Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cfee1f-4432-3fa4-9de0-23e4b6708ce7.roa
File: 97cfee1f-4432-3fa4-9de0-23e4b6708ce7.roa (raw, json)
Hash identifier: o0IjuxMNzG+mnS+Frj+mfYjj76pVyemGIzPI3OJgoAY=
Subject key identifier: 9C:DC:F4:8B:B2:72:73:1C:42:DC:98:E5:B2:D3:D4:FE:76:11:52:A5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F05693D36EF7DF01D37380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cfee1f-4432-3fa4-9de0-23e4b6708ce7.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.54.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:93:d3:6e:f7:df:01:d3:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=baa1f1a3-8781-4760-b3c0-02ead9845573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:65:b1:90:83:b4:b1:f0:19:23:c1:ed:e1:1a:
dc:9a:cc:2a:0f:8e:85:de:da:eb:ca:05:46:de:a1:
a4:9b:30:64:c3:de:01:5f:07:99:74:ed:3f:45:34:
ae:a2:3f:7e:aa:50:5a:40:40:e1:3d:9e:b6:a5:28:
6a:56:b8:47:5f:56:40:d7:02:2d:59:fc:0c:80:62:
03:df:bc:c7:a4:fd:fd:d5:49:f7:66:53:8c:3a:a6:
f7:09:ce:89:48:40:f4:50:a9:de:87:6e:fa:54:6e:
0c:29:64:13:5a:c5:ba:ef:c4:1a:dc:3b:f7:aa:2f:
13:34:8c:75:55:ab:e4:44:0b:df:a7:e1:fb:79:4d:
86:5a:cb:e2:c7:72:10:db:cc:24:c9:9d:44:4a:c2:
ca:82:da:41:de:41:fd:0b:80:2e:19:ae:56:b6:b6:
0f:8a:59:f2:46:3b:9b:17:57:13:7a:b8:fb:cd:54:
39:8a:c7:7d:74:c7:42:25:a7:bc:6d:b4:81:1f:a0:
58:18:f7:13:8f:85:aa:b7:5e:38:2f:3c:42:84:2a:
58:00:15:83:3e:ee:fe:ba:7f:68:6d:c8:e6:ca:4c:
2b:38:34:bd:7f:bc:01:31:c9:31:71:0e:16:f6:a8:
0e:d2:fe:d2:38:82:79:bb:00:5a:7f:9a:4f:db:0e:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:F4:8B:B2:72:73:1C:42:DC:98:E5:B2:D3:D4:FE:76:11:52:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97cfee1f-4432-3fa4-9de0-23e4b6708ce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:82:2a:99:5b:f1:56:c1:ae:9e:42:b0:9e:95:db:5d:a6:93:
f9:a2:fb:41:f1:c4:8c:15:e4:53:24:d2:17:fd:84:30:ee:1f:
5c:fe:95:f7:0a:f3:47:95:63:8e:64:5a:67:c6:e0:f8:ca:f8:
85:18:7b:64:f8:7d:00:c4:d1:01:28:16:16:01:32:5d:e6:78:
da:d3:30:3b:76:26:46:e9:84:c3:38:8f:c1:0c:1c:fb:c2:aa:
5d:71:1a:f4:99:5e:5f:8e:c6:65:4c:08:90:09:81:a2:fa:59:
94:b9:82:06:ba:4d:e6:38:10:3a:a9:0b:da:a6:6e:ad:e8:e4:
93:19:54:4e:34:9e:21:73:b5:05:f7:e9:5a:02:7a:68:b6:e8:
d0:38:6e:6f:6c:63:a3:60:f1:49:e7:7b:01:4b:3f:b9:07:64:
c0:88:08:b5:c2:ce:e6:e9:08:62:d7:04:4e:ab:1c:04:6c:ec:
71:3d:04:f3:c2:e6:b2:77:91:91:ab:77:14:9b:65:2c:e3:73:
3d:1c:2e:80:27:35:ad:7d:39:e2:42:e6:06:46:39:e6:e7:9c:
93:eb:77:c1:b7:8c:c3:d5:59:36:19:84:b9:1b:6d:49:8f:28:
07:44:40:ab:15:b0:cb:15:9b:b5:88:ff:92:e8:35:5d:ad:6e:
27:9f:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:07 2025 by rpki-client