Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa
File: 34027a47-a831-381c-89c6-ffb729e6f592.roa (raw, json)
Hash identifier: /sFlNM6qdSwMCn02p91Jn9uR6E1c6ATquO9XAX0QWMk=
Subject key identifier: A5:1D:F5:A9:E1:3B:9F:66:A8:C5:DE:47:D1:B8:F1:15:E9:A7:8B:C8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F056852BDCAB7392E1AAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.53.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:85:2b:dc:ab:73:92:e1:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=55060346-eedd-407f-89db-d18ba5ef7e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:f4:66:60:bb:4f:7f:5b:3e:be:8e:c4:1d:
c2:cf:29:26:b1:34:73:c1:08:c3:10:9c:24:39:29:
c4:26:10:8a:a7:42:d0:73:e5:78:0e:01:42:da:a2:
b5:d7:e7:8a:c0:e8:1e:2c:8a:18:7c:12:93:e7:06:
3e:39:d3:8f:14:39:db:42:35:8e:86:9a:e8:5e:85:
8d:e0:e2:15:1c:8f:e2:dc:da:81:bf:49:76:75:98:
80:67:ec:af:73:cf:0e:0a:06:36:ac:a4:7c:7e:b2:
c9:74:4d:62:d9:8b:de:58:ef:cc:c5:69:67:7b:29:
41:36:6c:c0:32:77:b2:4a:b7:1a:31:d6:88:ec:73:
3f:de:b9:f2:8e:fa:71:8c:6d:81:01:92:28:78:96:
28:32:05:d8:8f:5a:bb:5a:22:22:55:af:1f:10:fd:
fd:27:48:a3:22:3c:d8:32:8d:1e:7a:8c:2c:58:67:
4f:dd:4f:55:05:eb:83:16:dc:1b:bf:8b:9c:fa:5f:
87:4b:dc:56:2f:2b:9f:93:12:f6:60:34:21:ed:72:
a0:7d:bc:af:ef:c3:85:b7:c2:e6:30:c8:57:61:b1:
0a:66:57:f8:3e:02:58:00:84:2a:4a:59:35:e4:6d:
11:ad:7e:ba:99:b2:78:55:74:44:ab:62:fa:61:e9:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:F5:A9:E1:3B:9F:66:A8:C5:DE:47:D1:B8:F1:15:E9:A7:8B:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:a1:8e:10:4b:7f:62:80:d4:4f:1a:c8:87:dd:90:e1:bc:c9:
a0:c7:8c:d1:92:50:ee:30:e0:7d:0a:d2:10:77:f6:d8:4e:9b:
94:2b:40:c7:bf:03:ab:ab:47:df:e1:c8:3a:2f:d9:eb:da:db:
f2:d3:bc:45:f5:db:75:88:cb:d4:1f:d2:cd:34:42:87:b1:f3:
d6:74:77:d5:bf:44:17:44:d9:97:e2:70:9b:ee:9c:cc:3e:50:
8a:21:06:e7:0a:e2:5e:90:49:ec:33:a5:62:c4:68:ca:84:62:
7f:91:25:44:44:48:e1:1a:f2:f8:39:b9:f4:06:da:09:86:91:
ed:85:6e:2a:6a:3e:9c:da:be:16:59:5b:c9:76:f9:0e:7e:10:
a9:68:3e:a4:41:5d:7b:5a:90:fc:1b:4b:8d:03:7f:c3:eb:8d:
3a:46:d8:3b:87:17:17:24:6f:22:4e:2f:ba:16:73:f2:8e:e1:
2e:70:14:33:be:5a:da:89:25:d0:9d:7c:46:ab:15:5c:6e:37:
2d:2c:7d:c8:6f:fe:f4:bc:a9:3a:74:d1:f0:f8:d3:3e:d4:a2:
df:0e:de:7c:d9:32:06:4d:40:c4:69:2e:f5:73:b7:95:b4:8b:
ec:55:8e:52:59:c7:b4:7e:5e:8d:81:79:9e:cf:e9:f1:8b:0c:
02:4d:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:25 2025 by rpki-client