Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa
File: a0b57f6e-b364-3e5f-a287-5570d9c98658.roa (raw, json)
Hash identifier: mkVZH2KJ5RCAe39XYttkqRYuUQ7D54lVJ2Ydgv1iIEg=
Subject key identifier: E1:4A:8C:87:A3:9E:83:2E:02:8E:C8:AD:95:EC:B1:D0:03:71:C1:26
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D57A428A9597C8E3B520
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.3.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d5:7a:42:8a:95:97:c8:e3:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=064c6194-5037-46d6-a074-0008d9dd98d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:71:23:01:2d:26:20:6b:c7:e3:66:51:83:
b3:d9:87:44:88:0c:d4:71:03:79:fc:29:42:f7:8b:
45:20:af:bf:43:89:cd:67:ea:bf:f5:86:27:42:93:
c6:18:a3:a4:0d:0a:84:ba:c7:3b:d8:7e:9e:ae:06:
c3:ea:8a:cb:a5:aa:32:8f:83:6f:45:b1:51:55:09:
22:f9:40:50:b1:db:7f:83:43:65:e7:f8:8c:fd:34:
c7:e9:62:20:16:15:ff:c5:50:82:1b:9d:42:32:b7:
96:13:cb:3e:e8:b9:f1:fe:60:8d:51:79:1c:d0:c5:
e3:d5:77:d7:3f:96:cf:f0:c2:8f:34:50:ca:12:4b:
b6:80:d6:59:ba:b5:13:6f:d3:39:fe:20:e8:07:eb:
85:f5:1e:f7:98:ae:c7:ba:2e:79:22:3a:20:1a:c3:
2d:e1:85:40:86:c9:db:d7:0a:a9:09:84:bc:ed:4c:
b8:12:28:71:7d:16:cf:55:3c:7d:28:da:2e:d7:32:
b1:b3:04:cb:73:cd:b2:4e:bd:92:ba:8c:a4:dc:9d:
16:2d:5f:dd:92:78:65:19:b1:97:f7:93:63:52:79:
84:a0:67:4b:75:7d:b4:39:5a:ef:32:2e:a5:43:28:
c8:6e:61:06:f2:b7:4d:f2:29:5e:0f:52:86:b4:b0:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:8C:87:A3:9E:83:2E:02:8E:C8:AD:95:EC:B1:D0:03:71:C1:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.3.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:12:0d:d5:3e:2a:d2:30:39:59:97:fa:70:e7:c8:e1:e5:f2:
6a:0e:01:f3:2a:e7:55:ed:2d:f4:69:1b:3e:ed:57:4e:c4:6c:
87:ae:53:00:01:6f:78:3b:a1:27:a3:3f:17:e3:11:69:21:8d:
44:5c:76:81:0a:63:2d:c1:27:66:19:94:2b:d8:8a:b0:ef:6f:
73:d6:be:54:ea:6c:89:41:c5:52:ba:a2:ea:d2:43:5e:79:41:
41:01:f6:24:57:df:16:b8:09:e1:dc:bf:f2:51:4e:77:53:16:
8a:a5:60:8b:98:da:0b:56:56:45:d0:2c:50:6a:e0:50:f8:c3:
04:f3:f2:a4:87:92:e7:de:b7:14:0c:31:38:85:31:e3:bc:cd:
ae:49:c5:92:61:a8:76:a0:59:e6:6f:63:09:26:d0:f4:dc:d1:
ea:67:c1:25:1e:a2:bf:3d:7a:02:91:db:f4:ac:2f:65:cf:ea:
e4:e2:d1:98:d2:2d:8d:8d:12:e7:51:5f:ac:2f:79:c8:43:08:
59:fa:12:5b:1e:8f:92:29:3b:7f:35:59:44:72:13:bc:84:3a:
a8:85:85:ad:4a:1f:8b:b3:76:6b:e2:5f:88:1d:08:ae:c9:ab:
ac:83:de:81:f8:32:0f:e3:c4:32:d4:db:18:73:8e:60:48:5c:
fd:43:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:27 2025 by rpki-client