9a:69:0c:1c:fe:b6:9d:
96:f7:34:2f:24:db:7f:c6:7d:81:51:75:dd:c6:c2:bf:8b:3d:
d5:eb:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:27 2025 by rpki-client