Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
File: 6f794266-0944-306d-ad4a-c02c519c347a.roa (raw, json)
Hash identifier: ygGVZZvY6q/U1FiMGaiLUabUwjgBZnL39+fw6Y1dnA4=
Subject key identifier: 39:51:B3:D7:D2:7B:CC:BB:0E:DF:E2:EA:75:BA:CC:F1:D2:02:CE:4A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094ED56BD1A095C94295F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:ed:56:bd:1a:09:5c:94:29:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=7619785f-e6dd-4caa-a65a-57bb2068b03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:28:a3:69:78:68:bd:fb:ae:01:c9:46:f3:
3d:7f:3e:75:d8:69:95:60:c8:60:20:15:41:ce:be:
52:bb:c4:72:ac:04:ca:3e:7a:90:25:41:6e:af:1b:
b8:28:27:1c:25:1f:ef:1d:56:3a:5c:bc:10:77:83:
4b:79:50:58:8e:df:04:c2:60:a9:28:d5:d0:80:67:
a3:fb:46:4c:a1:8d:c3:b7:3e:18:3f:56:dc:65:28:
e7:e0:52:b9:98:0a:ca:90:81:1d:eb:db:78:06:54:
3c:2e:d6:6b:11:09:68:bc:d7:2e:c7:a8:6d:ef:a5:
9b:0d:26:84:7e:78:6c:e0:23:dd:89:12:ab:ba:8c:
d2:6c:50:c6:f1:cc:93:5f:18:6c:cc:a7:4e:59:ea:
ad:3e:45:7e:1b:e3:a8:6d:42:4d:1e:22:5a:93:b4:
3e:39:a1:b8:dd:42:5f:8b:eb:44:4e:02:68:b3:79:
1e:1f:a2:70:5c:8c:1f:5c:10:b4:76:b3:4c:05:9b:
82:33:a4:22:f3:38:29:f6:27:a6:6c:56:7f:9e:ef:
94:00:3f:93:b5:ec:cd:eb:6f:5d:07:1a:c5:5e:39:
ac:e3:02:02:81:c1:af:f0:0a:02:89:68:f7:23:1b:
37:b7:03:fe:da:49:03:6a:37:71:56:c3:39:6e:98:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:B3:D7:D2:7B:CC:BB:0E:DF:E2:EA:75:BA:CC:F1:D2:02:CE:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:4a:5c:b7:b4:e7:4a:da:e4:27:1d:03:45:f5:31:77:97:c5:
28:f4:82:61:03:58:98:bb:5b:46:1c:df:6f:ab:ff:02:fb:3e:
5b:8a:1a:b6:04:d9:99:d4:0b:45:23:d5:bf:95:03:12:d7:54:
b2:a2:31:04:7f:e4:3f:13:da:e4:c3:55:6e:15:af:57:82:1e:
55:a9:9e:9f:74:bf:59:b3:e7:7d:62:53:fa:d2:c6:4c:03:01:
8a:ed:e6:57:bf:95:9b:19:7b:19:cb:af:1e:d6:bc:01:15:a6:
6b:5c:af:f1:73:d1:db:88:bb:ea:b3:54:6c:43:d6:27:a6:7c:
df:81:d7:88:fe:c1:77:39:73:65:cf:cc:24:b4:f7:1f:57:02:
86:a8:e7:1a:4f:0f:42:c6:02:6e:cc:84:36:20:d6:30:a8:e4:
35:cb:e1:4a:75:f0:9f:d0:af:08:ee:c5:1c:3d:6d:68:38:03:
43:27:90:d7:60:cf:51:98:69:e7:c7:51:2c:2d:7e:fa:b0:8e:
f4:b2:66:31:b0:12:85:19:db:84:8f:95:6e:fb:22:f0:48:3b:
f6:de:fa:46:8d:3c:c7:78:d1:9c:72:8d:83:a8:8c:1f:0e:0f:
4f:ec:2f:fe:f1:ae:dc:e9:20:3c:2a:9a:d9:a8:f9:d0:d4:72:
fe:49:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:47:20 2025 by rpki-client