Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa
File: 98da9661-0d10-3896-a771-a2ee1d490a36.roa (raw, json)
Hash identifier: QfvZFGqJmqcTsKehV1f9PfXY0BeK+4XNXK27FHGGWPg=
Subject key identifier: EC:92:42:CB:D7:F2:DF:F1:E2:37:0C:AF:FC:3D:C6:12:CD:F9:49:A9
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F432858488AE098A325ADCCAF6B030900
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 29867
IP address blocks: 72.10.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:98:a3:25:ad:cc:af:6b:03:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=91aa1441-5ecf-4679-b7b1-107d12c78c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:29:ff:e7:b3:4f:bc:7d:3b:99:25:f4:ac:
b6:1a:29:47:c9:a2:eb:eb:70:27:7f:33:56:ef:12:
fc:6f:9b:06:15:29:b4:af:99:0c:1c:6c:40:97:50:
28:a5:70:a2:0c:fd:e4:45:d4:9a:1e:79:35:f3:2a:
14:ff:75:60:cc:4e:90:c0:8f:f9:f1:b0:51:9d:ce:
dd:8a:32:f3:3c:66:fc:be:0b:60:2f:d2:08:a9:7e:
ad:3c:b1:d3:d4:26:d6:b3:ea:1f:41:d6:94:26:74:
3a:b3:05:3e:f3:df:be:78:61:45:86:8e:8a:77:ab:
9b:68:2f:f4:ca:b1:c5:38:3a:21:87:6f:a3:28:3f:
cf:7c:80:2b:4e:5a:54:f0:96:8f:8c:e5:dc:63:a7:
4c:7f:d6:e2:61:60:cf:d7:cb:bd:10:ca:9b:e0:0d:
cf:95:f5:cc:1f:61:4b:bd:69:15:dc:13:56:fd:0e:
be:ca:d6:4a:ff:15:33:67:f9:05:3e:d2:83:72:85:
1c:fc:c3:d0:78:62:8a:b1:ea:e9:23:02:0d:d4:4c:
d6:a1:89:d7:c9:37:df:de:c9:25:54:98:78:0c:90:
38:10:61:f7:a5:ce:35:f0:30:1a:0f:7f:77:32:e3:
f1:1a:86:90:cf:07:77:bb:33:81:99:aa:eb:90:b6:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:42:CB:D7:F2:DF:F1:E2:37:0C:AF:FC:3D:C6:12:CD:F9:49:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:59:31:9e:c3:94:84:0e:ef:43:6e:73:c1:39:b2:71:70:55:
a3:70:45:56:55:36:85:a6:62:b5:fd:ce:1f:32:ab:30:46:46:
8f:ac:00:39:1d:b6:81:e6:52:fe:68:c3:af:ed:cb:f8:54:8a:
5b:9c:30:51:9d:f9:72:2b:0c:c4:b4:e6:46:cc:4e:40:a4:99:
b3:d7:c6:a3:73:e3:1c:65:63:df:2a:83:1c:33:f3:25:c7:0f:
9b:e0:9b:fc:36:d4:67:09:89:d2:7b:04:05:35:05:b2:0e:36:
2a:4a:62:0c:dc:c4:57:c3:b5:aa:e6:85:f1:73:20:d4:8c:d5:
b4:75:39:14:89:25:02:ff:7f:e6:19:eb:d4:84:e1:bb:e6:5e:
06:85:08:f6:11:aa:7e:65:d8:5b:9d:4e:f3:18:82:a4:79:c0:
9c:c4:cc:33:6a:4a:e4:eb:21:71:59:16:b7:12:f8:74:88:58:
ad:2b:20:c7:ff:aa:7e:22:e9:37:73:f7:3d:17:aa:a3:b4:8b:
96:cf:e5:76:96:ce:57:2a:2e:60:27:0a:fc:dd:cf:72:57:e9:
6f:68:9a:ca:b2:d8:9e:0c:ed:a6:71:22:b0:03:3d:c5:90:9c:
df:2a:cd:fe:9e:17:89:fe:95:f0:be:a0:f5:63:32:d8:a4:c3:
59:7f:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:34 2025 by rpki-client