Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa
File: 3c271c2f-5fb4-307b-8972-821df3f14259.roa (raw, json)
Hash identifier: f78U9m3pC8fTuPTvpa7xSwzxDLAW1dBa/sDJP2HO3yg=
Subject key identifier: 4B:3A:0B:97:12:1F:E0:CC:08:E9:35:DC:F1:9D:9B:2A:C0:F3:89:A2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F0563FC6C0A4E50BBC31A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.34.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:3f:c6:c0:a4:e5:0b:bc:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=9e527f4a-523b-4294-b6e3-cbcadda44817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:7a:3e:18:78:b1:8b:77:50:5c:25:ef:bf:
71:0e:d0:fd:89:00:07:e5:65:5f:e3:f4:4d:0c:f4:
86:7a:12:9d:62:ad:d8:b7:a6:46:fe:79:49:44:78:
b8:b4:0d:75:4a:45:c7:54:9b:c2:2d:ae:24:d8:98:
de:59:72:f7:ee:f9:97:46:47:f4:05:7a:f9:c3:06:
e7:e6:7f:5a:08:c9:79:31:3d:e1:be:00:e8:23:86:
a8:57:b2:d5:8a:fe:cb:6d:f1:a9:88:1c:6d:cd:df:
d2:e7:ff:3a:33:ca:e9:cb:24:8c:67:4c:57:56:96:
b6:82:9f:88:b0:9f:ac:1f:83:7d:39:22:77:92:43:
f7:8a:e4:84:75:77:13:07:a0:2d:7e:f2:ef:5b:e7:
e3:89:4c:58:be:a4:ff:fd:a6:31:8c:e5:21:28:11:
4f:b5:14:39:e9:75:9d:20:fc:16:ec:98:f2:9c:75:
5a:f0:5e:7f:53:99:c8:e7:83:fa:ec:20:77:15:5e:
b7:81:91:b7:f6:5e:e3:80:30:46:62:63:4d:b6:2d:
b7:d9:41:48:1b:f8:11:7b:bd:99:ff:27:00:10:de:
6c:31:13:44:b4:3c:ba:4d:d1:09:05:dd:7c:d2:5a:
ec:11:31:6d:38:4f:d3:3f:07:df:69:36:dd:fc:31:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:0B:97:12:1F:E0:CC:08:E9:35:DC:F1:9D:9B:2A:C0:F3:89:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.34.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:62:8b:8e:f2:22:42:a2:17:94:10:6d:21:9c:96:7e:1c:89:
f8:af:f8:45:0d:b3:75:fa:ec:e4:34:47:77:bf:62:4c:10:92:
21:85:4d:47:55:48:f0:13:55:0b:f3:0e:a7:7c:3d:ff:5d:95:
9b:21:5b:e3:dd:62:2e:3f:d2:9f:56:47:79:b6:e1:1f:e4:c1:
cf:b5:8f:6a:cb:fe:8f:01:2c:2a:0c:85:6a:6f:3b:6a:97:18:
fc:6f:f9:fb:34:bd:c1:00:ea:4b:d4:c2:ea:6a:db:3a:30:18:
92:28:80:6b:b1:e4:9c:f6:c3:fa:ad:20:6c:34:3e:59:af:a0:
5b:a7:31:71:32:97:c5:9f:04:15:0a:b7:8d:dc:52:55:ac:62:
fe:fa:3a:14:c8:f5:6a:e6:64:9c:7e:32:87:af:08:fc:08:a3:
44:a7:68:50:04:c8:69:3f:79:31:d3:c7:e5:f2:e6:3b:f2:45:
c3:2c:20:cf:23:41:8d:9d:06:94:60:fe:ca:46:59:06:da:e0:
db:0e:c5:f0:51:83:48:fc:14:65:4e:52:89:47:ed:4f:f9:6e:
b8:e7:85:7a:2f:7e:06:1d:0d:47:94:4c:91:ab:35:8c:4d:28:
34:cf:c6:76:c6:62:6e:29:6b:9c:15:b6:69:69:12:f1:90:79:
63:07:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:03:51 2025 by rpki-client