Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae02a8bb-ea9e-3b47-9d1c-c56e1a57fcee.roa
File: ae02a8bb-ea9e-3b47-9d1c-c56e1a57fcee.roa (raw, json)
Hash identifier: 4fn+TTg91eNJE1MJSBbfZjzEngHfvnsFogVY3QHbB1k=
Subject key identifier: CB:C2:5F:90:F2:CF:DF:CE:D9:E0:B0:2F:68:49:46:3C:6E:47:FE:94
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F056F33CBBBB8D3E860500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae02a8bb-ea9e-3b47-9d1c-c56e1a57fcee.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.30.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:f3:3c:bb:bb:8d:3e:86:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=db31cbd4-643c-41ca-9f5b-27f438a634d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:83:16:4e:47:4d:45:0e:85:8f:d1:21:cf:
4f:c3:dc:95:bb:8a:bb:6c:dc:4c:25:02:29:a5:f7:
bc:24:5e:37:39:67:c8:bd:89:c7:82:11:57:50:cf:
cd:aa:fa:ee:58:72:a7:63:20:4a:a6:7c:bb:a5:f0:
d9:7a:14:9b:f9:b4:f5:e6:e9:2c:38:8e:b5:6b:4c:
07:e2:35:e1:8d:d4:82:7f:6c:4a:b2:cd:a4:59:55:
53:16:99:fd:bb:b8:46:5c:42:46:75:15:d6:a6:e5:
72:01:37:37:c6:c4:98:f0:14:f7:3f:ba:2a:86:52:
97:ab:c9:0c:42:73:5e:cd:48:66:38:c1:71:5c:47:
a1:3e:e0:f2:5d:7d:81:73:04:24:5f:5d:44:20:f0:
b7:23:9d:0e:53:2b:27:87:0d:7d:cd:3f:ae:91:d9:
8e:68:22:9e:2b:bc:da:54:f4:30:ab:db:22:51:fe:
65:93:76:32:ae:ef:37:79:ba:dc:38:f1:2a:6b:d8:
05:24:b3:29:e2:db:7c:eb:b0:f3:fb:64:f6:c1:d5:
ca:36:c3:1b:1a:bc:06:d6:63:ce:5a:14:c1:c4:6b:
f5:c2:32:ee:ae:3e:01:f4:ad:6c:09:ec:c4:58:49:
a0:7a:c4:07:eb:76:73:13:59:21:8e:fd:1d:02:7c:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:5F:90:F2:CF:DF:CE:D9:E0:B0:2F:68:49:46:3C:6E:47:FE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae02a8bb-ea9e-3b47-9d1c-c56e1a57fcee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:57:44:56:12:0f:64:1a:76:1e:be:52:ec:5b:08:b1:a5:df:
c3:4b:a6:00:92:8c:f2:ee:3b:0f:66:e4:10:ef:6d:fc:9b:af:
98:87:84:f8:3b:8d:68:0b:d7:43:39:21:8a:44:4f:82:a2:8b:
73:4b:eb:9c:5f:23:56:06:ae:3c:29:4a:6c:19:b7:31:fd:fc:
2d:f3:db:03:a5:eb:9d:00:88:0c:2b:e1:a6:0b:a0:0d:4b:76:
67:16:88:c3:da:4f:36:d2:c5:3d:fa:a4:90:80:08:fd:d3:c2:
14:5d:03:46:e8:a5:c2:b9:c7:05:83:46:b6:9d:da:d8:69:1d:
70:38:f6:39:ff:e2:c2:cd:c2:fd:0b:40:e9:eb:dd:cb:4d:6f:
bf:55:ef:6f:51:8c:d5:8f:aa:81:ce:30:5e:73:29:d7:2c:b2:
6f:c7:00:41:c5:bd:88:c2:c9:cd:56:95:7a:4b:a9:33:65:85:
b9:08:72:df:dd:24:d9:d2:b4:01:51:0c:7e:a6:9a:1c:09:b3:
82:07:51:21:1b:73:bc:a1:19:25:15:0f:00:9e:2a:c2:93:f3:
8e:48:4d:33:ea:3a:d5:11:62:d9:ee:48:a9:3c:c2:e3:9d:51:
91:9b:7c:aa:08:99:ad:41:4b:72:7d:d6:e2:a2:b7:a3:2a:90:
a3:47:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:23 2025 by rpki-client