Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
File: 03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa (raw, json)
Hash identifier: HaauQ1eGNYeqhh/J2zDlc+IhGYJdYAu9jq8a1Hwt3Dk=
Subject key identifier: 6F:10:83:6B:F4:2D:1B:67:5A:11:A0:94:A9:60:28:F7:34:0D:BC:56
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FB6639163B41217D7140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.50.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fb:66:39:16:3b:41:21:7d:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f3472ad2-03e0-436d-8840-8f27d3dc14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:56:d9:e7:4a:c4:85:9d:ef:f9:5a:2d:ef:
00:12:fd:8f:08:7c:b4:00:99:f3:3b:3d:5a:c6:4f:
c3:24:f3:eb:69:c3:80:e4:3d:b4:ac:0c:92:0c:56:
c5:5f:1d:df:19:da:87:95:81:0d:27:60:26:72:5b:
a4:6d:33:6d:a4:09:54:94:95:cc:85:63:c6:2d:3d:
e6:32:33:82:2a:aa:e2:6f:7b:e8:2a:71:46:24:3f:
5d:af:c0:3a:06:36:19:7d:97:4b:b1:e1:c5:0e:b9:
d8:a0:a8:3a:43:1e:3a:e0:aa:e1:19:4c:39:e5:35:
0f:da:13:a4:8a:0a:d2:29:43:74:66:8b:3f:6c:00:
02:c6:16:0c:83:38:c2:51:ca:ed:96:b4:8b:86:ac:
f0:36:75:23:6d:37:0a:e6:86:9d:a4:4f:c6:ef:f6:
32:e3:e1:b5:38:e0:92:aa:72:b2:01:9b:98:34:bf:
ca:65:f7:bb:03:9a:00:9e:8a:ed:7c:8e:b4:dd:46:
e5:c1:12:15:d6:16:c2:1d:ef:9f:a3:1b:28:5a:7d:
ca:24:a7:3a:ae:88:22:80:d3:62:03:40:67:e0:94:
f9:99:8d:8c:48:2f:f3:b1:8b:d9:02:c3:a0:fe:19:
b9:3a:d4:56:89:39:66:04:d5:be:2c:2e:ff:2b:0b:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:10:83:6B:F4:2D:1B:67:5A:11:A0:94:A9:60:28:F7:34:0D:BC:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03a6f53b-c22a-3be7-9fb4-b4934f69399b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.50.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:28:0d:96:01:8c:38:31:e3:42:26:74:8f:8c:5a:8a:82:a4:
12:79:5f:bf:24:82:46:ee:ec:f8:11:21:0f:c0:e1:47:d4:55:
fe:88:1a:be:9b:14:51:b9:a5:44:fa:87:57:73:7d:52:79:71:
99:fb:34:d0:3a:66:36:18:ae:0e:64:6d:fd:9a:54:84:6e:a9:
ce:72:4a:d1:3a:d5:42:20:d2:5f:32:98:c6:d6:6b:f2:4b:89:
9c:4e:0c:cd:6e:0f:df:2e:7d:b4:29:a2:cd:b7:29:0a:95:7c:
08:78:17:11:a6:93:98:67:f1:a4:ed:8b:ec:fb:a2:85:b7:d0:
4b:9b:b8:6a:72:8d:a9:9e:37:6a:ff:23:63:7a:11:a8:6e:67:
77:b1:a4:e8:34:e9:ec:1c:97:50:9e:28:4a:87:ba:40:1c:22:
70:1c:2d:83:b4:00:e3:6b:3b:c0:f5:ba:75:d8:aa:41:ce:e9:
32:30:b3:18:42:9f:26:f2:ff:ea:1a:f5:c9:7a:7f:8a:48:3d:
54:48:8b:9d:db:71:e6:ad:04:0b:38:7f:dd:f0:ce:44:c9:20:
da:07:67:63:ad:fa:30:38:b6:b6:f4:ae:c8:48:1f:ba:9d:a4:
1f:3a:04:f4:ce:eb:ee:eb:2d:e1:7d:ff:7f:f5:f4:9c:e0:1a:
83:fe:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:31 2025 by rpki-client