Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda745-586f-3cd7-b25e-02e30596f92d.roa
File: 01cda745-586f-3cd7-b25e-02e30596f92d.roa (raw, json)
Hash identifier: xCnR8UQXIg59ow3ZR8c+bFc95p2IQmlX2asL3xNWOqo=
Subject key identifier: E2:67:A0:66:2C:7B:E9:C4:9B:08:4B:56:E2:E7:40:84:99:41:84:DC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D23D67F2E794C25012C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda745-586f-3cd7-b25e-02e30596f92d.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.22.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d2:3d:67:f2:e7:94:c2:50:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=bed80ddb-cc98-4c3e-a532-345bad050d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:52:3f:dc:77:6f:fe:67:7d:76:fb:86:a8:
fb:c5:96:67:c6:97:bf:a2:ad:52:6b:58:1f:72:4d:
e3:b3:db:47:79:6d:4d:28:ee:4b:c1:45:28:75:c5:
ab:83:6b:84:70:19:bf:c6:1c:14:d1:a4:b2:9d:a9:
24:ed:c0:7c:b0:de:d9:da:f0:09:ca:55:e5:e5:86:
3a:ce:73:eb:3e:1b:29:11:85:bc:61:45:90:de:29:
f0:1f:aa:f3:37:41:16:f6:ca:52:d2:b9:e1:d5:c2:
c7:0d:73:9f:5a:8d:0f:e1:97:6a:79:74:16:e3:d4:
c1:16:16:e4:4b:60:7a:53:f3:17:72:8b:2d:36:83:
37:03:1d:b4:2e:ee:78:fc:ba:72:9c:31:05:b0:da:
c5:d4:b8:fa:14:b8:5c:cc:5c:80:d4:e6:d7:49:da:
71:b9:d3:61:98:2a:3d:07:fe:76:3e:7b:71:4d:35:
ed:e2:e3:5e:07:86:42:fe:e8:11:84:2c:77:0d:9b:
d6:bf:f6:26:36:df:53:ce:33:8b:5f:84:d7:9c:f4:
73:18:1d:38:96:c8:15:12:fa:f1:55:26:8d:1a:41:
c7:2d:44:99:76:af:11:3f:62:49:ca:76:cb:75:4d:
ed:91:ef:05:bb:44:47:f3:cf:6b:c9:8a:a9:06:0d:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:A0:66:2C:7B:E9:C4:9B:08:4B:56:E2:E7:40:84:99:41:84:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cda745-586f-3cd7-b25e-02e30596f92d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.22.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:07:9f:9d:82:3d:54:71:8a:2c:22:e0:d6:84:95:f4:d2:fb:
76:29:a8:4e:5d:9a:cb:0d:e9:8c:f8:0f:2f:fe:b8:ee:e2:25:
44:46:38:50:26:3b:25:5a:bb:13:99:9a:a3:15:f6:ba:78:93:
5e:58:83:40:e1:6d:fa:1f:d5:d1:35:f2:50:c6:c0:af:70:16:
d4:83:66:45:1e:df:92:ec:09:df:73:0f:a4:61:98:19:04:27:
d6:b2:97:2d:56:90:a4:57:81:91:11:f0:c7:f2:90:f3:82:f0:
b7:47:bc:63:66:45:d4:19:5c:21:08:3c:e9:a5:f5:ee:ee:2e:
28:8d:22:fd:67:c1:71:90:87:bb:a1:0e:33:f9:70:86:2c:d8:
95:e7:93:5f:69:f5:c0:09:5a:24:6f:5b:72:d0:f7:b6:e6:75:
a3:fa:d7:c9:89:52:c6:04:cf:2c:ba:7b:6b:c4:ef:95:d0:36:
8f:d4:bf:cb:f4:19:9e:e8:d7:e2:27:fd:48:1a:7d:1f:f1:4b:
4b:0c:36:e0:43:32:77:a3:92:b7:43:e7:db:1a:ec:42:2a:28:
ae:e3:90:2d:a1:b4:ef:3f:07:a4:d2:87:b4:e5:06:bf:7d:b2:
3d:78:a9:17:62:45:69:cc:3e:44:7d:e4:b3:02:ee:62:1b:81:
6a:8f:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:38 2025 by rpki-client