Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1df5db69-1c99-36cc-906a-9b6588dfce0f.roa
File: 1df5db69-1c99-36cc-906a-9b6588dfce0f.roa (raw, json)
Hash identifier: Tbq31l+AtgFantJpjgebAWUxsgXluDb3qsJSW6jkG/U=
Subject key identifier: 36:25:5D:F9:7D:86:06:A4:4D:20:82:09:40:64:11:53:D2:D8:FB:4D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB6EAE20F898494C65CAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1df5db69-1c99-36cc-906a-9b6588dfce0f.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 108.33.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6e:ae:20:f8:98:49:4c:65:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=8dfdc72e-1f8e-4342-b382-546c4c0918fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:05:16:3b:03:34:56:6f:e1:93:ca:05:40:
31:ec:1f:d2:92:ee:8a:f5:a2:b0:dc:4b:3e:f3:cf:
21:58:fc:9d:74:2b:c3:11:a3:ca:8e:5b:02:1b:4a:
e7:89:bc:ee:2d:45:6a:a6:9f:4b:60:d0:d1:0a:58:
6e:ab:54:74:1b:ed:a7:f2:f5:69:04:fb:d8:3c:2c:
98:75:08:7a:7f:57:5b:a0:58:84:e6:30:b7:e2:6d:
c2:62:05:88:2d:11:1d:b2:76:ab:cf:46:be:c2:4b:
ef:97:58:43:46:85:55:1e:ce:de:cd:d3:09:7e:bb:
8f:95:cf:73:76:db:5f:5a:fc:5f:5a:0e:6c:f9:41:
51:05:51:4c:68:a8:17:f0:6d:f4:47:cf:5a:88:f9:
b2:59:44:45:88:c7:d1:4d:f6:f8:4d:62:48:33:4d:
77:b5:43:09:02:58:d0:5c:59:cb:de:b4:92:9d:1b:
04:be:69:c4:e4:0c:3b:8c:32:2c:8d:4a:35:52:15:
ef:cf:0f:fa:3a:d0:0b:23:17:c2:15:95:80:f0:ba:
75:f0:99:bc:2e:cd:a0:7f:04:1a:9b:f4:c1:12:0e:
0b:06:b8:7e:3d:98:93:97:56:e3:58:f7:fa:e9:08:
50:9f:f4:4e:fd:b8:4b:5a:40:91:cd:0d:00:66:04:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:25:5D:F9:7D:86:06:A4:4D:20:82:09:40:64:11:53:D2:D8:FB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1df5db69-1c99-36cc-906a-9b6588dfce0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.33.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d4:42:40:e8:14:66:21:c8:57:18:e9:e5:86:d6:63:be:04:
00:56:46:62:59:00:df:aa:15:45:87:2f:e9:16:f6:d0:22:3d:
11:a2:89:ac:d8:34:6b:b2:55:db:37:a0:b8:29:3c:6b:78:15:
fa:f9:c1:ac:b5:de:5e:17:1a:b7:1f:c7:4f:ec:59:f2:6c:35:
e4:d7:a3:0b:8a:41:95:63:25:52:db:39:1a:28:d9:e7:b6:aa:
8a:7f:ea:ba:d1:0a:57:29:89:ed:cb:23:03:a3:85:5b:fa:3f:
bd:1e:99:b1:4e:6a:79:7c:8c:b9:5c:b5:00:b2:8a:bc:a2:c7:
18:22:86:48:5e:a6:aa:1f:9c:b5:8f:90:be:76:4c:46:3e:0b:
4f:e2:53:7b:f7:fc:af:56:0e:3b:48:98:19:57:5e:81:6e:2c:
a1:e2:00:67:16:1f:c6:66:23:f6:3d:a6:7d:fd:a2:32:b6:d3:
eb:5e:03:df:c5:2e:4c:ec:f9:66:bb:89:ce:e6:24:df:5a:40:
0b:e4:c1:1f:5e:ab:67:91:da:53:72:a6:71:4b:f2:71:4b:cc:
0b:d8:a5:2d:93:b0:f9:c0:17:1d:5e:63:bd:34:c5:83:f5:22:
ae:a5:e9:76:63:0d:e9:9e:d1:62:57:e7:10:55:4b:83:1b:eb:
4a:eb:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:01 2025 by rpki-client