Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa
File: 3e06039e-f189-3fc0-bbd8-9a9650543373.roa (raw, json)
Hash identifier: Xg5fbqJdtw9RewzYkuIIVRxZakGEOjifee1RxP9+RaE=
Subject key identifier: F3:D2:C0:F5:52:2D:75:B2:D2:69:CB:DF:62:F4:70:ED:81:D9:8A:8F
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584834557784E205E7FC55FCC480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 3356
IP address blocks: 2607:f028:62::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:77:84:e2:05:e7:fc:55:fc:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=f852d996-0238-49bc-b069-a8eca898e230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:11:81:c0:23:57:a2:1a:92:d4:82:7f:ec:
9f:71:37:16:ec:50:e0:57:0b:ca:39:97:14:60:81:
46:86:cc:a5:a7:0e:ef:c1:06:d5:b5:ac:e6:88:74:
5c:b9:f5:0d:50:3a:4a:61:23:1d:68:73:7b:7d:84:
50:8b:69:45:f6:5f:f4:f8:22:8f:9c:24:99:38:80:
bc:cb:0b:b7:57:58:ca:0c:92:a2:68:ee:c6:f3:bf:
db:3d:f0:d6:c0:78:e4:cd:1b:ab:86:c6:06:19:d0:
a8:b2:08:ae:54:7b:48:1b:b1:01:aa:1e:f5:0c:14:
80:22:98:a2:bb:32:96:52:58:a1:ca:51:66:22:72:
a2:af:a8:a4:b5:4a:59:58:2f:58:b9:a4:4b:7a:10:
b1:3c:f7:b0:83:70:f7:ae:91:50:29:46:c9:df:8f:
65:ab:67:5e:e1:0e:d4:d8:f9:16:a1:6e:67:24:41:
9c:e5:f2:13:6c:eb:f5:0b:00:98:c1:fc:3b:4c:fb:
5d:eb:90:ac:0e:56:3d:61:9b:1f:ed:b7:bf:83:89:
5b:8f:af:d7:ff:10:0c:1c:30:47:54:db:7e:90:75:
34:a3:c9:d9:a2:7e:f9:29:73:b0:ec:49:dd:83:2b:
dd:ed:50:2b:40:0f:66:ca:81:1b:20:51:09:3f:df:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D2:C0:F5:52:2D:75:B2:D2:69:CB:DF:62:F4:70:ED:81:D9:8A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:62::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ba:33:2d:37:4a:0c:64:45:2f:2d:04:8c:3e:a8:c6:b2:d6:
ba:a8:91:fe:9b:5b:61:1d:a2:88:fc:71:28:50:38:f5:37:f7:
08:2f:4f:72:91:5e:12:69:ad:bc:7b:b5:99:f2:51:79:12:c9:
de:68:e2:5d:2c:e9:c7:29:a7:df:b2:e2:92:ef:85:75:f5:7e:
73:d4:f6:81:55:bb:7e:d2:01:2d:98:20:5d:83:c7:94:ae:53:
2b:d7:e2:b1:b1:11:72:6e:ca:26:e2:5b:52:ac:b0:96:10:32:
18:29:11:61:8c:21:4c:56:be:4a:74:4a:e0:47:2e:0c:3c:02:
f8:8c:08:8b:f7:dd:43:c8:25:92:3a:d6:a8:12:d7:28:88:0d:
2f:d5:03:b4:14:cf:64:b4:b1:da:55:18:3c:1c:d7:0d:64:ab:
d6:43:22:36:5b:57:46:89:1d:15:01:21:b7:02:d6:8f:97:cf:
ee:a1:7b:09:64:32:02:10:0c:7a:3c:00:be:31:d6:3d:b3:18:
5d:ce:d4:04:3e:d4:bd:96:c1:cb:7f:bc:d5:24:46:15:34:a0:
d3:9f:c5:af:4a:a2:63:14:19:71:00:5a:8c:b2:3a:3e:bb:f5:
68:1e:02:d0:43:bc:f5:5d:08:2c:cc:5f:0b:75:a5:6d:c3:53:
2b:61:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:43:05 2025 by rpki-client