Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa
File: 10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa (raw, json)
Hash identifier: WqvF6hHzGf0W0/+oGeFmqAvGABA6+jYSGAh9dRiiuuc=
Subject key identifier: 1E:E4:85:5A:0B:9B:BC:28:CA:7A:C1:BE:1B:E3:B2:A0:9E:C4:9D:8E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094D84B55D9B0B11A0425C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:d8:4b:55:d9:b0:b1:1a:04:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=df697452-49d6-4047-b2b5-fa148926e578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:83:b4:a8:36:61:25:87:10:4d:aa:e6:de:
e6:c6:24:da:df:26:2a:23:a5:e1:bd:a9:a8:0b:2e:
1f:ed:ce:71:51:4f:3c:38:0a:d8:56:c7:e2:77:b2:
4a:d7:6c:30:e6:48:69:1b:11:c1:d2:27:a2:07:4e:
6c:be:bd:7c:69:a9:66:e4:f0:a1:47:b0:bf:44:8f:
94:c2:cb:fa:94:f8:b6:e9:94:2a:f9:08:37:12:6c:
b0:7a:9c:c1:c5:c3:96:c6:37:bb:d4:d5:6f:5a:01:
1b:bd:94:9a:e3:e7:63:8b:f9:99:38:49:f1:52:82:
85:a0:9a:de:00:6f:30:2f:e7:29:9e:71:3d:4c:d2:
d1:d0:57:be:5b:2c:d6:8b:bb:bc:b5:cc:74:54:1b:
4a:1f:94:d3:15:01:b8:d8:8f:65:61:a7:97:e1:1f:
57:4f:c8:ce:3a:36:48:3d:db:7d:58:94:fe:4b:84:
2f:6a:4c:c7:8f:fe:cf:04:eb:f4:03:bc:c2:7e:3e:
14:6e:ef:9c:a3:70:ac:8b:36:89:c5:1b:96:c9:9d:
5b:1c:f0:fc:2e:1c:c6:77:9c:ee:8b:da:b2:6e:d3:
5d:99:6b:ab:ff:5f:3f:ce:10:a1:60:9d:dc:7a:89:
e3:5d:94:54:26:6d:40:00:b3:d5:a2:ed:c0:90:8d:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:85:5A:0B:9B:BC:28:CA:7A:C1:BE:1B:E3:B2:A0:9E:C4:9D:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:9a:28:a2:a1:16:f4:41:27:1e:1c:45:fb:ed:b1:8d:22:3f:
35:92:7f:1f:43:73:e7:2f:b9:10:00:5a:fb:69:5e:7b:fa:42:
23:99:89:fa:e8:7b:ce:b2:87:80:50:c0:7f:c1:78:d3:ac:b5:
99:c3:72:4c:cd:12:fe:c1:86:0a:a3:6e:39:0f:74:75:71:2f:
a0:ad:6b:1e:16:7c:98:3a:8d:f5:eb:d6:fe:23:12:d9:14:d0:
cc:0c:d3:d9:c3:16:37:88:e9:b6:e8:79:6e:ce:a3:77:b0:29:
0b:e5:95:89:57:6b:10:a4:84:c9:7e:da:d2:52:cb:78:aa:82:
a5:1f:b2:d4:20:39:51:31:bb:4d:5c:0a:08:f6:61:49:2b:ce:
43:7e:a1:f0:2c:da:3d:eb:95:5b:d3:ea:4a:77:aa:be:9f:2f:
2b:9c:89:e8:7f:05:01:50:6a:ad:69:4e:7c:7a:0e:26:bb:d1:
09:4a:87:d0:dd:21:71:75:f6:24:bb:25:a6:1a:01:a5:c9:d5:
a6:73:e0:05:a1:1d:11:85:3d:8b:ad:43:d9:6c:4c:fe:20:de:
71:15:4b:01:a4:d9:5b:d2:b4:11:fa:07:26:bc:29:3e:18:a0:
3e:98:aa:9b:21:bf:65:01:d3:1a:c5:de:2f:2b:8a:b7:d2:d0:
a8:ba:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:38 2025 by rpki-client