Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c59d1a39-f982-30eb-ad9d-216bb349fc94.roa
File: c59d1a39-f982-30eb-ad9d-216bb349fc94.roa (raw, json)
Hash identifier: rqL3k4D5BQF07y/65IsWmdvIyBcdxZyVgUdyYx0+Jrw=
Subject key identifier: F9:A0:90:8C:F2:26:13:0B:EC:A8:01:26:C6:DD:73:42:97:B0:BE:4F
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D1EDBBB7E7BF96D8FC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c59d1a39-f982-30eb-ad9d-216bb349fc94.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.15.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d1:ed:bb:b7:e7:bf:96:d8:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=43a3b477-7847-44e0-bedd-c7c60684b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:f3:ac:5c:8d:ab:6c:e4:2a:50:2d:77:4d:
3c:bd:b3:ac:c2:0e:50:37:27:ff:0b:17:7e:e8:9d:
2a:19:22:10:39:3d:eb:c0:5d:46:bc:3e:51:84:d5:
cf:03:43:e3:da:06:40:16:ad:bb:f5:d7:00:22:26:
f0:b1:34:b6:3e:04:ee:e0:d3:3b:5c:ee:69:7c:8c:
e4:5c:dd:45:20:11:1c:56:0d:2c:90:8f:02:52:35:
9b:cb:53:67:fc:ca:af:5c:f2:f4:d1:c4:84:48:d5:
8a:6e:84:5c:2c:82:c8:87:b4:8d:e0:ce:fb:00:88:
54:1b:3c:ab:fa:fa:63:1f:93:a9:6f:11:9f:7e:04:
95:11:61:ca:05:40:6b:02:94:c1:96:1e:e9:83:76:
d0:71:48:e5:23:e1:b5:d6:1c:49:2e:91:a7:88:74:
97:38:25:21:c4:1c:c7:59:40:ab:db:dc:78:f3:b4:
57:b8:d3:82:97:4d:5f:51:38:38:e1:ee:fe:ad:28:
22:99:57:9b:84:79:32:8f:cc:c3:a2:fe:6d:29:bb:
fb:b8:78:81:3e:47:97:27:05:a3:ca:7e:d6:4f:cb:
10:1b:63:f4:cb:9f:1e:54:db:ed:3d:03:a4:94:21:
76:bc:f5:93:c2:be:0a:5a:70:c9:37:fb:d7:c9:a5:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:90:8C:F2:26:13:0B:EC:A8:01:26:C6:DD:73:42:97:B0:BE:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c59d1a39-f982-30eb-ad9d-216bb349fc94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.15.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:fd:e3:b8:13:d3:1f:cb:68:ba:07:b7:c0:72:a5:e8:eb:35:
74:3f:8f:94:cb:ff:ab:81:ce:6e:08:24:1e:57:56:c9:af:3f:
d9:40:52:f4:74:f2:5f:e6:80:bf:46:39:b1:e0:d3:16:9f:0e:
fb:06:6b:51:27:db:48:08:24:c5:19:02:10:ae:2e:58:b7:e2:
b0:2c:f0:00:21:3c:bf:79:e9:0c:bb:26:3a:67:f6:c8:34:59:
44:f8:79:b9:cd:51:a6:d9:03:72:b1:f7:70:e1:1f:d6:05:4d:
ad:97:43:93:4d:9e:d7:cb:72:1c:b4:28:77:32:93:e4:bc:a7:
90:ef:1a:16:df:15:6b:68:2a:d9:0f:39:29:bb:60:33:dd:26:
9b:1d:e0:5d:f9:a4:40:de:d4:f4:16:ee:97:9f:3a:c8:6c:4e:
60:8d:08:d6:cf:26:a5:52:52:1a:8e:ef:d0:14:50:d9:26:c2:
ea:3d:ea:5e:56:70:34:24:77:5c:b0:d2:28:c5:56:80:78:dc:
d6:e1:f7:88:e1:49:93:3c:26:fe:a2:ec:c7:c2:a6:21:09:03:
55:5f:31:fc:02:b1:1c:a8:78:31:95:07:bb:a8:a9:12:46:16:
16:fe:1c:24:22:ba:76:cb:9d:97:54:88:63:1e:6a:be:85:71:
55:35:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:02:41 2025 by rpki-client