Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771f7228-ac47-3bfa-9c60-3e5cf9aa1720.roa
File: 771f7228-ac47-3bfa-9c60-3e5cf9aa1720.roa (raw, json)
Hash identifier: TcUf/Ll0q1m4KA2R72Sy8c2oRMGEqn2BV4X613mwjmU=
Subject key identifier: 00:5B:AC:C6:E3:7E:38:AB:84:8A:AA:2A:8F:D8:14:ED:74:A1:6D:0C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FD27A3DA518075216780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771f7228-ac47-3bfa-9c60-3e5cf9aa1720.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.45.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fd:27:a3:da:51:80:75:21:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=67a28143-7209-4a26-82f0-703d89e5ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:75:00:fd:b4:a2:27:92:cc:da:47:4c:d3:
e7:25:b4:1c:23:28:61:55:ca:e1:54:3c:36:99:3e:
59:d7:78:67:a0:a0:07:1c:e1:3d:83:88:b1:52:ee:
1d:1c:59:68:08:d1:f6:b2:ef:23:5a:7f:28:b1:a8:
c4:5b:8e:d0:78:70:65:ad:66:ca:b0:bc:5e:2f:5b:
a5:f5:15:ad:54:a2:cf:97:62:1f:38:2b:29:b1:81:
c9:93:5c:e3:59:45:2c:a7:a8:cf:2a:c3:f4:78:6a:
d8:6c:41:c6:9e:a0:e0:fa:72:97:b9:c6:15:ae:91:
0e:46:a0:13:70:33:a1:36:35:52:61:35:f9:06:a5:
c5:74:46:21:89:a7:fe:71:f7:32:08:09:3f:ee:4d:
b3:48:28:03:f2:43:fb:58:8d:ed:b0:9a:a9:c1:3a:
0a:98:4f:9c:e3:d7:4b:f1:95:01:c5:38:58:ec:63:
4f:45:4b:d2:d4:fd:fb:9e:f5:11:7a:84:b3:4f:78:
28:b9:94:e6:f8:84:23:15:00:3f:3c:d9:18:b6:d6:
f6:2e:1e:57:ce:9b:72:c8:c2:86:a8:33:27:ab:1d:
99:15:d7:fe:d4:58:09:d8:04:a9:ff:2a:a0:b3:ef:
d4:9d:e2:c7:86:63:14:a0:14:a6:c2:a2:b0:10:2d:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:AC:C6:E3:7E:38:AB:84:8A:AA:2A:8F:D8:14:ED:74:A1:6D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771f7228-ac47-3bfa-9c60-3e5cf9aa1720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:94:9d:f2:73:96:00:52:cb:e3:61:d2:e2:15:d4:5d:a6:17:
8f:0e:ba:f1:6f:30:a1:45:f8:86:cc:bb:af:c5:7a:d7:8a:21:
ff:95:79:39:d2:db:c6:4c:61:fe:3e:cb:45:cc:d2:90:33:a7:
95:52:3b:51:c7:6b:92:5a:f3:21:b7:8a:a7:d6:d9:cc:cf:c0:
a4:9b:da:59:06:45:77:9b:4d:21:48:3f:6b:e1:e6:39:4a:1e:
7b:22:35:d5:c9:d8:ab:3f:1f:ed:38:c8:8f:80:65:a4:50:c1:
90:05:37:f4:ee:bd:c9:19:27:56:82:f9:ac:99:95:65:4f:b7:
b3:79:a0:47:45:9d:6f:31:77:1f:7a:09:38:22:4b:c4:ec:51:
71:24:7e:33:35:e2:aa:4e:cd:44:dd:a7:32:66:d3:1b:30:c8:
10:54:8e:ac:30:9d:61:b9:e0:88:69:62:c3:48:f6:10:e1:8f:
ea:66:8e:9d:d4:ce:90:34:39:b6:85:a8:30:dd:12:3d:1f:99:
a8:a9:bb:57:f7:c5:e2:b8:31:50:26:b6:a0:6f:59:ff:02:a0:
ec:de:94:cf:5d:9c:e3:fc:ad:ac:d7:22:06:38:15:9a:bb:5f:
f0:81:78:1a:bd:d0:84:ff:ed:4b:76:b1:bb:7c:0b:26:82:04:
5a:b1:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:43 2025 by rpki-client