Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d0d04d2-0152-3da9-aa2b-25c3aff3fc17.roa
File: 8d0d04d2-0152-3da9-aa2b-25c3aff3fc17.roa (raw, json)
Hash identifier: ZEOAG5wpFceYDiX8pexMim9H3Xo2BXGpTCodamzOkGc=
Subject key identifier: A1:28:44:42:8D:1C:4F:9E:DE:B5:FC:BF:BD:3A:3D:76:A3:F2:47:60
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094F67503A49F9919D7D8D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d0d04d2-0152-3da9-aa2b-25c3aff3fc17.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 108.177.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f6:75:03:a4:9f:99:19:d7:d8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=c90623e5-1437-4594-9770-ca39f75e2446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:1f:0b:8c:e6:99:34:bd:de:79:58:3e:91:
46:e6:eb:78:25:a3:b1:fc:11:9e:3f:46:9f:84:a0:
0e:6c:37:79:7a:2c:f5:2d:a0:d6:61:7f:50:32:2d:
d4:b1:ae:c8:89:6c:1d:11:c9:02:1d:15:68:34:a4:
e6:99:f5:e7:c3:79:36:1d:be:02:50:80:86:dd:53:
c0:e5:ea:50:46:f2:d9:de:74:46:40:90:90:59:68:
55:76:21:4f:61:6d:ed:89:81:f2:21:b1:73:0c:55:
03:6a:93:1d:a6:79:94:03:ba:fe:65:59:19:10:bb:
54:2a:72:32:e2:ce:04:8d:b1:2a:e9:a1:26:8a:ed:
56:4b:ed:87:40:19:2f:45:53:9d:42:31:8d:ff:77:
b9:a2:24:eb:0b:9c:bd:55:3d:f9:9b:00:3f:10:cc:
db:f9:ef:97:06:55:46:25:b8:28:bd:22:c1:26:33:
0d:47:7a:0b:88:0c:70:fb:96:d2:c8:22:5c:b0:f7:
ef:cc:36:5c:e5:fe:39:4b:34:d8:cc:e0:83:30:bc:
4a:b5:21:65:f0:a7:9a:0a:a9:88:87:a7:54:1a:cd:
30:01:d6:19:d3:3e:b4:b6:f1:4b:1a:0f:48:7f:6e:
f2:35:34:5b:11:dc:90:25:a5:10:88:ad:1c:b2:2d:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:44:42:8D:1C:4F:9E:DE:B5:FC:BF:BD:3A:3D:76:A3:F2:47:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d0d04d2-0152-3da9-aa2b-25c3aff3fc17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:59:49:80:fd:75:4a:e8:47:8e:b9:53:3f:60:35:11:e9:fc:
70:45:6d:a6:10:06:b9:05:d5:1d:88:e3:57:92:03:2d:69:ee:
5b:98:e4:be:af:40:11:ee:1b:7d:68:d8:70:2a:c0:60:5f:5f:
3a:01:09:7d:6c:da:34:85:f3:92:84:d9:d1:63:ee:7b:0b:40:
d1:66:22:90:ef:8b:99:5e:e1:db:60:71:82:62:92:58:01:2c:
91:d7:1e:ea:6a:bf:f8:e0:6d:58:b9:36:10:c6:21:a7:86:2c:
7e:a1:98:e7:c3:ec:ec:0f:8d:5d:75:43:28:3d:5f:85:97:d3:
46:ef:6f:b3:77:3f:aa:a6:31:7b:34:5f:f3:e9:74:47:31:c7:
bc:b8:84:17:f2:7c:11:67:2d:97:86:7d:b3:ec:a3:eb:94:4c:
7f:0f:58:c4:24:2f:0d:c0:83:0f:f5:4d:9d:36:eb:6e:a1:0d:
90:c1:eb:cd:cc:fb:0a:a8:2e:81:03:2d:cc:e1:c3:21:6a:4f:
45:44:94:ab:bf:6b:83:38:10:b3:a2:b7:82:e9:13:fe:ba:58:
39:14:d0:05:ab:28:06:b1:87:5e:87:f9:f6:b6:17:59:7f:c0:
2c:2b:d3:f9:91:20:23:61:f0:59:37:3b:0d:78:00:d8:de:4c:
f0:f2:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:02:03 2025 by rpki-client