Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3382f3e6-1ecd-36f6-95c6-b093cff43146.roa
File: 3382f3e6-1ecd-36f6-95c6-b093cff43146.roa (raw, json)
Hash identifier: 0tt7iQBGQgSFL/dlUSPDBETGmDEjQe1ZODwiogiOCdA=
Subject key identifier: 7B:CA:C4:5B:71:D2:AD:F1:A1:CD:77:5D:9A:C6:65:84:E6:F5:D2:8F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D3F2E1DB3C54CAB06540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3382f3e6-1ecd-36f6-95c6-b093cff43146.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.17.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d3:f2:e1:db:3c:54:ca:b0:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ecc8ab11-0b7d-4ac3-8c89-74fb595402db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:1a:c0:32:bd:d3:5d:0f:6a:87:d0:51:3d:
1b:ff:b5:d4:fc:de:a5:e6:4c:92:e1:8c:78:1e:7d:
60:89:82:27:5d:71:46:f2:24:16:67:20:13:3b:b2:
5e:b7:6d:32:45:c7:37:42:df:5f:a5:58:49:53:ab:
98:06:b4:8d:84:60:b0:b8:f7:9b:cc:fe:61:ce:1b:
bc:41:ed:b0:fd:67:b4:3e:cc:a0:c9:d6:e4:ee:55:
7c:36:a8:1b:35:1c:0c:4f:72:50:72:0f:ff:6d:58:
59:a5:fe:28:97:a3:30:2c:3c:fd:cc:8c:f1:b0:f9:
7d:c0:d0:5d:d3:29:35:a2:a2:cc:e9:81:b5:3b:95:
a2:67:19:86:e8:83:f6:18:6b:98:ee:ff:65:00:89:
7c:e4:6d:8d:9b:45:09:75:b1:7d:2f:ed:ad:c9:06:
80:35:b6:fe:4e:eb:8e:7a:50:5f:98:8f:94:da:d6:
53:90:33:9b:4a:34:2c:3b:99:8d:21:1b:9f:66:4b:
b4:a9:ed:f4:d8:80:91:03:8d:be:85:5d:70:76:6b:
ed:61:6e:03:bf:ea:c0:42:d3:38:dc:f7:42:9d:59:
c0:d9:a5:26:ce:8d:c4:77:76:0e:09:32:01:46:a0:
cd:94:5e:87:ec:50:cd:ba:ef:64:53:88:d7:27:38:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CA:C4:5B:71:D2:AD:F1:A1:CD:77:5D:9A:C6:65:84:E6:F5:D2:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3382f3e6-1ecd-36f6-95c6-b093cff43146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.17.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c4:f9:7f:aa:b7:3c:a0:5f:84:f2:eb:43:32:3a:57:9e:fd:
e9:7c:b2:07:0a:b4:d6:b2:9d:7a:29:f1:1a:49:5a:8f:f1:e5:
87:20:38:02:3d:f8:fc:1a:fc:9c:7d:63:84:75:1a:0b:cc:79:
f5:34:c0:e6:af:f4:ac:92:61:a7:63:a5:4d:0c:9e:65:af:49:
40:97:cf:9f:62:ab:fa:7f:24:ab:18:79:c2:f3:dc:1b:6c:e0:
fe:ea:a8:9e:54:7f:bc:63:0e:a9:4d:3c:0e:8a:6f:33:22:67:
ad:9e:af:a6:f8:fc:37:2a:82:71:f5:01:dc:0a:04:85:d4:67:
52:72:2d:dc:c6:da:d7:b9:ae:70:a3:73:44:f3:98:e0:b5:5e:
c0:b3:36:58:fc:ab:09:c7:df:26:8c:7f:80:bf:48:0d:a8:cb:
35:3a:1b:e0:4e:93:ff:42:42:ab:7f:98:85:42:dc:54:c8:0e:
81:c7:d2:d3:c7:de:3d:f0:f7:95:f5:ae:39:bc:f6:44:13:a9:
c0:b8:55:85:9f:8c:ef:dd:93:d2:df:d5:0d:2b:6f:51:61:b5:
f0:52:bc:c4:dc:e6:2d:38:57:16:e9:df:73:63:86:03:ba:6b:
00:70:6a:e7:6a:5f:7d:be:22:fa:20:18:67:da:91:62:bf:ad:
f7:f9:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:13 2025 by rpki-client