Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa
File: ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa (raw, json)
Hash identifier: eG3c9nXWHkWP0TrwdKepTbdM6ewJNeXTETaodS28uts=
Subject key identifier: AE:63:04:80:60:17:48:F5:6A:26:73:89:49:31:4F:F9:A2:47:31:23
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FB2A9B5D0EE0B6A82380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.39.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fb:2a:9b:5d:0e:e0:b6:a8:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=0385aca1-38aa-44a5-ae9b-11674ed69ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:af:2e:9d:8d:47:98:f3:8e:36:c7:09:c8:
07:26:1b:e3:11:a0:c0:49:8e:9d:2f:ad:09:f7:f2:
5d:e6:79:5a:76:6f:79:98:5f:62:63:e9:dd:6c:06:
2b:25:e6:51:f9:f5:3b:48:d8:96:9f:8c:5a:f3:53:
38:8a:8d:c2:cd:ac:ae:f2:0f:5a:f2:ee:e5:74:b6:
91:ec:13:24:ec:17:8b:c3:12:12:de:28:3a:fa:f2:
76:9d:53:00:06:a4:3e:96:b7:23:48:5b:85:45:58:
f0:44:1c:27:97:1e:c9:02:c9:28:ed:e9:c0:6e:00:
5b:d9:99:d0:3b:6a:d8:cf:e5:b9:4b:68:dc:70:bc:
0a:22:14:89:e5:0a:69:f3:76:3a:69:6b:c6:ad:0a:
d5:30:a9:ba:1c:6a:d4:f5:05:c8:e9:52:76:02:8f:
4f:93:63:8f:2b:aa:6b:fc:d3:0d:5e:0e:0c:af:cc:
d3:a8:c9:8e:a0:52:6f:f8:91:29:dd:f5:fd:75:82:
14:86:82:b5:48:8f:58:47:3c:cc:c6:0c:e6:5a:56:
9e:5b:3f:12:f1:e1:30:1c:53:a6:7a:94:91:5d:e4:
87:b2:e8:07:c8:75:3f:f5:fa:83:5a:3c:fa:61:9c:
81:67:62:fe:3b:23:13:c7:3a:d7:14:97:7d:95:2c:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:04:80:60:17:48:F5:6A:26:73:89:49:31:4F:F9:A2:47:31:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.39.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:87:0f:d0:15:97:41:6e:65:e6:9e:ef:3b:12:43:0a:bf:b2:
55:08:d3:1b:ff:99:ee:88:ea:81:65:78:c9:c8:4d:4e:9e:a1:
6a:cb:9a:b9:c4:8c:68:40:f8:a0:9f:94:59:f2:60:9a:0b:ae:
a5:46:69:ee:4d:2c:28:80:db:1e:ec:50:52:8d:94:21:d6:06:
ea:d6:48:80:c8:60:58:85:0d:71:d8:cc:91:ff:3a:96:1a:2f:
f9:6b:52:97:f3:8f:41:a2:e5:c9:c3:21:2f:54:46:f3:28:8c:
3f:07:e4:4b:17:ce:97:c7:2c:53:8c:1a:86:44:fe:e7:86:3a:
87:66:88:3b:51:0b:d3:c8:04:0c:7d:d4:b6:a7:cf:d6:5f:7f:
d2:ef:93:b1:5f:4b:4a:a7:8e:73:03:19:cc:19:b9:5e:14:2d:
0f:59:5c:a8:15:77:d6:1c:8f:3e:6c:5b:da:27:b4:04:7e:ea:
d7:ce:33:be:06:a6:d1:f1:71:4c:f6:d0:ce:1b:39:cf:32:1b:
fa:25:c2:6d:85:0c:f2:61:e6:93:c9:3b:85:b2:98:f6:7b:60:
4b:11:24:aa:6e:4c:83:5e:9c:39:03:f4:3c:d8:46:d3:5e:f6:
a4:4d:89:4a:39:63:f0:50:78:28:d3:b2:7e:62:86:ba:01:c0:
61:8d:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:22:47 2025 by rpki-client