Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa
File: f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa (raw, json)
Hash identifier: HkuXMgiI8BHZdkIbltNYHAqPcqXWvrQfnafmYqgJcns=
Subject key identifier: 07:6B:23:66:E4:7B:E8:69:01:7D:8C:19:4D:18:3A:84:62:A4:C3:EF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D189F89C946E1E975D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.8.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d1:89:f8:9c:94:6e:1e:97:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1e172f54-c848-4d77-a1c3-3207684dda7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:43:bd:db:5b:ed:f4:7a:40:97:72:3c:e3:
8c:f0:3a:c2:5e:ee:87:4f:ea:7c:34:b8:56:1d:49:
51:e8:2e:69:05:e0:8c:23:29:40:4a:54:2c:5a:1c:
37:f7:0c:c7:7b:7e:93:ec:bd:08:48:84:1b:04:20:
d5:5a:b7:85:9f:e9:14:e4:51:b1:84:9d:34:3b:59:
24:9b:e0:90:49:f4:6d:f7:fd:39:40:7c:44:c4:02:
24:22:29:29:84:bb:87:83:2c:35:6a:14:90:07:8c:
7a:42:7b:92:a4:a3:b0:9e:7a:d5:32:2c:aa:e7:3a:
75:8e:9b:5c:7d:18:a6:11:87:d7:65:1a:68:23:9b:
75:b0:5d:54:8b:b5:db:99:6c:e4:43:df:16:60:89:
36:81:61:6b:01:fd:f3:a8:c8:ab:fc:c5:38:f1:18:
2b:0a:90:3e:64:b2:42:7a:8b:65:de:c5:be:d9:be:
34:e5:8a:71:b5:fa:ac:e0:a8:77:04:83:8b:8c:02:
0d:8e:e9:7c:bf:16:4e:64:9e:51:e8:45:4a:9b:68:
34:5d:e4:da:a4:b5:d0:de:c0:fa:f0:8d:a3:56:b6:
ea:f7:4b:2b:2f:07:3a:36:7a:03:ea:95:2a:24:9d:
d4:fc:36:ec:9e:d9:ad:e8:09:08:24:5d:ae:92:e5:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:23:66:E4:7B:E8:69:01:7D:8C:19:4D:18:3A:84:62:A4:C3:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.8.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:00:a1:5a:06:9f:ab:f0:83:3c:54:d2:b0:36:11:61:94:72:
12:1a:c4:78:ab:d4:aa:f5:20:4c:e9:11:e8:8d:d7:18:08:c2:
92:c7:cf:a3:05:85:1e:0d:01:00:4d:cf:4e:f5:58:aa:a0:fa:
36:ea:67:b2:ee:a7:81:ef:2c:b3:7c:5f:af:22:69:b1:37:23:
3a:62:b4:44:ea:9b:e6:88:92:f8:df:17:d3:15:82:d7:7e:55:
87:ac:aa:57:a5:5c:b1:34:40:88:d7:be:c6:00:f2:7b:99:e3:
5b:a0:0d:97:be:c4:4f:6f:b2:24:73:c5:50:a1:5d:3c:34:aa:
73:cc:2f:53:16:a1:8a:7f:98:92:28:a2:6c:2c:7f:2c:0e:22:
35:74:e9:70:d4:25:94:bd:55:d8:f3:27:ee:72:d0:75:03:24:
ea:90:08:f2:b5:ce:93:d0:dc:63:bf:47:a5:4f:2a:17:c1:f4:
ef:1b:34:47:17:77:79:6d:b9:c7:b6:20:5a:e9:dc:e3:d2:5f:
0e:6a:f9:bc:64:f3:f3:fb:5a:f1:79:e1:8b:e8:1e:b8:eb:0a:
af:5e:ca:27:3e:df:ee:c0:96:dc:79:1d:cf:4f:33:35:20:52:
00:a8:00:3c:95:dd:b2:fb:a3:f8:1e:06:85:10:b1:96:78:4b:
d3:23:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:06 2025 by rpki-client