Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa
File: 7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa (raw, json)
Hash identifier: X+KVePwAgELkxhGiQeO/k0qBMEImdxXZ+qICHco6/ow=
Subject key identifier: 63:00:07:BC:E0:99:CB:BF:4D:28:66:6D:70:BF:F4:6D:58:B4:82:1A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094F5B7DCE787675C3F2A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f5:b7:dc:e7:87:67:5c:3f:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=a37812a8-5b67-49ce-8560-13fbcabfa544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:5f:b7:4c:a8:4c:fd:12:da:9d:a1:2e:34:
9b:ed:11:7b:e8:66:6a:8c:17:ab:a4:f7:d8:ee:87:
ba:29:20:1c:8e:f4:d1:8c:de:ae:c2:b9:88:d0:2b:
dc:ca:32:5e:cb:05:54:55:bc:f3:87:8c:7b:b5:01:
ac:12:af:eb:ae:15:1d:fc:66:bc:69:00:db:e4:73:
d6:94:6e:f2:50:7d:1c:2b:b7:b8:68:c2:31:c7:8f:
88:e4:51:f3:01:de:10:af:40:1c:49:97:52:0f:5e:
d6:34:87:70:7f:97:5c:a2:69:28:25:8c:f4:5c:ad:
f5:47:7e:31:c7:89:3d:8a:b9:83:b3:84:56:fe:ba:
d3:b4:4d:bf:3c:fc:e9:d5:3a:e8:01:58:ce:37:36:
98:0e:80:22:33:95:ee:58:ee:ea:67:8b:3f:51:f8:
ef:59:cc:95:db:70:15:c8:87:2e:89:4e:fa:a3:d8:
94:65:39:a3:b5:20:51:3d:1a:71:53:9e:a1:3e:06:
12:b3:7e:71:3a:1a:47:6e:68:02:bd:fd:3d:d4:b5:
a3:13:1e:9b:1f:cd:a2:72:81:37:9d:ac:76:38:54:
3d:27:b7:fe:52:d0:f6:5f:b3:50:06:72:a4:aa:dd:
c7:78:65:40:02:78:3f:f8:81:b5:86:fd:66:8d:92:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:07:BC:E0:99:CB:BF:4D:28:66:6D:70:BF:F4:6D:58:B4:82:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b2f98ea-4d9d-35e5-95b8-b8ac08799573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:10:07:69:3d:cd:1f:cb:eb:cb:e5:80:66:40:5e:cb:69:0f:
6a:7b:fd:10:e5:ea:dd:19:c9:28:18:25:de:52:2a:e4:ec:29:
23:35:ea:d0:c2:d3:7a:0d:04:7e:77:46:da:33:1a:f4:49:96:
3b:fd:b1:fe:c9:1e:df:8d:77:f6:c2:5c:c8:5f:28:5e:3c:db:
cf:d7:5e:f3:f8:d8:7d:02:b5:e1:85:6a:f0:15:1f:7c:f2:ea:
fc:d7:3c:73:07:f8:6d:be:b7:d4:67:49:8a:4d:be:36:d5:4a:
9c:48:68:44:15:da:6e:33:df:12:c6:4c:51:9d:79:84:c2:9c:
5a:93:0c:a8:c5:79:91:f0:7b:34:fb:50:3b:2d:cb:97:8a:5f:
a4:12:05:99:2e:f7:0a:ca:83:ec:7b:23:46:7b:d0:75:51:f9:
17:e5:49:38:de:56:38:9d:5e:0a:19:fe:32:0c:95:71:42:74:
67:ee:eb:f0:d7:c1:ef:1b:58:69:42:74:6c:44:67:79:7d:26:
91:8d:dd:52:68:a9:18:64:a4:2e:7f:8a:66:d9:f3:58:21:b6:
28:5e:50:95:81:b4:ab:73:be:c8:17:66:7c:85:24:bc:76:b3:
b8:f3:ec:eb:ab:c6:c8:84:b2:d1:72:df:be:a2:75:97:87:07:
39:93:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:00:46 2025 by rpki-client