Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f116d1f1-c04f-32b3-9059-ce5fc374e075.roa
File: f116d1f1-c04f-32b3-9059-ce5fc374e075.roa (raw, json)
Hash identifier: GOpHcl3K0JvfPayvBX2sPe+tLtusEMTw7J+ClnCC2Ok=
Subject key identifier: E8:C9:4D:42:96:71:D2:90:E2:01:50:10:C3:D1:92:34:8F:6E:88:FB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F048B8DA69BCD2FEDC90C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f116d1f1-c04f-32b3-9059-ce5fc374e075.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.44.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:48:b8:da:69:bc:d2:fe:dc:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=c436df24-3b66-4ea2-93e0-7194ebff6caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:4c:cd:29:48:cd:11:ed:00:93:e4:ce:aa:
2e:da:65:44:14:2d:d2:09:ef:c8:40:bd:05:49:2c:
4c:3f:41:ed:65:22:b1:5f:f1:2b:3b:ca:ef:cf:d6:
a1:22:95:02:2d:48:1b:56:55:85:04:cf:52:16:e2:
47:ea:d6:99:33:32:a8:cc:b6:8e:59:4f:c4:18:3b:
63:a1:9a:34:58:ff:a7:51:34:13:7a:2c:4d:98:42:
65:1a:8f:88:7b:30:23:54:21:d5:d2:74:5b:d2:41:
ac:0a:ae:82:aa:dc:d9:dc:85:b5:a5:9d:eb:67:4f:
9b:ed:fc:57:a7:7c:0a:f4:01:05:64:52:59:84:4c:
b7:e3:f5:df:10:2d:49:49:0b:fd:1d:b6:37:bb:ec:
0c:9c:de:99:1c:2a:87:65:0a:2f:20:c2:e9:46:fa:
4a:75:96:d6:d3:04:e0:07:31:65:e0:c7:ea:57:b6:
f2:2e:8d:bb:ef:2b:b1:63:81:27:44:d2:df:df:b8:
fc:ec:5b:2c:65:2f:08:21:66:7b:12:16:fc:23:17:
d9:46:5d:47:af:58:9f:c9:4a:7e:3a:72:27:8c:36:
42:d3:68:65:01:5d:80:69:ba:77:4e:fb:19:09:45:
39:c5:5b:c6:b3:1f:46:1b:90:7c:17:5b:6c:e1:0f:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:4D:42:96:71:D2:90:E2:01:50:10:C3:D1:92:34:8F:6E:88:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f116d1f1-c04f-32b3-9059-ce5fc374e075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.44.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d1:33:7f:30:54:14:4d:e0:96:19:74:10:15:37:43:99:b7:
71:bd:ea:6d:a9:74:d0:60:2b:56:87:45:55:af:36:bf:2c:5b:
ea:54:77:0c:af:04:50:67:c6:3d:16:d7:69:56:9a:e1:b0:f0:
2d:09:33:33:98:15:be:55:7e:2d:9f:60:72:f6:69:98:37:1f:
05:e6:b8:5b:67:a6:33:dd:35:9e:52:8e:a9:dc:e5:9d:95:d5:
9c:ff:54:5f:56:aa:31:57:a8:cf:56:d0:f3:a1:49:e6:ce:cd:
bd:fd:91:f3:d4:8b:b7:ef:75:0f:91:4f:f2:e6:a1:36:c6:69:
0d:f8:cd:74:40:80:a5:45:f9:8c:1e:e0:93:39:88:24:b0:ca:
18:a2:83:55:43:75:93:12:08:33:15:b6:39:fb:7d:d4:03:b3:
ba:80:13:f8:51:c0:fa:1e:59:6f:64:f4:16:4d:cc:28:83:16:
56:4a:6a:05:10:d6:b7:9e:ba:d7:a1:11:78:f5:33:60:b8:39:
d5:f7:8f:a3:8d:0b:2d:17:80:3c:ca:16:6f:ef:3e:50:86:dd:
37:b9:2d:81:31:46:36:1d:13:27:a2:d7:3b:e8:2e:a6:e3:dd:
12:93:6e:52:55:ce:91:9c:53:a3:6b:3b:b9:b3:6f:0a:df:04:
a9:52:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:08 2025 by rpki-client