Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa
File: 5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa (raw, json)
Hash identifier: t8bkSL5PIS3jR0vyRN9A5fBVv5U24hO74M0/rTTTijs=
Subject key identifier: E9:77:3C:8E:83:D1:07:3F:03:B4:E9:31:8B:7D:0F:E7:36:F0:9E:A6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094F2B356128ABD76C1FB40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 108.177.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f2:b3:56:12:8a:bd:76:c1:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=626f0824-4fc7-47f2-ba22-2ed4e3f44af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:b4:63:34:6a:43:d5:21:73:71:96:1e:12:
d3:d9:70:b2:c8:e7:fb:2c:c3:f7:ac:79:30:76:ed:
23:53:72:62:35:94:85:34:fa:b4:2f:55:2e:43:87:
e2:d5:aa:15:14:28:86:4e:37:ea:aa:20:aa:b2:b2:
b5:d7:54:d1:97:82:78:83:12:2a:a4:da:56:fa:49:
74:05:ea:fb:49:1f:4a:d2:2b:e1:55:da:82:b7:37:
e8:90:1c:e2:50:a5:f3:d6:e6:34:43:f2:73:4c:1d:
7b:15:9f:c2:cf:fc:c6:b2:fe:ab:2e:05:23:c1:35:
7a:4f:9e:0b:35:64:84:8d:ce:82:13:f1:e1:f1:4b:
03:2d:3c:6c:6d:c5:33:95:f1:99:4f:76:7a:ee:8a:
1b:4e:09:92:6d:61:e5:32:c6:ae:3d:44:8e:59:0c:
52:2a:f9:27:96:13:62:4e:aa:44:40:25:70:30:59:
1b:e5:68:5e:b7:a9:3a:0a:05:f2:b7:3e:48:c9:a4:
b5:e0:e8:9d:79:db:90:4a:0a:67:82:51:d7:2f:0c:
65:ee:60:83:83:e6:6d:4b:b2:24:a4:3f:08:56:79:
fa:21:fc:b4:2e:06:9d:9e:5a:71:0f:82:9f:0a:bb:
88:7d:aa:2d:ac:99:22:2d:86:e8:71:ab:c5:0c:3b:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:3C:8E:83:D1:07:3F:03:B4:E9:31:8B:7D:0F:E7:36:F0:9E:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f8:0c:de:c3:9e:df:f5:bd:bf:1f:92:5f:18:d3:45:d4:e3:
e0:b4:04:70:24:5f:e7:a9:68:5d:ba:18:fb:90:6e:16:f2:70:
a8:ad:e3:ca:01:e1:01:63:e9:23:c4:43:1c:02:50:bd:3e:64:
a1:0c:7b:23:43:4a:00:4d:00:12:19:54:d5:11:ad:af:db:05:
1e:6d:da:02:95:40:01:41:03:40:7c:f8:38:c8:5e:b2:59:44:
13:78:a3:41:57:5a:57:fd:29:41:de:c5:e0:81:28:db:88:f3:
f7:3e:f4:7e:3e:99:b9:e3:cf:c8:00:8b:8f:60:bb:99:a5:84:
e5:e3:31:3f:4d:92:bf:84:c3:f2:6a:e8:25:57:5b:0d:b5:a1:
36:3c:81:df:19:44:51:d1:c5:bd:3f:d1:ae:35:30:43:28:0a:
04:4d:5b:07:ae:4a:a5:d8:ba:a8:81:ab:79:39:d1:52:21:49:
23:8c:03:02:cc:ba:9e:af:0a:74:60:5c:22:bb:81:09:93:47:
73:b8:31:5f:c4:d2:3c:7e:19:97:a6:88:84:6c:59:db:83:ab:
a9:2b:d3:4e:b1:a3:8c:95:1e:a3:5e:03:0e:84:69:2f:d4:db:
f2:d4:4f:be:c5:80:c8:8c:71:35:c3:1c:3e:2c:23:9a:32:3b:
cb:84:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:59:01 2025 by rpki-client