Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028288d8-6c12-376f-b374-b3c61996c1c3.roa
File: 028288d8-6c12-376f-b374-b3c61996c1c3.roa (raw, json)
Hash identifier: yCbZge6XQ8/2xlVWdlVngemvEW3DrggcAC37kO9ndoQ=
Subject key identifier: BB:AF:78:85:CE:A3:33:FC:59:D3:F9:28:94:52:31:D6:81:FA:C2:B9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D621C7FEAD96CB420840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028288d8-6c12-376f-b374-b3c61996c1c3.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.6.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d6:21:c7:fe:ad:96:cb:42:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a41192f1-a9d6-4afa-a2fb-007b124ae94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:7c:26:22:58:94:71:77:f7:29:22:7e:9c:
79:0f:55:dd:fc:aa:b8:2d:78:eb:a4:ae:7c:f1:48:
04:77:50:dd:ed:6d:26:b9:95:ab:14:d8:8f:8e:d9:
4f:a2:e1:b1:2c:33:55:cc:d3:2a:8e:36:a2:8a:aa:
02:98:d8:b7:b9:2b:fd:4c:24:50:55:da:09:f3:d2:
33:7b:fa:0b:6b:ad:cc:97:41:b7:ef:5a:d8:16:b6:
18:22:e0:45:fd:7f:1c:c0:8b:c9:1a:a1:f9:79:6d:
66:b2:4b:57:bd:2a:1a:da:13:22:47:b6:7a:ac:98:
93:41:5c:27:29:ff:8f:f9:a5:ea:92:04:80:85:f8:
cc:fe:cd:24:a1:6f:09:a4:c8:36:77:aa:11:0a:f8:
ae:23:1d:d3:3c:b5:79:14:39:00:9f:e9:89:89:42:
e4:4d:e8:44:05:77:41:0e:c4:e0:a2:09:d8:33:56:
94:ec:84:29:5f:83:a6:18:dd:db:7e:2d:c5:8d:c9:
50:31:23:40:e9:a7:80:d5:8e:48:0a:75:e7:03:4a:
04:62:32:55:10:61:57:04:f1:61:2b:a1:93:a5:92:
63:54:6d:da:f3:0c:e7:e1:64:83:71:23:7f:c0:7f:
d1:6d:60:a0:4b:08:2a:62:12:99:6a:6c:33:dc:78:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AF:78:85:CE:A3:33:FC:59:D3:F9:28:94:52:31:D6:81:FA:C2:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028288d8-6c12-376f-b374-b3c61996c1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.6.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e1:16:e8:4e:60:0c:48:9e:33:54:74:7c:9d:7e:f5:77:8b:
22:30:64:a7:e7:4b:35:b4:0c:cb:2c:63:0e:70:40:a6:c0:6a:
95:f9:f9:cf:31:ca:71:40:6f:4a:7b:07:13:75:33:4f:aa:00:
08:44:fd:c6:69:13:e6:5b:5d:4b:45:90:03:d2:90:40:8a:4b:
c8:56:01:4e:dd:32:35:af:5f:6d:8e:05:7f:29:85:d9:8a:2a:
b4:c3:3f:45:07:55:91:0b:83:4b:b5:a3:99:9a:ad:eb:9d:11:
78:7c:36:39:f1:1b:bb:a7:d3:40:db:be:12:11:15:fb:3e:5f:
97:2a:01:45:0e:55:4b:0d:5d:43:0b:d3:2f:c2:5c:13:dc:24:
f3:fd:de:99:eb:35:1c:aa:e3:aa:9a:e1:ce:a6:a5:f9:a5:f8:
0c:93:1a:eb:b9:e4:14:87:32:7b:d4:fb:12:86:69:66:a2:e6:
47:bd:d6:61:b2:49:08:2c:85:83:68:f3:e8:bf:c1:c3:f3:da:
02:d1:24:e8:b8:da:c9:5c:36:c9:96:a3:40:8a:c0:f3:72:6c:
2e:6d:c9:df:bf:40:92:d4:6c:71:30:30:cc:79:95:1a:26:f3:
79:7d:4b:b1:1c:b3:3e:8f:0c:33:f9:34:7a:ff:c1:32:10:fe:
8a:89:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:52 2025 by rpki-client