Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa
File: 81e132f5-7153-3263-a573-22214c133437.roa (raw, json)
Hash identifier: Tj32zfeqNpfFNe4kmZr9JjW2I3FCsO9xx2md1aq4uGw=
Subject key identifier: CC:61:8F:23:A6:91:1B:EF:4C:73:D8:47:D6:6D:34:6C:2E:CC:F8:75
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094DDD4F2E0849C96FD3300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:dd:d4:f2:e0:84:9c:96:fd:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=85c93c8b-6e86-4fc1-b598-c59616516a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:cb:36:ad:ea:a8:08:c6:6e:42:76:84:10:
1a:57:fb:4c:ed:d9:2d:dd:26:93:04:dd:de:ff:bc:
f6:be:f0:1b:22:b3:79:b1:bf:28:6c:f4:11:bc:a5:
75:8e:41:ef:42:fe:6b:31:92:85:40:b6:11:b9:db:
7d:5e:72:ab:e2:47:49:99:c9:f5:aa:b8:18:e7:86:
ae:7d:f0:74:0a:28:2e:f1:1f:09:04:f2:a0:82:61:
8a:1d:f7:8f:b4:43:0c:59:43:56:15:00:ff:0d:9e:
47:1f:c4:01:1d:84:79:1b:7c:71:f8:9a:8f:f0:33:
56:3b:c7:6f:28:07:fa:3f:94:20:a6:cd:8d:ce:36:
aa:59:33:17:51:d6:33:66:ea:93:5c:6b:f0:6d:96:
d8:18:62:c2:ce:4b:86:c5:f7:4a:b5:5e:b0:88:c3:
6d:cd:70:d6:c2:44:0d:ec:65:dc:d0:f7:8b:bd:de:
9b:44:98:8d:5f:f7:12:d1:5b:ca:85:3c:e1:96:b4:
e2:2d:06:9b:fe:2c:6b:49:bb:4f:18:6d:d0:19:1e:
aa:ca:59:ee:e8:ef:e9:8c:65:25:ea:e1:ea:79:b2:
d6:4e:d0:63:45:75:9a:0f:69:0b:21:0e:32:f5:e4:
cd:1d:7e:51:25:94:80:9e:67:5b:34:ad:3c:32:33:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:61:8F:23:A6:91:1B:EF:4C:73:D8:47:D6:6D:34:6C:2E:CC:F8:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:72:14:87:75:fb:7b:2f:b6:df:76:d5:6f:59:27:2a:a9:18:
8a:87:9d:ac:43:88:1c:6c:5e:c1:ba:78:0f:63:d0:a0:d2:14:
0d:5d:2c:da:5b:33:f1:ca:c0:05:71:46:0e:6e:5a:9f:37:cc:
29:4a:a1:76:5d:93:0d:24:66:02:3f:7f:fd:17:eb:ca:14:8a:
e5:11:45:32:78:b6:aa:6e:f1:57:4f:8d:84:a9:dd:e3:fa:18:
26:3d:b7:a9:23:21:29:fd:03:d1:f7:7a:58:25:54:85:9c:4d:
be:15:e4:0b:73:ff:ea:9f:ba:41:6e:c1:ac:60:fd:52:09:db:
3c:db:61:c6:9e:cc:b9:3b:ff:c4:aa:79:15:f3:f5:62:1f:bb:
7d:29:c2:f9:c9:54:00:a7:b3:06:f3:3e:5c:cd:f6:ee:35:07:
56:6d:7f:df:09:cd:0f:63:05:93:f3:22:de:ee:42:df:f2:13:
49:a2:c2:14:2d:53:73:81:a8:94:06:cd:3c:24:28:d2:b8:1b:
a3:92:ad:92:7d:e3:f2:b6:15:e2:d1:e0:7a:45:ac:13:aa:8b:
a1:4b:47:6a:e3:54:49:c6:b0:0b:0c:d7:b5:e9:e9:5e:d8:2d:
68:63:47:3c:39:82:54:d9:4b:8e:d2:b7:55:0c:6d:7e:1d:60:
d8:77:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:42 2025 by rpki-client