Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a874bf36-8aa3-3795-b93d-f7a0dc8e1234.roa
File: a874bf36-8aa3-3795-b93d-f7a0dc8e1234.roa (raw, json)
Hash identifier: bjNlDcsdWunDSRecbliVX5JpyJUmm5NaBpJXgZY4e30=
Subject key identifier: 4D:74:78:CD:0C:21:2C:EB:7F:31:41:F5:85:E7:3A:B1:0F:4B:FF:02
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC2F3D85DD8EB082A9FA40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a874bf36-8aa3-3795-b93d-f7a0dc8e1234.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 3360
IP address blocks: 2607:f028:71::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:2f:3d:85:dd:8e:b0:82:a9:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=52a7d451-8b76-4123-a748-d795c1d8d7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:46:ce:00:b7:f8:8e:11:85:86:f2:8c:07:
78:17:21:77:78:64:dd:0a:e8:b4:81:fd:17:2f:74:
5c:9b:6c:e0:fa:c0:a2:2e:32:02:84:f9:1b:0f:be:
76:d5:19:8b:ce:33:d8:4d:d6:4c:49:f8:4f:c0:4b:
96:48:b0:e4:dd:7f:42:ef:b3:c5:0b:a2:53:fc:2b:
fa:af:f5:3a:c0:b6:09:ec:04:e4:3e:30:bc:06:c1:
80:f2:4a:f7:85:09:5d:d9:09:7f:ed:eb:b0:dd:05:
4b:ef:45:4c:94:e5:a7:2a:de:0a:d5:60:75:79:ae:
b2:f4:7e:5d:04:a0:2c:03:9c:b4:2f:c1:78:cc:81:
28:2d:f6:ec:f8:85:bc:72:48:07:d7:57:fc:3b:f9:
b2:b4:90:86:91:1c:3f:60:5a:92:61:52:5f:a8:14:
a4:e5:d2:61:10:89:3e:c6:5d:aa:7c:a7:45:03:d1:
f7:e2:f6:ca:52:40:9d:39:a2:82:95:8f:52:1e:fc:
d4:cd:6b:90:49:60:9a:a8:05:0f:4b:b2:d5:58:19:
c9:0d:21:22:a3:76:41:6c:69:cb:0d:6e:85:7e:d5:
bf:99:6e:90:4e:0d:c1:47:dd:d9:f3:73:5c:21:80:
68:a6:b1:01:51:19:15:09:a3:36:47:b4:6b:2b:f3:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:78:CD:0C:21:2C:EB:7F:31:41:F5:85:E7:3A:B1:0F:4B:FF:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a874bf36-8aa3-3795-b93d-f7a0dc8e1234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:71::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3e:6d:c8:19:18:a3:9e:82:ba:08:d9:a1:cf:cb:f6:81:d4:
19:f5:e1:27:77:b0:bf:96:31:ba:4d:57:6b:a9:80:0e:c9:88:
cb:ab:65:48:1e:00:ef:45:09:8e:c5:b8:e8:f1:78:a1:95:09:
33:5f:81:1a:ff:a2:73:80:a3:94:39:3e:ce:47:51:cc:48:5f:
03:64:45:77:a8:7b:1b:ed:c2:2e:0f:d3:5a:ef:0d:cd:49:ed:
22:b6:92:51:72:29:0b:c2:8a:2f:ea:09:b5:dd:e9:78:54:d7:
00:7f:75:17:39:ef:e3:e9:c9:c2:f6:ea:2c:4d:d0:93:65:11:
53:f5:d2:fc:e4:7d:b9:ca:47:c7:c5:03:ab:9c:bb:6f:3e:18:
7c:6d:7b:e2:b2:4c:8b:54:35:2c:ed:1f:df:c2:fa:c5:8c:49:
41:ce:5e:5e:b6:5c:ce:0b:63:90:1d:d6:5b:7a:72:fc:cb:92:
86:13:7a:0b:39:a3:ae:77:51:84:5d:1e:0a:eb:b4:83:5b:62:
b8:0b:db:c7:23:13:59:c8:38:ba:77:76:cd:e9:53:d5:d9:ba:
e2:67:28:84:ff:14:87:eb:7b:6b:f8:5c:51:d4:c0:61:1a:24:
d3:8c:fb:9e:e6:22:c5:37:f9:3d:c4:da:12:85:ee:2f:d2:e6:
f1:fd:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:18 2025 by rpki-client