Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f9466e1-0aa5-3dbb-9265-968393747617.roa
File: 2f9466e1-0aa5-3dbb-9265-968393747617.roa (raw, json)
Hash identifier: 1As/dxI+DRolVbSKoXkqhesB9JLppcEgKZWD1PCO/ek=
Subject key identifier: 0B:02:9A:0E:FA:80:1E:B7:F6:9F:80:C1:0D:84:C3:30:B6:12:65:A8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB42D67B22BAB0A5ED0D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f9466e1-0aa5-3dbb-9265-968393747617.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 108.3.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:42:d6:7b:22:ba:b0:a5:ed:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=09bdbe71-f476-4f4a-aba5-842a5a09148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:f0:30:c8:20:32:a1:95:0c:6f:fe:36:05:
fd:0b:ff:51:c6:fb:aa:64:bb:62:6f:9a:b6:51:9d:
64:ff:cd:5a:9f:19:95:3e:ee:b9:65:d6:70:cf:1d:
19:38:b3:80:00:cd:05:ee:49:56:62:ff:c3:95:ab:
dc:d4:d4:0b:54:20:de:c0:9a:55:78:44:2a:8b:27:
ef:22:a7:59:d1:f0:19:70:db:33:ee:2c:7f:6b:1a:
1c:6a:af:29:b7:a4:de:77:35:e1:83:88:47:ba:95:
e4:3b:1b:25:ef:a8:e3:7b:4b:87:4c:36:a0:b0:5e:
c0:2d:e0:18:e6:ec:74:5d:32:6e:19:fa:1b:a2:0f:
29:48:4d:a6:81:73:64:12:67:1d:d5:6b:2d:f1:80:
c5:f4:8b:76:3a:c3:1f:27:41:7f:92:c1:8a:6e:64:
b8:00:8a:2a:7a:c0:64:d2:5d:1a:8a:a5:e1:c9:a5:
c9:18:76:ef:62:6a:08:61:58:0d:25:01:23:0d:0d:
ff:e4:86:d0:58:f7:42:8f:a7:0b:f9:42:eb:d1:72:
16:31:69:de:bd:b8:41:8e:38:73:85:ba:67:f7:58:
2c:b0:0f:57:c2:83:53:8e:55:44:05:60:61:7f:4b:
fa:f2:34:85:4f:4c:a1:6d:77:86:b0:99:88:b7:11:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:9A:0E:FA:80:1E:B7:F6:9F:80:C1:0D:84:C3:30:B6:12:65:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f9466e1-0aa5-3dbb-9265-968393747617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.3.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ec:8d:77:f2:7a:30:6b:90:04:a9:9a:78:4d:c0:8e:db:8a:
fa:1e:72:17:5c:43:82:81:1a:66:16:97:da:25:35:de:67:f1:
24:37:df:21:46:20:e4:e1:bd:4d:3e:dd:70:25:0b:cf:56:9f:
2c:b2:b1:81:b6:54:a4:d3:9d:66:f4:af:b8:2d:3c:bc:61:cb:
77:e8:22:6b:62:f3:b5:14:de:1f:94:a3:44:18:9c:2d:2c:26:
ec:4b:16:c1:f6:9d:9f:56:1e:93:97:8d:f3:28:c5:7d:db:0b:
da:85:ac:6f:0a:3b:1c:79:7c:ed:ca:40:de:f1:d6:9c:a3:7f:
64:9c:c8:f9:ba:6b:71:2c:4b:0b:1c:ad:8c:d5:8e:a5:1f:fd:
d9:1d:9a:96:ca:25:59:6a:57:d1:ea:3b:d7:a6:aa:f6:af:0d:
d7:c9:9f:c1:c8:75:4e:11:09:15:e9:36:12:4a:d3:a6:65:19:
5e:9e:ee:6c:b6:af:91:9d:bd:32:18:79:26:ab:e6:06:50:95:
b9:cd:b8:92:cf:31:16:af:ec:92:68:d4:a9:d4:bf:ff:f6:45:
1d:fb:f9:85:ab:1d:6e:a0:be:9b:d0:7f:d1:9c:ee:33:e6:30:
64:d3:94:d7:d9:79:33:f5:11:91:56:2a:12:ab:9d:65:c4:18:
c5:8c:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:18:03 2025 by rpki-client