Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
File: b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa (raw, json)
Hash identifier: IsGRtcAAdgS3yHjeAZVU4FRRnLxlD24t4ojh31+e1Y8=
Subject key identifier: BB:C8:6E:07:AB:36:81:74:79:10:80:2B:7E:37:09:D2:AC:A4:30:6F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A7A73EBA10BC59D5F9A40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 108.177.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7a:73:eb:a1:0b:c5:9d:5f:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=4f917b46-587c-4526-8c05-a95fb3503074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:dd:f8:2d:7f:42:07:ac:78:67:13:5e:63:
f1:80:35:fa:83:25:2b:a4:89:c3:7f:70:a4:70:2d:
df:03:46:db:56:b1:da:07:94:9e:ed:9e:bf:a7:2e:
f8:9b:03:12:f3:26:4b:a4:71:1c:f0:0b:9e:90:fa:
ba:55:23:16:67:f9:1c:d2:ef:d9:f9:f2:a6:78:50:
d0:ad:6d:61:cb:96:bf:24:41:98:de:d1:d8:d1:b5:
94:ea:7f:5e:26:8b:4e:29:10:36:a8:63:fe:99:06:
11:d7:d1:80:f7:3a:6c:fd:4d:e8:20:3e:27:2d:39:
61:d9:33:8e:e3:37:81:44:0a:eb:31:d6:a5:8e:7f:
83:b2:65:77:58:69:c3:bf:9b:72:38:64:bf:69:29:
ef:16:99:fc:c5:eb:e8:a1:9f:ae:d9:8b:68:0a:90:
65:12:9f:e8:e4:6d:65:0c:f3:65:7b:4e:0d:41:e1:
e4:80:92:40:9c:eb:1e:bb:28:59:84:99:67:74:75:
5b:e2:fb:d6:17:96:16:ed:43:14:23:38:7e:47:b5:
81:81:04:a6:33:6c:85:6d:9a:aa:8f:58:de:b0:00:
b4:d3:7d:4a:b1:e7:22:62:d2:7c:3f:d4:98:fc:2a:
49:0d:4f:cc:66:2d:8e:cc:40:1b:cd:2d:3e:0e:83:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:6E:07:AB:36:81:74:79:10:80:2B:7E:37:09:D2:AC:A4:30:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:54:8a:6b:66:4c:e6:ca:b0:dc:19:25:03:ef:8f:3d:b3:de:
17:b9:4a:24:a5:d3:bc:f1:d9:9a:86:08:89:9c:9b:66:4f:a1:
fd:2e:ba:60:b1:93:5d:18:03:e6:72:a8:82:2e:a4:fe:b6:d5:
0b:e7:b5:1b:33:61:ea:43:8c:e6:ef:83:41:48:fc:06:2e:54:
b3:56:4c:a6:33:08:18:a5:e6:0e:55:9c:84:b1:10:4c:f4:fc:
29:9d:8f:c1:cd:46:f6:ab:15:c4:4b:4e:8f:4c:95:fc:8b:6c:
70:be:3c:25:78:84:51:2c:ae:ec:9c:87:92:43:fd:be:cd:f4:
9a:fa:38:9e:3a:43:d4:42:09:05:4e:45:29:5a:13:d1:f4:c3:
1a:d3:7c:d4:10:46:06:97:f7:fb:8d:36:88:b2:24:e7:fe:1e:
1a:8e:83:c2:54:cd:bb:af:f8:1c:ca:75:c6:99:2e:fa:37:54:
16:21:d9:28:51:ac:d9:2a:b3:95:dd:f5:65:b2:25:a6:0c:f7:
56:33:f0:7d:82:f1:05:7c:b8:c1:74:92:84:d5:11:ac:40:95:
fd:75:6d:d2:86:21:af:27:e5:c5:5a:cf:1c:97:95:0c:d3:43:
f0:85:d1:37:54:82:fb:64:7a:4a:4a:46:53:ea:f9:da:a5:73:
af:d4:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:46:18 2025 by rpki-client