Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa
File: 4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa (raw, json)
Hash identifier: HOD+C7v8K4Uo08FsG8asqRrADjMHq+gf0xCmKQN0thY=
Subject key identifier: FD:61:E3:9D:FE:35:07:88:0F:B9:82:BE:D0:1C:E1:AF:33:63:E9:92
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04B3431D7D8B42C582940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.36.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4b:34:31:d7:d8:b4:2c:58:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=a4379e68-e816-4762-bbd0-7edd96a13d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:dc:e2:f0:a6:a2:a1:17:4e:ca:ae:bd:9b:
4d:d0:25:3e:ef:6a:d3:00:70:03:a8:bb:6c:27:56:
3c:b8:ab:98:ff:37:97:c1:06:c1:12:9e:b9:0b:1f:
00:bf:5f:e6:5c:e3:fe:24:15:a1:3f:80:63:a3:58:
b9:8c:68:49:48:11:87:78:71:94:17:55:12:86:d2:
b8:81:45:4a:09:aa:7e:75:b6:3b:ff:22:a0:02:6a:
01:26:44:26:d7:f8:60:9f:ea:90:02:4e:c0:e7:05:
d9:51:c0:a6:4d:c9:24:6b:39:f8:41:d3:cf:0f:54:
d0:ed:ec:ea:ed:3b:76:af:6d:c7:2f:54:85:11:1d:
ed:11:9c:6f:13:1e:0c:b5:f5:19:23:92:f1:0b:8c:
7a:6d:68:11:61:4a:f6:2a:8f:67:eb:94:40:c0:1e:
55:7e:69:ac:df:6c:c3:a7:b8:cb:f9:d7:db:e3:47:
4d:62:ee:90:0a:e7:17:89:ef:e2:a1:13:9d:8e:91:
89:82:3f:84:79:50:dd:f0:cb:4e:3d:6d:e5:5b:fe:
80:e5:06:c1:bd:7a:d3:d6:3e:ce:d0:32:b6:91:3e:
cf:56:bc:46:3e:5a:e7:7a:f4:f3:1f:0c:93:67:a9:
04:41:d3:08:66:a5:7f:6b:09:95:a1:a1:98:6b:40:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:E3:9D:FE:35:07:88:0F:B9:82:BE:D0:1C:E1:AF:33:63:E9:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.36.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:15:aa:ba:84:36:66:07:00:6c:71:62:76:ab:70:18:ac:f5:
99:99:d1:fa:9c:ff:53:a1:e2:ad:36:a5:ce:79:59:f2:1b:0d:
d6:f0:18:29:31:9a:0b:1f:c8:2f:4e:8c:1c:11:91:30:ca:6c:
aa:57:6c:36:78:be:ff:1c:19:4e:c2:f5:a0:69:ce:c7:72:4a:
c8:de:a9:78:83:72:12:a3:e1:c7:ea:3d:00:69:7f:8b:df:f5:
5f:3d:bd:00:50:4d:fa:f2:5f:9e:98:e7:38:0d:43:a8:73:68:
5d:af:7a:f8:27:e4:25:a6:a1:75:77:4a:18:e3:77:25:cb:5f:
24:74:2d:1b:d2:20:74:96:8a:0d:23:73:c3:7a:a2:3a:48:5e:
97:ee:d4:25:48:ef:01:69:b5:ac:79:d2:ac:19:f9:46:11:d0:
2f:73:ec:86:2b:b1:0e:06:c3:29:e5:bf:64:b5:0e:5b:2a:e6:
f2:6b:6f:9c:a0:d0:77:20:cf:0e:de:42:8b:bc:b7:d8:ad:20:
86:a8:3a:1b:5d:21:da:64:0e:5e:5c:c7:fc:3c:6c:bf:99:9a:
59:ee:bf:4c:4d:92:b1:b7:27:e7:ff:b1:62:5a:e8:5c:90:fd:
fd:48:fb:84:a0:bf:14:5b:c7:37:15:4f:28:c1:22:92:db:0e:
19:98:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:26 2025 by rpki-client