Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
File: 54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa (raw, json)
Hash identifier: vngt5wV5CWvlBSCvoj5twuHaVdcrrVpwYVW7QL4Iu3M=
Subject key identifier: B7:A4:DA:B5:A1:28:DA:CD:A2:2A:BA:1D:B9:BD:C0:22:2D:26:F1:73
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04AF91714F08A81BC16A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.29.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4a:f9:17:14:f0:8a:81:bc:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=3cc33e1c-b12c-4214-8f4f-f1b119c8bd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:da:24:ab:c7:ce:69:30:8b:52:18:9d:ad:
f5:f7:54:63:4d:82:2d:27:1b:74:ea:05:b4:be:3a:
c9:a6:35:51:a3:be:aa:7f:b1:e8:70:b4:f4:c3:67:
49:1f:da:cb:bc:5c:0a:b9:9d:a3:0b:ce:4c:0a:bd:
75:d0:1e:7f:82:0c:51:41:ce:03:f3:fd:15:e8:0e:
b4:26:ff:fc:a1:02:f6:09:31:6b:51:93:5e:38:fc:
dd:bd:c6:b6:b9:a8:96:65:26:7b:b6:d9:29:68:6b:
98:cd:66:96:ac:b4:29:f6:c5:bd:f3:14:f8:d8:4f:
fa:42:02:69:eb:e5:c5:cc:cf:ef:51:79:0d:88:df:
77:f3:25:be:3e:23:21:ee:f0:64:0b:e0:90:4a:17:
5f:a5:15:bc:75:03:a3:83:ec:c9:86:a2:ad:e5:9b:
ad:e4:7e:03:a7:d7:dc:38:84:45:b3:8f:74:fb:d5:
08:b3:1b:0f:7f:5a:cd:da:db:f7:ec:bb:c8:11:a0:
26:61:61:db:70:64:3d:14:59:d6:f0:bc:76:4a:16:
8c:2a:75:0c:f4:4d:46:ad:e2:96:36:3d:f5:d9:17:
2a:3f:35:de:6c:92:5d:59:82:e7:20:0e:0d:6c:ed:
f3:48:de:3e:10:0a:a7:e3:03:8d:d1:cd:65:5d:16:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:DA:B5:A1:28:DA:CD:A2:2A:BA:1D:B9:BD:C0:22:2D:26:F1:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/54453adc-8558-3989-a2bd-bf90ebb2f0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:0e:1f:a6:4e:79:dd:42:6f:78:36:27:6c:cd:7c:0f:86:cd:
67:76:28:1b:43:a5:16:1a:c6:07:a8:1e:02:7c:c1:1d:30:6c:
18:4b:0f:38:6e:74:36:39:a0:8a:27:e8:c1:1d:73:71:7e:f0:
cb:9c:44:35:af:7d:41:f9:38:42:db:df:6c:07:ba:c5:30:0d:
a0:3c:06:32:cb:09:4b:06:65:9c:23:0c:f5:2c:9f:c2:6c:8f:
85:8b:40:55:62:6f:77:9c:2a:a4:f7:cd:e5:4f:77:a9:23:5c:
82:07:00:38:2e:a3:30:4c:e9:a0:c9:ef:2f:af:9e:85:87:89:
df:fb:80:50:4e:1c:0a:a0:83:78:e4:59:ec:ea:2b:23:5c:62:
01:97:a5:6c:59:0d:53:82:67:90:1b:0f:af:89:01:5e:1c:20:
0f:74:ea:43:79:e9:ff:59:ac:08:26:5b:d8:93:90:25:0a:b7:
0e:92:11:a0:72:6b:60:0a:43:e7:63:ef:94:f7:f0:a9:b8:7e:
be:7c:36:6b:66:eb:64:5e:95:a0:58:39:16:5a:07:cf:71:3a:
96:ba:44:d7:17:8e:6f:75:a8:5a:e0:ca:8d:95:87:5f:f6:91:
26:4a:87:05:93:11:8b:04:8f:95:41:a0:43:3b:a4:6b:f1:d9:
3e:ac:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:35 2025 by rpki-client