Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f045cde5-b751-308c-a230-5e3d40827ed8.roa
File: f045cde5-b751-308c-a230-5e3d40827ed8.roa (raw, json)
Hash identifier: ascztX+odbPOaOb/iSpw6YscroSTj74sWwqkWymfyUI=
Subject key identifier: 48:B7:2F:B3:51:6A:F3:2C:DC:C3:34:F3:25:A9:5B:07:6B:A9:19:B0
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FBE963208FE04EE68A38
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f045cde5-b751-308c-a230-5e3d40827ed8.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.4.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fb:e9:63:20:8f:e0:4e:e6:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1773115b-8f9b-41ae-8df1-3e890d55d1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:b6:8a:8e:a3:99:e3:54:3f:d7:f1:c0:6e:
fc:02:ca:e7:a4:c5:59:57:00:8c:20:e0:a5:45:13:
19:18:24:1a:23:4e:1e:c3:9b:15:c7:12:83:c1:f0:
95:c5:c2:50:96:1a:df:f1:69:1e:62:d7:9d:4d:0e:
d9:18:c5:b1:11:48:bc:8f:3e:bf:3f:d9:f2:32:db:
dc:56:e6:ad:d0:97:d4:ee:e2:0f:06:f5:75:19:f6:
8d:56:e4:a6:4a:1b:2a:b0:71:57:bd:56:c1:c5:f5:
8c:99:33:87:48:59:87:90:2a:5b:a4:85:28:c4:0a:
71:f4:74:72:b1:6b:5f:ed:27:04:50:4b:18:4c:15:
50:e6:53:b0:25:36:24:f0:fb:be:d1:4d:6a:6b:b0:
fe:a3:36:1e:a0:2a:f3:ac:b7:e6:46:1b:94:6c:49:
86:4d:39:31:72:70:66:ab:5f:1d:a8:21:eb:b2:bf:
b3:72:9d:be:01:fe:47:79:fc:a2:8f:21:c5:1b:f5:
f0:7e:39:1d:f8:22:fd:52:f0:c9:00:4f:99:65:b6:
fb:3f:6e:ad:48:72:4f:4b:f8:d5:32:70:64:ad:9b:
38:a0:e8:ff:6c:2b:41:78:74:9f:a6:1c:23:8c:a9:
a1:bc:40:be:43:3b:67:53:e0:d6:36:47:4a:0f:96:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:2F:B3:51:6A:F3:2C:DC:C3:34:F3:25:A9:5B:07:6B:A9:19:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f045cde5-b751-308c-a230-5e3d40827ed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.4.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:cc:9a:e2:00:64:50:c4:81:15:79:27:0d:34:5b:d2:45:66:
11:f1:e3:e3:27:dd:70:61:bd:96:ec:3d:d6:8f:5e:01:c0:aa:
e8:1c:03:03:2b:ff:f3:9f:02:ba:f5:a8:4c:6f:40:ae:8a:27:
75:62:51:43:de:09:7b:48:75:af:1c:66:16:ed:a2:eb:5b:b4:
42:f1:d7:4e:b1:89:42:a2:45:5e:0e:97:0b:96:c6:8c:b9:d2:
cc:33:1d:df:cb:9c:86:21:a6:fb:2d:64:de:44:8f:e2:14:65:
2e:4a:40:a2:66:7e:d0:54:dc:de:6d:05:56:76:aa:49:73:42:
f7:c9:3e:06:f9:63:66:1a:db:e3:e4:91:11:99:f6:aa:31:b0:
38:bb:8d:73:38:9d:f9:3c:ef:10:52:50:9b:cb:7f:45:7b:53:
e3:91:7b:7b:02:f6:5b:87:e0:94:ea:6b:69:08:51:a2:62:3e:
59:69:7b:ac:54:93:0a:ea:8b:ef:f3:fa:be:fc:2e:10:fe:3c:
f8:3c:81:14:5c:09:27:95:82:7c:9b:91:81:cf:5b:52:a2:92:
c6:95:b5:ef:2a:92:23:72:92:0b:7b:ce:c6:e9:dc:fe:90:14:
1c:64:17:d4:e2:23:c8:1b:41:dc:bd:d8:83:51:96:42:70:5c:
9f:4f:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:23 2025 by rpki-client