Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17703f2a-70f9-3aac-aeb0-d55583998cfb.roa
File: 17703f2a-70f9-3aac-aeb0-d55583998cfb.roa (raw, json)
Hash identifier: wqfHlLgQbFUeXcsWzIm0ZUN475U/VCn87XAWJO4u83I=
Subject key identifier: D9:F2:9B:D9:8D:C7:24:5B:B7:EC:39:8C:E4:13:67:98:9C:D8:38:CC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F0565693828409B4EEBA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17703f2a-70f9-3aac-aeb0-d55583998cfb.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 100.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:56:93:82:84:09:b4:ee:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8806c9ac-d551-4653-8116-bf7a9256e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:e1:9f:46:af:da:a7:ed:a7:67:b2:f7:66:
e9:6c:dc:26:11:81:9b:a9:6d:42:ce:ca:80:d6:d0:
fb:f2:6d:53:f5:4d:43:36:47:c5:6a:b5:b1:47:26:
82:cc:df:2c:54:a4:71:4c:ef:ca:18:c4:36:fc:8d:
e3:60:04:b2:fe:fb:a4:7f:05:76:d7:42:37:93:3b:
11:ff:c8:94:67:b2:f4:1a:a8:29:63:d7:bb:3e:23:
f3:06:5b:68:db:22:70:94:c1:4f:49:fc:9c:04:8f:
2d:6c:01:94:e2:85:e8:6a:82:8e:00:19:82:28:7b:
37:8d:c4:14:52:a3:3f:14:a4:59:0d:d2:27:92:79:
b9:4c:cc:de:4a:34:52:43:ae:11:76:ef:30:b6:20:
f8:29:a4:b1:0e:67:cb:ec:87:29:ba:b9:a4:7d:38:
ef:df:13:35:59:09:9a:09:44:ae:c2:42:d4:bc:06:
51:28:9e:1e:c8:39:d7:99:73:59:f2:31:21:f7:9b:
8a:35:3d:02:f3:55:1c:9b:a3:e9:0e:40:5f:d1:96:
13:09:cd:8c:25:11:a4:18:b1:eb:7b:70:c5:1b:84:
6a:d2:8b:d7:62:ad:4b:9e:eb:52:ec:e1:6f:1d:1e:
55:3a:72:c3:89:03:9f:3e:97:72:19:74:f3:98:39:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:9B:D9:8D:C7:24:5B:B7:EC:39:8C:E4:13:67:98:9C:D8:38:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17703f2a-70f9-3aac-aeb0-d55583998cfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:74:85:e5:5a:7d:8f:c4:29:0a:52:16:e1:68:f0:e1:88:48:
94:45:d6:54:1c:55:bb:6a:77:e2:1d:91:c3:45:c6:d6:1e:3c:
ca:e2:d9:27:3d:f6:e1:2c:b1:51:b4:34:69:41:15:f2:cf:e0:
9a:ef:c2:50:9b:de:cf:9e:64:b3:d5:d7:17:2e:52:01:66:d6:
12:7c:3e:cf:a8:f5:a6:e4:44:3c:60:62:59:eb:58:a9:6a:0e:
c8:1d:0c:71:3d:ee:ca:d5:85:5f:c7:3e:49:eb:2c:9a:69:90:
fd:1d:77:de:77:51:1d:9c:40:8d:de:e0:a8:84:f6:95:8e:dc:
91:e3:b6:ea:ee:89:1f:44:c4:90:c9:eb:12:47:5e:fb:0a:5d:
88:0d:f7:1e:5d:8b:f9:80:91:42:2c:a0:d8:47:c0:48:d4:7d:
9b:3d:d3:8e:3e:51:83:a9:1e:7b:a8:4d:46:ce:47:23:be:51:
22:2d:32:b8:dc:9b:4e:88:ed:c0:63:25:34:c7:fc:f1:b8:ed:
ea:f8:06:d6:21:b4:d6:f8:ad:92:19:52:c5:d2:ba:20:cb:0a:
3e:07:c7:1e:b3:f7:5e:15:e2:3e:c0:2c:9d:36:3b:9c:01:33:
40:60:38:14:27:a3:52:4b:17:e8:49:a8:26:ee:29:9a:da:7e:
26:10:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:01 2025 by rpki-client