Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e765b9e7-c0b0-3f91-a9b0-6e34a0e9ef50.roa
File: e765b9e7-c0b0-3f91-a9b0-6e34a0e9ef50.roa (raw, json)
Hash identifier: maNwO/hnB7qCAAXWVoTrRhmi26koThwfk/zOSv9uId8=
Subject key identifier: F5:2C:D5:67:B8:8E:45:97:EB:86:19:84:EA:5B:0A:E4:9A:AA:4C:CE
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584913AC2B4A80D14C852E68AA40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e765b9e7-c0b0-3f91-a9b0-6e34a0e9ef50.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 202
IP address blocks: 2607:f028:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:2b:4a:80:d1:4c:85:2e:68:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=690b5bcf-2e83-497e-8cab-eb45ed7a1187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:d4:f3:2b:cb:76:96:eb:6c:df:b2:f8:7e:
4d:8d:2a:dd:a6:d4:b9:ed:43:c5:a4:47:2f:a1:59:
d9:f9:38:48:86:51:b8:78:51:ac:8d:aa:68:2b:6b:
9a:f8:1c:a5:3b:fa:77:6d:6b:10:ab:3a:46:e1:bd:
2d:7a:81:0e:35:b6:74:79:14:ff:92:d9:6f:06:48:
33:34:1f:4b:68:73:7c:d8:4d:12:09:3a:e7:ac:ce:
4a:62:6d:3f:67:76:d9:67:5f:58:01:17:74:0e:c9:
82:47:6f:13:3f:05:ba:c5:4c:3e:0e:c5:35:d3:27:
4d:a0:3a:3c:e0:16:e3:2e:5e:61:95:be:42:b7:26:
b6:3e:86:40:08:fe:a5:3f:42:71:de:78:99:f7:02:
d9:ce:ee:03:ff:43:17:11:f4:13:8e:02:6b:88:9e:
6e:ea:78:58:31:5b:75:11:ca:92:59:f3:d0:34:a3:
fe:d8:52:0c:4a:df:ef:08:bd:af:44:46:06:5e:4b:
5e:43:ff:19:8a:0d:ff:4f:bc:90:12:ce:9a:08:01:
29:e0:c5:ff:de:79:c4:93:43:d2:d3:6d:51:5b:cb:
f6:19:28:08:33:f8:08:b6:a6:2b:3a:8a:71:06:9d:
93:10:ec:a3:36:57:a0:fd:e9:81:bb:34:c1:91:d9:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:D5:67:B8:8E:45:97:EB:86:19:84:EA:5B:0A:E4:9A:AA:4C:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e765b9e7-c0b0-3f91-a9b0-6e34a0e9ef50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:04:f4:d0:3a:78:7d:d8:39:05:d9:27:0b:b5:7d:38:a5:6a:
71:30:e0:46:0c:b9:3d:3b:3b:4f:93:61:09:39:77:5c:07:ec:
a6:d5:5d:cb:2c:cb:97:9f:ff:38:f4:e7:98:20:0c:70:25:c6:
3a:de:f6:b0:cb:b5:db:0d:53:d1:2d:76:24:db:69:31:d2:c0:
b0:98:fb:cb:59:11:3b:99:fc:26:5d:37:4a:2b:c2:6c:95:1b:
f6:1d:bd:24:aa:b0:12:c3:e9:cb:3c:5f:f2:ed:cd:ff:fb:d6:
81:2b:f1:41:71:1e:f0:c7:b2:f7:4a:29:c2:43:91:2f:8e:13:
58:fe:c4:dc:a8:a3:fa:d1:c4:47:ba:3d:c7:1e:2e:b2:e1:b6:
61:c8:d7:f6:2c:40:ee:c6:2d:1e:15:7a:48:3e:96:ed:95:44:
8c:d5:ae:29:ef:39:35:c4:19:51:d8:e0:11:e3:5f:7d:40:89:
d8:2a:4e:fc:af:41:53:c9:c6:d0:ed:42:16:5d:0d:11:c9:b6:
22:53:f9:fa:76:d7:5f:b1:d6:dc:83:37:e8:0a:1d:0f:cf:3d:
bd:dd:db:42:68:f2:af:34:e1:88:f0:f8:21:de:77:8e:83:f7:
e7:11:08:28:a0:6e:df:56:e2:6d:7c:94:80:aa:41:c7:0f:dc:
b7:1a:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:46 2025 by rpki-client