Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b329ce1e-9070-34c6-a13c-ce3f41a44122.roa
File: b329ce1e-9070-34c6-a13c-ce3f41a44122.roa (raw, json)
Hash identifier: zis5NF2htNSz+5Hmgye5bLd1SeYnHVb+eZU5V+RxQ8Q=
Subject key identifier: DA:C6:F1:5C:8E:3E:DA:97:A6:34:E1:F4:51:2E:4D:3F:F9:06:14:BC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB41E4B220343C132CA200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b329ce1e-9070-34c6-a13c-ce3f41a44122.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 108.22.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:41:e4:b2:20:34:3c:13:2c:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=202760b9-768a-479b-8647-c50e9f6510cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3a:10:64:12:be:1b:08:13:cb:aa:0c:c2:a0:
e2:73:ff:be:3c:b4:ff:5b:85:94:ec:34:f6:6f:97:
ff:3e:bf:fd:00:08:56:97:ed:7c:d5:d0:4b:ef:1d:
d9:f5:24:1f:eb:c1:b2:4d:35:36:c5:9c:ec:66:18:
fb:d6:47:d1:5b:01:a3:ed:cd:34:5c:ec:10:5c:de:
39:f5:e5:06:87:e3:3a:27:c1:02:24:11:3d:d7:95:
56:e5:7c:0f:89:14:1a:38:85:c0:ff:7d:78:40:04:
16:94:38:77:5d:7a:d3:32:f2:d2:f1:5b:77:d6:38:
6b:ac:6b:9c:20:68:0d:fb:ad:b9:e5:43:0a:17:41:
6e:58:3f:2c:51:fc:24:cc:88:69:3b:b4:74:9e:74:
2d:55:c3:d3:68:0d:6b:08:9d:80:76:47:6d:1c:cb:
66:3a:7a:23:0e:33:33:16:c0:68:59:1a:9c:1e:90:
c8:28:13:7f:49:d9:93:73:44:28:54:39:14:f2:90:
19:67:73:3b:a3:f8:19:d7:b9:e4:8d:1e:2b:88:5e:
4d:4a:ca:9e:18:88:6d:57:b0:9a:47:33:40:8c:1b:
74:4a:a5:a5:9d:2c:dc:0a:70:40:0d:91:ec:f2:ab:
56:dc:7f:ca:bd:b4:44:81:6b:13:a4:b4:0d:19:6c:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:F1:5C:8E:3E:DA:97:A6:34:E1:F4:51:2E:4D:3F:F9:06:14:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b329ce1e-9070-34c6-a13c-ce3f41a44122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.22.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:6e:09:4c:01:6a:15:24:b2:4d:77:85:2d:c6:83:bf:f6:7a:
72:db:7d:e9:48:ed:cd:69:e6:4c:ef:89:64:b0:f8:cc:b7:5a:
9d:00:cf:04:5a:da:d3:08:4b:2b:d6:25:e8:1d:42:12:2c:c6:
88:47:d5:c7:7c:85:4e:55:b0:5f:19:27:d3:96:42:7b:95:eb:
f3:f1:2c:a4:42:5a:74:a8:3b:cd:1c:71:a0:92:48:42:aa:93:
25:28:31:58:03:01:90:b7:40:11:af:fd:2b:3e:06:a6:34:94:
6e:59:42:47:8b:26:b7:35:f4:79:a0:09:3d:4f:76:b7:55:40:
ee:05:31:df:fe:be:09:c4:5f:00:0c:8a:ed:4f:bb:29:0d:de:
ac:25:97:b9:a7:51:02:83:c4:7e:65:0c:83:a9:b1:d3:a2:7d:
97:80:36:24:7f:58:26:1e:9c:1b:e0:e7:8e:c0:c5:41:21:ba:
65:87:2c:89:04:ec:00:5f:99:77:2c:64:78:44:c4:b1:c7:f4:
d3:86:ad:07:3c:5c:e4:a2:82:7f:11:8e:e0:56:04:57:20:03:
eb:96:fd:5c:eb:df:fc:0b:05:b5:9e:20:09:ab:b5:51:da:46:
bf:39:75:65:b4:2a:56:0e:3b:ca:7a:8b:7a:92:d9:5b:5c:1a:
b1:6a:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:47 2025 by rpki-client