Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa
File: 521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa (raw, json)
Hash identifier: cym7ySmys7ssiXnsnObajHx9PiA/Mcpdtxdn9D1276s=
Subject key identifier: D8:22:49:89:80:23:F4:BE:46:05:CF:EA:23:82:C6:A9:58:7A:55:F6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094F56BF5AB67BCAEB81A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f5:6b:f5:ab:67:bc:ae:b8:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=4b3dd21f-8ca9-466d-a6cb-f5308c4b2298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:fb:8f:a3:6a:0c:39:57:d7:f4:56:c3:0e:
89:f9:ea:69:f1:4a:ea:b7:a3:53:ac:9f:e8:25:09:
11:f0:3d:c2:05:ff:f4:37:03:24:1b:f4:6e:5e:03:
1c:77:8c:e8:69:c7:e3:14:e5:31:d5:f5:74:d5:d7:
2e:c2:bc:b4:66:b4:34:20:c5:92:3c:4c:d1:51:8b:
34:5b:9a:b6:4a:01:a6:41:56:51:b9:50:f5:16:46:
ea:d4:d0:2a:f9:44:06:bc:bb:7d:ac:43:48:f9:2f:
f5:10:fc:21:03:e4:41:78:9f:87:89:68:37:2a:02:
3d:d9:09:18:fb:2b:3f:90:86:e7:ca:9b:bb:8a:a2:
b4:cf:bb:20:e8:5a:d5:3b:cb:37:ac:ba:86:5d:3f:
9f:43:a2:e5:b4:13:93:b8:29:f3:ce:52:0c:e2:d1:
6c:1c:d4:d5:1b:9b:75:1f:f4:a4:1c:34:ab:95:c9:
4b:9e:6e:5a:ae:88:3d:e2:ca:3f:b4:4c:79:f2:3c:
c5:9f:a0:c3:14:17:fb:71:16:0e:d5:2d:20:57:72:
3f:ab:0d:23:a7:73:ad:54:60:64:1f:d4:c1:7a:c8:
9a:d8:a0:d6:94:a8:17:a7:8b:8b:69:95:81:59:92:
d5:ac:1d:5c:b2:9f:c1:04:a1:01:66:75:41:0a:86:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:22:49:89:80:23:F4:BE:46:05:CF:EA:23:82:C6:A9:58:7A:55:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b1:f6:45:b4:71:6c:5f:5c:d8:ec:62:ab:09:09:e8:0e:9b:
b5:ce:df:99:37:ae:12:c1:20:ab:87:3f:03:ba:06:81:e9:cd:
f2:45:55:d5:8c:8c:cb:df:36:6c:06:0d:69:f5:20:cd:81:f4:
48:57:c8:72:b6:ff:bf:1e:b2:dd:fe:46:2f:be:03:61:1d:d2:
df:ed:55:d5:d6:0f:87:af:20:eb:f9:79:c3:9b:b0:48:b1:a9:
4f:4d:29:9f:e6:50:f9:ea:26:2c:7c:88:d1:8d:d2:f3:21:1d:
86:a6:bf:cf:13:89:5c:24:57:ce:0c:fd:1b:5b:3c:43:8f:9b:
4d:1c:50:8e:68:82:97:54:a5:07:94:1b:8c:0f:9a:59:35:ef:
ab:1f:8d:eb:55:08:6d:1c:11:5c:d2:59:b2:3a:7b:4f:7e:cb:
da:ca:46:c1:3e:57:bc:b9:13:56:fd:1a:58:7a:c0:f4:46:92:
f8:c1:2b:f2:b4:cd:81:6c:b7:e2:e9:9c:20:a3:90:49:25:de:
ef:b3:7f:a3:9e:21:48:71:01:e3:2a:d4:53:8d:07:fd:66:eb:
1c:89:ef:2d:6e:8e:df:ad:54:5e:62:1d:d1:e6:77:ee:23:5e:
49:94:78:55:93:81:20:36:0e:af:a6:de:6b:e2:1c:7d:4f:ff:
24:cf:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:52 2025 by rpki-client