Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa
File: 4f7d63f1-0347-307b-af54-f3d44f4608a8.roa (raw, json)
Hash identifier: Lv0Eui2LSYEt9z0QmvGb92WZWpkjQ5l0MCg5BqIbSJk=
Subject key identifier: 86:C5:93:C2:93:21:11:7A:6C:69:00:16:44:FF:55:0F:DB:8F:A7:AA
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285848345579AF6B37790F36623CE8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 3360
IP address blocks: 2607:f028:121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:79:af:6b:37:79:0f:36:62:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=9b8db1ed-c34b-4054-bb30-4406f40d71f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:2e:fd:bf:47:bb:e9:1c:b3:f7:b5:d8:f6:
0f:56:a9:0c:84:49:03:0b:09:7f:7b:f7:52:06:a5:
d9:69:60:2f:65:ee:18:ba:4f:7f:7f:19:0a:30:9b:
b2:cf:38:5f:39:e3:d7:72:77:52:90:79:fa:0b:67:
17:35:3a:19:2e:6c:a7:45:01:95:31:1b:6d:19:c6:
3e:cf:92:cb:64:a1:70:aa:d6:96:4a:71:7d:f8:c2:
96:25:2f:75:1c:11:f5:ed:53:ac:30:10:0c:53:89:
d1:30:a2:f5:5b:80:62:4f:1e:26:87:39:e8:2c:53:
ff:5e:97:df:fd:36:8d:76:60:a7:6b:0f:30:e5:ad:
6b:36:84:1b:a8:94:31:4e:64:db:1e:59:56:9b:89:
ee:25:37:81:12:05:7f:b8:d2:17:eb:29:9d:96:78:
63:64:f0:3b:d6:3d:f0:f4:9a:b9:5e:df:1a:92:a0:
b1:75:a4:c9:b4:17:78:cd:f4:22:51:00:31:86:47:
d6:84:6f:b4:16:7e:ea:38:c2:94:47:23:dd:ff:48:
b9:d5:d4:41:54:46:b2:51:1e:24:28:24:63:a0:5e:
3b:7e:ec:15:e3:dd:16:b2:53:74:59:b8:6a:a5:e7:
e7:e9:3e:a8:8e:07:74:38:70:fa:ca:23:19:b4:dd:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:93:C2:93:21:11:7A:6C:69:00:16:44:FF:55:0F:DB:8F:A7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f028:121::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:15:97:39:74:43:2b:5c:42:a1:3f:ae:bb:87:e5:a5:e6:84:
3d:31:5f:e0:fd:c3:64:91:35:03:9e:5a:f3:c2:1e:83:61:98:
31:6b:5d:ff:f7:4f:ca:18:d9:e8:f9:f8:20:ff:cc:ce:3b:4c:
61:dc:2d:c2:59:77:1e:dd:d0:30:b1:8e:c3:6b:ab:47:f5:27:
8a:b8:6c:30:71:7c:0f:38:1f:02:f1:63:15:7e:c5:98:b1:47:
05:8f:88:ae:39:78:c4:dd:af:2f:b5:8d:75:d1:b0:6a:af:c6:
e5:c3:dd:4c:fb:28:27:52:08:b1:89:4f:2e:ca:05:00:e5:3e:
21:d9:b6:fa:28:20:51:ed:7a:29:50:35:fe:10:cc:8d:d5:e6:
6b:c6:42:0d:92:05:02:59:d1:38:7f:c7:3c:d1:5c:7c:fb:fc:
a6:04:84:a7:43:0a:f9:5d:31:56:11:96:b5:f3:e4:bf:07:7a:
de:b6:07:d9:0a:53:01:0b:3e:d0:64:61:27:78:67:a1:43:aa:
6d:87:93:5d:36:7e:09:55:25:34:8e:a2:74:94:8e:0d:89:b2:
4f:39:3f:3e:1d:37:42:b3:6c:74:89:95:4d:4f:c6:e9:3d:d0:
64:8d:48:90:5c:9b:24:00:64:72:02:1c:c5:5a:88:45:b5:d2:
ba:76:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:20 2025 by rpki-client