Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa
File: 48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa (raw, json)
Hash identifier: IPe/9k7dXI3wCC3w3S4kpPVzhts9pUdKer/fhDM+L2w=
Subject key identifier: BF:84:D8:F5:C8:53:18:C7:BE:0F:CA:D8:EE:E3:B2:17:92:F6:4E:F4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094DEB5E9F698A6B6A84000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:de:b5:e9:f6:98:a6:b6:a8:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=0b2f8294-b03f-49bb-b5c1-1eff0029fd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:d8:94:38:e0:b2:9d:f8:af:b2:10:aa:37:
a8:db:62:3e:0c:24:59:84:d5:17:48:ab:50:36:2a:
71:da:6b:76:5d:04:49:a9:76:ae:13:e8:77:d4:62:
68:f4:8f:9c:31:73:50:b9:c1:6b:d0:b9:71:e5:25:
08:a1:dd:83:8a:f9:80:f6:9a:d6:0d:cf:70:cc:73:
3d:34:ed:73:b3:6d:08:a0:92:85:d6:7f:4c:61:e1:
38:05:bd:5e:ed:c1:9c:86:63:e5:26:17:a1:8a:6f:
75:27:4f:18:16:c3:55:2e:c5:8b:8a:3b:ef:69:eb:
85:e1:87:db:79:24:c6:bf:29:5e:0c:eb:47:06:b7:
72:33:70:e9:ca:7d:f8:3e:81:a6:3f:b4:30:29:a7:
a5:a5:e5:24:4a:4d:5e:b2:c5:59:e9:6a:76:ea:53:
a1:1f:8c:83:99:ff:2f:68:e0:f9:60:5f:b9:09:2b:
85:12:e2:f8:ca:38:0f:0d:5d:13:9a:10:a5:d8:f9:
de:97:49:c2:ab:b8:dd:0e:0b:78:37:dc:2d:02:fd:
90:3d:f1:29:c8:ef:dd:7c:2e:ec:f2:55:ab:7a:84:
2b:fd:41:7a:1e:ba:79:81:8a:99:4a:43:61:b8:6d:
68:e7:74:29:73:ba:96:61:e5:0c:d6:90:42:15:61:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:D8:F5:C8:53:18:C7:BE:0F:CA:D8:EE:E3:B2:17:92:F6:4E:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:9e:e2:98:80:32:f8:9d:2b:cc:96:14:c6:c5:74:8e:b7:be:
09:d1:39:6f:36:e4:50:13:a4:28:d8:fb:41:af:a9:ac:c6:59:
c4:21:3c:28:ac:b3:ba:2b:a6:7d:d9:7f:40:86:4f:3d:57:61:
e8:e9:18:d8:9d:33:21:c5:1a:7f:e8:db:23:14:09:78:6f:66:
80:0b:41:76:c0:90:0a:a9:2a:a5:1d:55:9d:f8:e9:d6:9c:39:
c8:d8:4c:89:e6:3a:30:ce:d3:bc:0c:bc:31:6c:1b:b6:69:ab:
87:a9:53:df:73:85:5b:d8:1e:48:c0:65:11:ca:74:d1:7d:8f:
aa:46:8c:a3:3c:46:8c:59:0c:d3:38:9a:23:e6:60:3c:cf:74:
8e:31:32:c2:1e:09:2b:85:1a:5d:f6:7b:1a:da:bc:aa:1f:0d:
9c:9f:7b:f9:4c:73:0b:91:b5:03:53:d3:cd:f9:82:0d:1e:fe:
c4:69:8b:89:c5:c3:a0:27:e7:28:71:fd:00:bc:ca:e2:ed:58:
00:e7:6c:b0:e4:c4:2f:22:a7:c0:20:71:88:2d:ed:ef:33:ab:
0c:8d:3a:c0:74:ed:30:8b:bd:0d:d5:9c:2f:dc:14:e0:29:cd:
3a:62:55:f3:6d:df:f7:30:e4:37:e9:03:ca:9e:c5:6a:11:b6:
8f:23:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:11 2025 by rpki-client