Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e06779-fdfc-372f-ac73-94c9945aedb0.roa
File: 01e06779-fdfc-372f-ac73-94c9945aedb0.roa (raw, json)
Hash identifier: DdYi8dr5VBMv8ZupqO3W/FVgraeJz5/dv2zZXWWIRlo=
Subject key identifier: E3:D6:18:D8:4B:7A:AA:F4:59:2D:38:8B:FA:95:6B:DC:06:D3:1E:F1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D3B6B805CA33C31C1C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e06779-fdfc-372f-ac73-94c9945aedb0.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.12.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d3:b6:b8:05:ca:33:c3:1c:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=4d53f4d1-2906-4b5f-90f5-5eb75941c7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:46:aa:1d:05:3f:d5:04:21:40:1e:db:56:
18:bc:65:a9:39:5a:91:d6:21:82:c4:1d:5f:2d:83:
ef:b1:25:0d:34:7c:dc:9d:ab:e5:e5:9a:e4:13:b4:
ad:f6:2a:a7:e9:07:8e:a1:ed:32:4b:ba:16:36:dc:
b9:c7:57:59:d2:7d:3b:b7:25:1b:82:39:a5:a6:c0:
54:65:3f:31:51:86:95:42:20:62:0d:77:4e:26:03:
b0:ab:03:4b:e6:a0:69:d9:9b:e3:91:3f:a4:22:63:
f0:e0:54:78:27:54:f9:88:20:51:93:2b:6f:be:ec:
46:eb:67:ab:d2:11:a2:6c:85:a9:e6:42:8a:2a:47:
39:24:12:d2:84:eb:84:7b:ec:eb:64:c0:b4:26:48:
39:dc:e8:24:de:ad:31:92:54:09:25:1d:39:be:99:
8e:ca:f4:f3:6c:05:39:69:c3:da:30:7a:11:9c:00:
6e:d0:44:8b:15:c1:2e:27:cd:e6:e3:2c:ab:5d:fa:
37:0c:fa:83:ef:15:05:cf:8e:8c:f9:12:d9:99:25:
b4:50:7f:8c:48:14:4f:49:fc:23:e8:7b:b9:d0:df:
a9:ae:75:8e:7f:d4:41:d1:5b:97:1e:7b:8f:3c:5f:
83:8e:c9:ad:97:a0:72:7e:93:9d:18:9b:91:53:d5:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:18:D8:4B:7A:AA:F4:59:2D:38:8B:FA:95:6B:DC:06:D3:1E:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01e06779-fdfc-372f-ac73-94c9945aedb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.12.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:2f:46:9e:3b:48:12:57:97:a8:5a:5c:7b:d1:15:a0:b5:01:
4c:c0:fb:20:9c:5e:da:cc:6e:f7:a2:26:e1:77:72:d2:83:0f:
21:e9:a7:83:90:52:12:10:94:c2:ac:6f:c5:3b:8b:47:80:04:
0b:89:1f:5f:91:b3:0e:c0:5c:c4:5a:ce:1c:b9:ef:86:b1:73:
a6:38:65:f3:ea:87:0f:64:e6:4a:dd:4f:54:ee:6f:cb:91:c5:
d4:77:c9:dc:39:ae:57:e3:b2:c4:1b:cd:70:12:87:30:64:3b:
3c:b7:34:44:1a:3a:4b:98:33:f9:f1:ab:5a:fc:d0:6a:59:89:
6e:3f:ee:9a:cc:16:19:68:90:16:8e:32:2d:a2:fb:e7:a3:8c:
f6:8d:58:ac:ef:53:e1:e3:b4:25:cf:8d:e7:da:07:a1:7e:e4:
03:88:00:b3:28:a4:11:20:46:1e:02:93:21:58:f2:81:2d:e9:
7d:d0:0c:53:9b:81:19:c9:5e:15:cf:61:b7:94:c3:cc:56:45:
7c:55:b2:90:bd:c0:ba:ef:7c:7a:85:80:9c:20:46:7a:ba:27:
73:7c:4b:e3:d4:96:13:21:c6:83:22:e9:04:e2:13:0c:f3:c4:
1b:13:23:fe:3f:86:5a:91:83:fd:14:37:cd:b4:1e:1e:1e:fd:
8c:15:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:15:45 2025 by rpki-client