
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa
File: 9b04685c-198f-3930-8130-bd1a003c13da.roa (raw, json)
Hash identifier: rSTuu1mcJ+XUYKeHq1IJrV3Vln0c4A1lj23tohC6eP0=
Subject key identifier: 60:19:CD:83:07:0B:F4:E0:07:B5:ED:AC:1B:4E:E2:03:98:4E:B0:26
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246D1AF58CF7A178CD8BA38
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 108.11.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:d1:af:58:cf:7a:17:8c:d8:ba:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=ab995118-188d-49b5-8e91-f3ad2c6c4294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:71:75:b5:b8:6d:a4:9d:0e:9f:87:ee:0e:
0a:b2:e5:00:70:ec:d8:b2:34:c5:bc:b1:e2:b3:44:
a5:ea:62:9f:b7:0f:ca:7d:d1:14:73:3d:1c:a5:01:
1c:b8:a1:1c:8f:d8:a5:6a:75:fb:88:34:24:9f:ee:
98:97:0e:d8:21:c7:e1:f6:48:35:b1:c4:43:b4:03:
5d:f3:fa:2d:4b:a4:14:cd:ba:e8:d2:4e:4a:42:ec:
3b:be:a7:fa:67:93:6c:22:eb:50:df:c8:a0:b4:46:
f3:e4:6c:3f:cf:8c:c5:d5:11:97:de:b2:92:bc:22:
bf:54:02:1c:30:6f:14:a5:28:ba:c8:00:bd:28:a6:
ff:10:1a:d9:81:01:11:05:b2:bc:80:4d:fd:b6:08:
a7:02:d6:b5:8f:67:30:32:ba:33:a1:06:a1:89:c4:
4d:b7:b5:f8:eb:ed:9f:a0:57:7a:00:fb:e9:21:ce:
88:12:20:0f:0a:36:c7:05:17:0b:3b:63:a0:90:8b:
2b:d8:b1:90:ac:b1:dd:ef:36:26:a1:cd:d5:27:6c:
43:92:c9:52:9b:9c:f1:c7:23:a1:81:ab:d5:3a:5e:
e9:78:a7:e4:5e:5f:f4:26:a7:4a:f4:d3:d5:5a:db:
84:d7:dd:34:d0:48:82:f7:ee:82:a6:9c:47:91:55:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:19:CD:83:07:0B:F4:E0:07:B5:ED:AC:1B:4E:E2:03:98:4E:B0:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.11.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:11:b1:d5:46:40:81:5f:9d:5c:c1:53:bb:75:af:2a:81:f4:
9c:12:4d:5b:25:bc:f4:8f:7a:cb:7c:4f:0f:df:9f:f9:33:57:
10:3c:39:bf:d6:96:e9:0b:dd:b5:a2:7f:36:ac:5d:31:24:7e:
cd:1f:99:14:50:f2:c2:90:c4:72:b4:fb:0c:c2:6c:2c:3d:09:
6e:fe:18:1f:9a:3c:ec:02:ff:31:49:a9:e3:71:60:90:c4:87:
31:19:7d:9b:0f:50:9c:96:ec:00:da:0c:e3:d3:17:a5:c3:5d:
d5:5b:0f:29:d3:03:f9:a1:ba:9c:ab:08:81:f6:80:95:11:6c:
05:92:45:fe:b1:17:b1:89:50:bb:c3:e9:3b:af:d0:7a:83:04:
29:b4:b5:a2:5f:5a:7e:69:b2:45:e9:38:19:c9:7b:3b:24:93:
e9:42:2b:1a:d6:19:d3:66:e1:97:ea:4c:76:87:f0:ad:7e:fd:
14:e8:70:68:c3:86:67:96:ed:34:73:03:bf:8f:1f:5c:37:2c:
f5:87:2f:a8:a6:76:a3:68:c4:3e:7a:28:09:1e:d8:0c:61:18:
bc:66:f4:0c:9f:b9:89:89:a5:5f:af:b3:61:01:f4:b8:f5:e0:
cc:e9:f9:65:6f:e2:61:1b:12:e4:0a:00:b5:b1:29:e2:24:e6:
32:56:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:52 2025 by rpki-client on console.sobornost.net