Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
File: 11788f84-2e91-32ad-8647-02771e551c77.roa (raw, json)
Hash identifier: epR0G9SoUOAoVnoPWFGJalAJRCE8guG0v9Lv89k+HZM=
Subject key identifier: 3E:8C:44:45:18:D0:95:25:5A:BB:93:94:65:74:E7:27:93:0A:56:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04A8D3BF7EB8BBED1CF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.7.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4a:8d:3b:f7:eb:8b:be:d1:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=ee53cb01-f9b9-4d6c-a1d3-75a7cc5a27fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:cc:dd:98:98:56:af:fd:d3:dc:a3:36:db:
0d:9f:e4:57:ec:ec:f5:e8:91:94:06:a6:71:b9:28:
5b:40:85:79:13:12:5e:a7:53:b1:d8:72:7d:9d:45:
7e:87:eb:56:86:9c:9f:03:24:08:e5:ba:b4:65:73:
87:d3:54:52:c5:bd:90:a9:1f:5c:b4:94:ea:8f:46:
b0:bd:b5:81:1e:89:8c:84:07:94:3d:23:b0:45:52:
7e:2d:e4:48:6c:1f:94:e9:aa:a7:8f:03:c7:16:9b:
45:57:1d:ab:91:16:66:5f:e0:cc:3f:87:b6:ec:79:
c3:2e:db:b9:a8:c7:79:6f:da:16:65:a1:aa:73:37:
42:8f:6e:be:35:62:18:8e:54:66:00:32:0e:82:08:
c9:12:87:c8:ad:b6:7a:ba:eb:ac:aa:97:1d:1b:71:
8c:4a:71:b4:73:b5:59:3f:dc:6f:ec:11:9b:06:1c:
b7:6c:d9:de:a4:a4:cf:6a:ac:90:f3:7c:c1:1c:fe:
8f:58:33:ec:1d:11:56:23:1c:d5:41:d8:1e:26:2e:
5a:b8:4d:b2:70:1a:bc:5e:be:b3:99:30:e2:c4:f4:
23:8f:09:47:38:7d:30:93:87:a0:27:34:a4:fa:87:
06:ea:52:b9:0b:aa:30:7f:5c:c2:6d:c4:f7:8c:5c:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:44:45:18:D0:95:25:5A:BB:93:94:65:74:E7:27:93:0A:56:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11788f84-2e91-32ad-8647-02771e551c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:9a:7a:9f:a5:e4:82:1f:18:32:dc:89:00:ff:c0:dd:fe:37:
9c:64:ca:4c:20:3e:a9:84:ad:4f:b0:e1:c7:87:b3:26:61:6a:
db:c2:23:53:6e:cf:1a:1a:03:38:72:62:f1:dd:17:1f:3f:48:
f4:c3:d7:95:8a:57:36:13:0b:a6:18:da:ce:5e:cb:df:64:0e:
4d:6b:90:b3:f2:1c:cf:d3:6f:2e:75:4d:fa:e8:29:ee:fb:47:
ac:d0:68:07:fe:60:9d:f3:0c:4d:34:e8:09:1c:8c:c7:b7:0a:
30:6c:2d:e3:5e:92:64:bb:69:ad:90:72:e0:61:82:13:d0:b9:
06:ff:e8:f1:1f:b7:b4:c4:4d:47:78:20:b3:06:6d:36:9b:c3:
b0:fb:a0:b2:a3:5c:5a:1e:10:2e:10:ca:2d:95:b5:36:75:b3:
aa:6a:d9:f1:1b:ef:2d:3b:f7:ee:e9:5c:c9:2a:29:b0:a4:66:
27:41:4a:2d:1e:15:74:30:1d:c3:84:9a:7f:58:1c:b2:01:9d:
4d:ac:cc:ca:aa:e6:23:45:2f:f7:71:da:18:80:92:1f:cf:16:
24:8d:ad:51:42:c6:21:90:2a:a7:78:31:da:f4:87:da:9f:9e:
03:c2:99:94:22:00:67:18:d4:42:77:c4:a1:87:2d:7b:cb:84:
ac:79:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:21 2025 by rpki-client