Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa
File: 3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa (raw, json)
Hash identifier: /AI8spN1dXyi5niWLgW/ofgj3vBhWRDqrjWImbGMk3o=
Subject key identifier: 5B:DD:F2:CE:64:73:64:69:40:14:5F:52:53:80:41:71:F5:C5:24:17
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F432858483455746C4E274F3EF9AB4F40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 203
IP address blocks: 2607:f028:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:74:6c:4e:27:4f:3e:f9:ab:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=0955bfec-2a51-4256-9738-94ce2ef292cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:08:cd:c6:62:07:bb:e0:42:4e:bb:d5:59:
2d:10:80:2c:f7:c3:34:41:92:1b:04:7e:5a:83:af:
58:9d:2c:bd:2c:a5:db:a7:76:e9:6f:98:d3:e7:03:
95:7f:c4:b1:f5:bc:21:f1:a9:eb:86:2c:58:bd:63:
b1:32:db:6b:a4:38:99:2b:b6:7b:21:ec:9b:97:5e:
95:b0:47:6e:c6:f3:62:f5:68:f4:70:e9:43:44:ca:
e6:55:74:7b:7a:b9:cd:61:28:3a:37:96:5a:43:e9:
cc:c4:6b:0e:00:08:ce:9e:df:f2:13:2c:74:f7:5c:
1d:f6:db:e7:9b:c4:c0:e1:18:d1:54:ff:14:ae:fa:
74:7f:fa:54:92:71:ee:a3:fa:d6:c1:77:ac:6a:77:
55:ee:87:57:12:64:1e:07:33:38:37:91:be:bd:47:
3e:bc:14:8f:da:7f:be:b0:5c:31:1b:b5:cf:f7:95:
2e:e0:a7:d3:b5:77:4d:87:2d:45:03:eb:28:02:b0:
58:6c:2d:4f:a2:0d:48:8c:5a:34:d2:60:a6:64:78:
9a:a7:8d:93:30:ae:a4:7e:bd:23:72:bf:08:76:f6:
62:6e:ee:d6:c6:33:1f:94:e1:11:7e:f5:c3:02:52:
44:f3:f2:c4:a2:63:8d:e0:98:60:70:1c:ec:17:02:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:F2:CE:64:73:64:69:40:14:5F:52:53:80:41:71:F5:C5:24:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3a:58:7a:1d:fc:22:9e:fa:93:20:b9:36:d1:36:db:79:c5:
d0:be:12:ce:4e:7e:4c:4a:ed:1a:f8:b3:84:8f:05:33:1d:c0:
01:e6:26:1f:f4:f1:7d:08:43:92:c7:86:12:62:d2:a5:10:3d:
f8:59:73:b9:db:7c:8e:c8:ac:5f:f9:d4:75:70:d9:75:1c:db:
73:3d:cd:5c:c8:63:13:be:0f:50:34:23:1b:a8:8f:28:64:40:
cd:36:32:a5:69:a5:7c:a7:92:66:86:0f:1a:7d:88:b3:54:3c:
ca:2a:e9:ec:b4:49:60:80:73:6d:62:86:60:47:a5:36:e1:bc:
75:49:59:3b:04:6e:8c:7d:56:31:ce:9f:47:1f:b8:64:10:db:
a6:a7:24:c5:22:e7:09:87:bf:db:40:57:e6:ff:84:e2:05:da:
9c:36:fb:dd:d2:d1:6f:bd:cd:4f:2d:a2:39:48:b3:28:89:60:
32:9b:ae:c4:61:19:32:59:0c:f4:e1:20:27:93:2b:a2:79:ee:
d3:7a:65:bd:38:0a:e1:89:25:58:01:f9:9f:18:c6:39:09:fe:
f8:df:8f:ad:7a:2c:f8:20:5e:f7:8a:98:1a:50:f3:7b:a9:62:
38:19:c1:e5:57:c4:15:bf:89:b4:ad:b7:81:cc:dd:7b:e6:c1:
df:27:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:45 2025 by rpki-client