Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa
File: 3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa (raw, json)
Hash identifier: cvaXLBQoTNe0fOc9bIaG5UYOZorKyPZDWXeVGAplzok=
Subject key identifier: CA:F1:C8:50:A0:E7:51:93:D5:D4:CC:6F:D7:18:A8:52:30:BB:25:84
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094FACC5772A874F17E6BC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 108.177.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:fa:cc:57:72:a8:74:f1:7e:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=4ac8db99-76aa-4834-9418-efff24b741c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:d9:ae:7e:0d:2f:93:d1:9f:ff:df:a1:05:
27:69:c2:8c:9d:75:9d:b5:41:58:6a:9f:81:ec:04:
09:80:45:1e:1f:2d:8a:5f:ec:30:26:68:0a:13:44:
b9:77:a0:78:6c:be:0a:14:4b:af:84:7e:e4:8e:2a:
9e:40:72:83:48:07:93:27:85:04:6e:57:34:42:7a:
3e:0f:34:ab:56:34:61:00:d9:d5:42:3d:72:e6:97:
19:b2:ec:4d:5f:d3:ec:c1:e2:0a:45:61:a5:d6:b7:
48:d7:18:f4:c6:e4:d2:2e:f6:41:f9:ac:54:14:1e:
3f:77:ba:b7:1e:76:56:65:76:b4:d3:f9:10:33:84:
7b:73:d3:6b:e8:7b:86:7e:fb:33:0c:28:2e:6d:bf:
69:67:2f:2d:53:07:b2:9c:3b:fe:3b:bd:10:b8:da:
61:42:af:96:12:cf:a9:95:c8:76:83:28:3a:67:34:
b8:57:e0:73:b3:f5:85:c4:4d:bc:57:7a:c7:ab:1f:
4d:4e:02:69:f6:96:a1:9a:62:44:e7:20:b6:5f:8e:
09:bb:5c:a1:bf:11:f0:57:b9:35:4c:ac:47:89:60:
70:1f:54:0b:06:42:23:44:48:e5:d8:38:20:d4:15:
0b:59:fc:10:02:bd:9f:e9:52:26:be:d8:d9:41:ba:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:C8:50:A0:E7:51:93:D5:D4:CC:6F:D7:18:A8:52:30:BB:25:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:10:23:25:73:71:a3:99:4e:1c:ec:6e:ab:a2:21:ca:6e:6e:
98:76:2c:92:5c:df:c4:40:ea:ac:37:d9:9a:07:95:d7:5e:58:
d5:50:97:88:d5:29:da:19:fc:4c:e6:91:e0:90:6a:c2:8f:54:
92:b1:94:91:a3:dc:2a:b0:3e:47:af:a4:69:60:6c:06:be:88:
a2:61:d0:01:33:fe:93:09:74:69:e7:80:22:4d:d7:fc:d0:79:
86:ec:52:4a:8f:fc:e6:01:88:bb:ea:f8:8f:f0:a5:d4:a2:24:
0a:6e:a3:30:76:20:ad:43:16:67:40:ad:fc:73:0d:e6:da:35:
ff:c7:d5:61:58:b8:76:42:50:48:63:a8:1c:4d:74:be:bc:3e:
cb:e5:d1:86:00:76:ee:c6:fc:da:53:82:fd:70:0a:dd:89:71:
bc:8e:cf:74:d7:7e:63:fd:47:61:7c:1e:ff:53:ff:09:15:5e:
33:fd:45:e5:9b:9c:aa:3a:1f:70:b5:47:aa:fa:b9:1b:c2:0f:
6b:56:c9:e0:48:d2:48:df:f0:89:7c:d7:cf:59:19:4e:83:f1:
09:a0:08:3c:4f:b5:aa:eb:db:a9:70:ad:1e:fb:16:9f:99:1d:
7c:ca:7f:ea:3a:27:5d:99:b2:02:dd:d4:bf:e8:f6:9f:23:c0:
e1:cb:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:07:17 2025 by rpki-client