Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa
File: 5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa (raw, json)
Hash identifier: oO9nMu23B8Fjb67gRNNk4ZrlS944Of5Bj24NajusGR0=
Subject key identifier: 6A:BE:80:D8:75:E3:3A:DA:13:32:64:74:5F:65:F6:2A:52:11:99:CC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04A1E127D87142B6A5538
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.32.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4a:1e:12:7d:87:14:2b:6a:55:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c0b1a50f-3dc1-4451-b787-82c19d1c26a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:dc:42:85:85:bd:33:54:cd:a1:fc:f2:d6:
e8:d2:21:28:59:b8:f8:86:74:96:df:2c:3d:96:55:
5f:92:29:2e:6e:d3:20:22:7e:d3:d2:1e:ec:a8:e8:
13:37:78:ec:44:ad:ed:c6:1a:c4:4f:0b:9c:69:01:
0c:83:28:94:7a:e9:ad:28:40:fb:85:5a:f0:bd:0b:
f6:d6:c1:92:fa:c3:fe:96:ed:5f:e9:35:e5:79:6c:
c1:b8:ee:82:2c:89:f6:73:8a:89:e8:fc:4d:56:f8:
25:d8:f3:59:0c:1b:40:67:e6:df:85:60:17:9a:d8:
7b:33:04:2b:9e:28:68:20:6f:c5:3d:54:75:86:f3:
cd:94:4e:0d:2a:e4:e8:7e:35:db:e8:32:fe:23:81:
0f:55:96:1b:92:51:34:98:93:72:aa:e4:1f:d4:a4:
59:c0:29:c8:ce:7a:d3:3d:a9:a7:de:54:fc:34:40:
b4:5d:23:7a:8d:28:6d:d7:0f:fc:79:58:cc:1f:8f:
44:e7:cb:25:6d:66:d8:be:08:3f:a8:59:48:39:0b:
e3:18:6d:56:0f:05:37:6b:38:4c:1e:0b:c0:9f:e9:
b9:50:05:41:e1:5b:3d:37:e5:a8:4d:06:8d:91:d0:
d3:3e:06:66:82:d2:6b:51:24:ff:70:d9:6b:c5:a9:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:80:D8:75:E3:3A:DA:13:32:64:74:5F:65:F6:2A:52:11:99:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.32.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:26:10:72:6e:60:94:5e:b6:2e:01:54:92:ee:8a:51:6b:90:
e4:25:b4:c8:19:4d:ef:1e:5a:bc:4c:a8:30:66:9c:3a:bc:fb:
72:81:1a:25:74:ac:ef:d7:65:55:6a:51:18:9d:36:0d:25:6a:
0e:88:80:3e:8e:c3:41:83:a6:5c:99:62:8a:7e:95:97:fb:d0:
d3:d5:3a:82:37:30:98:d2:14:29:3f:be:fb:24:3a:b3:5a:4e:
3f:e2:30:bf:3f:5e:3c:ad:df:7d:82:82:8a:7d:79:2d:90:a8:
20:c7:ab:41:5e:d3:2c:7a:7d:ae:6d:a2:84:dd:6b:b3:8d:fb:
fc:10:cf:29:73:77:8c:be:be:0e:23:55:85:78:d6:4f:37:b7:
a4:a1:cb:ca:43:04:a8:bb:69:90:cd:9e:92:5b:1a:54:42:01:
11:4e:21:f7:6b:37:d2:34:61:fc:3d:fe:25:1e:a2:0f:85:26:
c3:76:28:55:f7:0b:68:c3:fe:72:ab:e4:56:be:6c:f4:77:8e:
8a:de:f7:b3:0c:3c:58:f8:f9:90:b3:89:84:03:92:52:80:c4:
88:b4:da:be:7a:b2:ed:65:aa:eb:ae:68:14:f8:7c:00:4e:db:
7a:86:d8:52:e8:cf:27:31:3c:88:1d:69:8e:46:fe:a0:98:61:
90:c5:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:31:20 2025 by rpki-client