Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
File: 341517c8-40ca-31e7-a95a-b1ec05cfca82.roa (raw, json)
Hash identifier: vGXOiXSGrJVQu25Qv/LALa2fmJ4sgW1egfhitexSo+U=
Subject key identifier: BA:F5:62:15:9B:B4:64:75:A4:AD:2B:ED:B2:F9:7B:5E:1B:E4:5F:5B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246FCCD172B258938F9CF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.28.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:fc:cd:17:2b:25:89:38:f9:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=1d4ff2b8-93f6-49fd-876f-5c679ecf2964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:99:1c:8f:65:66:6e:fa:26:87:b9:2f:a7:
6f:f6:17:7a:8e:13:61:79:e3:6a:2d:f7:0c:7f:d5:
38:58:b1:77:b4:1f:e2:4f:0c:65:81:5c:05:92:7c:
f8:32:05:ca:f6:c4:7a:d2:23:a0:4a:2a:82:7e:77:
7d:5f:61:be:b6:fc:93:f6:8d:a1:20:07:af:7a:ee:
d0:0c:44:ea:f1:4d:6a:c7:c4:7d:cc:12:6c:d8:71:
c1:45:d3:4b:f4:af:c7:2e:94:b7:d8:78:3e:b0:71:
89:64:a4:ba:f9:fb:29:7c:1a:26:d3:c9:2a:25:1b:
4f:3a:e6:43:cf:cc:e1:60:ba:9b:9b:83:10:98:e9:
a8:89:ee:cc:48:46:dd:8a:ce:8a:59:98:38:f0:5e:
cb:20:43:66:18:1c:9b:c8:2a:a3:ed:78:24:43:ab:
70:f3:66:b3:55:e4:80:64:bf:8f:1b:fa:04:bf:bc:
9e:78:21:ba:74:67:87:54:13:4a:4f:eb:4c:75:b5:
73:06:9c:f4:f1:02:49:bd:19:34:36:f4:4a:ff:ce:
ef:1b:27:03:8c:1f:a8:b0:14:9f:0e:bb:1b:94:75:
59:a7:1a:ef:04:53:3f:ea:4a:28:52:67:5f:27:5e:
c1:da:55:58:e5:d5:ef:0c:7b:1b:e1:b8:3a:bc:de:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:62:15:9B:B4:64:75:A4:AD:2B:ED:B2:F9:7B:5E:1B:E4:5F:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341517c8-40ca-31e7-a95a-b1ec05cfca82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:68:1f:23:a6:ae:70:31:ce:12:67:50:9e:2a:1e:48:bc:f1:
75:45:5d:ce:e1:47:1a:32:75:68:00:3a:c3:77:c6:0d:b3:fc:
fa:df:2c:7d:03:6a:9d:96:91:86:c9:17:48:2b:c1:9e:cc:b2:
49:88:87:0c:90:c1:17:75:67:27:00:66:40:0a:fe:09:f9:9d:
4e:60:5e:e6:a1:df:08:48:ee:64:00:89:1b:64:94:d3:0f:8a:
87:22:b0:c1:48:c2:13:4a:ec:d8:10:d7:44:69:b3:6b:22:5d:
0a:24:10:75:ba:42:62:72:d3:b7:ca:57:f3:f7:fa:01:db:1d:
38:54:4f:71:d6:de:82:11:a3:39:2b:c3:3d:eb:9c:ca:6d:ca:
84:79:98:7c:b4:06:4c:a8:c1:a2:93:c1:af:76:ea:06:a7:56:
6c:91:59:b7:0a:03:68:17:dc:e0:e2:70:43:a3:7e:7c:1b:e4:
0a:f0:70:7b:0e:be:78:c9:35:bc:b8:9e:a3:25:e2:a8:78:ce:
a7:42:aa:da:f4:b1:54:7a:36:75:16:14:17:21:92:b5:c4:ff:
20:b6:ab:36:1d:ab:6f:8e:8f:bc:4b:cd:8e:05:c4:9e:3e:14:
16:e1:a7:60:b7:d0:58:b1:66:11:fb:1e:cd:79:de:4d:67:72:
b6:1e:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:26 2025 by rpki-client on console.sobornost.net