Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
File: d898c3e6-e536-3098-b097-31f14862b8a8.roa (raw, json)
Hash identifier: 9XLTS8kzmknzZBQT8ZQbeXiuxrj/xcfL6CEr+PET6wU=
Subject key identifier: 43:0A:6B:C3:C4:80:99:E1:B3:A0:A1:B3:E6:0D:23:BF:6B:FD:D8:16
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB45A54A3220CDB3151700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 108.15.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:45:a5:4a:32:20:cd:b3:15:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a36f563c-2e9c-44d9-9ec9-13e582975b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:be:99:9f:97:dd:3a:5d:e5:be:e2:e4:4c:
74:28:a4:a3:57:05:fe:84:19:f9:1f:f3:ac:c1:78:
b3:4a:e6:34:f7:72:9e:86:16:3b:92:d3:2c:24:2c:
91:53:9c:6a:a5:37:31:a3:01:ed:a8:bc:26:a0:70:
5b:c6:5c:2a:e3:c9:10:b9:bf:d5:3d:72:8b:dd:e0:
6d:89:92:5d:84:8b:f9:1a:a9:47:87:f6:ca:3a:4c:
3f:e3:9f:50:c9:c2:b2:6a:34:c8:1e:32:5b:76:6d:
66:e4:2f:5d:8a:a9:d4:8d:34:1d:d9:99:ef:c6:53:
8e:99:3b:f3:ee:b7:70:6b:d7:5c:03:97:22:33:f1:
27:a2:70:74:fb:3d:dd:32:d1:44:65:ee:f8:3c:b5:
2a:e1:bf:a7:00:ed:2d:b9:df:73:32:fb:a7:d4:ab:
3b:bc:fa:de:23:c8:ff:42:ab:69:29:a8:e8:d7:05:
f2:71:ec:26:ef:2e:cf:5e:66:bf:3a:01:35:cb:3c:
de:de:b2:81:f8:d5:3d:ac:db:c9:76:a8:1a:b2:dc:
02:40:3b:04:ef:c1:fe:c4:20:80:b2:03:82:f6:c8:
62:2f:25:2b:75:65:13:e2:45:ed:35:43:33:9f:d5:
1c:4d:b0:03:b2:3d:50:51:42:45:74:af:34:a3:37:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0A:6B:C3:C4:80:99:E1:B3:A0:A1:B3:E6:0D:23:BF:6B:FD:D8:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.15.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:82:e0:ae:0d:e1:6f:99:bd:68:dd:c1:b8:05:36:95:9d:3f:
df:2a:b2:9c:01:e7:bc:a3:48:5d:44:29:78:af:0d:26:a1:a2:
99:6d:2c:01:b1:9c:c2:8f:e6:8c:5e:d8:30:74:b2:89:9e:46:
64:98:b3:5f:00:65:d5:67:eb:3b:0b:5d:b2:a6:f5:e3:31:c7:
a7:d0:9d:0e:d0:ca:5b:b2:3c:d4:86:ef:74:81:5a:e1:40:99:
d1:5e:ce:57:af:22:1f:31:c5:b1:51:cd:2d:8d:55:ff:7f:fd:
a2:57:73:cc:0e:ae:d0:5e:0a:f9:25:09:3a:83:cd:08:87:b4:
3d:98:b5:fc:52:45:3e:e5:49:11:23:2e:ce:cc:86:f9:cd:00:
89:ea:e4:fa:ed:ab:71:91:70:2b:2c:d5:a7:3a:bc:e3:9f:57:
24:5a:91:e5:81:0e:aa:e4:65:8d:a9:15:3f:9d:23:d0:b2:26:
16:35:89:45:d9:7e:22:81:dc:72:4a:da:68:58:6d:db:2b:e5:
7b:90:b5:4a:21:cd:2c:a4:bf:38:2f:10:b1:45:a7:79:5c:0a:
0c:44:1b:23:8e:5f:fd:a2:ca:62:a7:57:23:95:ba:24:58:61:
a4:a5:f4:c2:24:c5:8f:0c:56:ce:91:c6:67:43:3a:23:2b:43:
8b:36:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:48 2025 by rpki-client