Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa
File: f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa (raw, json)
Hash identifier: ZeazenNNW8Do8iHPywSsUd88rXUzmkdaIaV35EBoZtg=
Subject key identifier: A9:D2:AA:1E:F3:6E:AE:E4:33:36:91:CC:4B:EC:B1:21:BE:EE:E9:C4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F033A6ED88B6C7DE65E880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 108.22.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:33:a6:ed:88:b6:c7:de:65:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b22cdcb1-0671-45db-ad61-e8a42d055313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:ae:00:7b:4b:f5:93:03:77:9a:7a:e5:aa:
9d:7a:ca:73:0a:e6:bc:82:d8:2f:d5:4a:35:ec:03:
a3:10:e9:f9:5f:72:e0:36:f2:93:16:b6:74:2f:47:
d4:11:7b:2e:cd:4e:3e:86:7f:25:c9:17:c8:58:70:
d2:9b:27:2c:ac:6a:2c:7d:0a:53:42:9a:16:7d:cb:
1a:e7:10:c6:f2:be:83:53:cc:34:1f:b5:be:e3:3c:
4c:10:aa:74:5e:31:82:f2:fc:bb:6b:93:fc:28:42:
9a:6f:b8:06:b2:3b:27:b3:b9:ad:ee:50:e5:9b:fd:
3b:fd:00:d9:87:0a:65:5b:35:5d:7b:80:f5:2e:92:
63:07:e2:96:84:e1:db:30:20:36:0c:16:4f:24:a8:
d8:29:4c:fc:fd:53:f2:08:3d:84:af:ed:c6:0a:17:
8e:67:01:ad:8d:aa:ed:3c:f4:6d:70:d0:e1:ba:f5:
08:36:5c:28:6e:d0:d5:9b:bb:69:5b:ed:30:a6:da:
c0:0a:80:9a:2b:17:9a:97:aa:27:30:be:52:b9:b8:
0e:dc:13:3e:f7:2e:07:28:0f:e1:e7:0c:6e:6c:30:
ec:6e:57:28:e4:82:1b:bc:8f:49:30:05:ea:2a:d3:
40:85:33:bc:31:8c:6c:9a:36:dd:19:0c:f0:4d:55:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:AA:1E:F3:6E:AE:E4:33:36:91:CC:4B:EC:B1:21:BE:EE:E9:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.22.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:08:d9:c1:c5:cb:49:cd:43:b5:f1:90:fb:4a:19:63:72:26:
4f:be:3d:01:fa:c4:77:d6:5d:ca:95:5f:2b:ae:af:f7:6a:fa:
3a:cd:bc:35:d7:f7:7f:63:99:c2:e1:3e:1b:fe:56:d5:0c:07:
0d:58:29:d9:71:7a:bf:a2:09:53:48:69:90:3b:12:05:8d:84:
03:8c:4c:bb:5a:5e:64:65:d1:9c:48:d9:f7:de:75:a8:6e:34:
bb:ee:6c:df:12:be:56:01:9d:41:d7:49:72:6f:64:b5:6a:bf:
f5:71:9b:48:d8:18:2b:21:9b:bd:89:47:ad:81:47:be:86:08:
20:f6:64:21:de:5d:06:ef:30:13:50:8a:57:07:be:8f:95:93:
6e:20:0c:dc:45:47:d9:01:03:71:9d:6b:c1:94:d6:05:b1:b0:
a2:a1:ec:05:6b:eb:aa:a4:db:b7:57:4b:8a:3f:d2:7f:93:5a:
c6:5e:10:bd:84:5a:0a:5c:3a:9e:2d:c5:1e:8d:71:de:fb:ed:
50:eb:f7:b4:bb:32:f9:7e:8b:2e:2e:07:2d:84:59:6b:0b:fa:
3b:5c:a9:b2:87:4a:46:ae:01:ff:45:64:a8:bc:4f:27:a8:ef:
59:65:23:f0:6f:8d:0f:52:59:53:5a:19:65:58:06:f2:d8:95:
67:1b:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:06 2025 by rpki-client