Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa
File: d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa (raw, json)
Hash identifier: uJopCBjEXqVNqYAe11VYItnLqqj5OyhQp3qvpN+5bcM=
Subject key identifier: 5B:11:EF:53:68:C5:04:5C:57:5C:BF:C8:70:EF:2B:99:36:80:24:CC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094D4678189403CE65172C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:d4:67:81:89:40:3c:e6:51:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=0a66e305-5433-4f59-a6ce-109bf0f4aff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:b4:93:ee:a2:f2:15:1a:a5:8d:c1:ab:47:
65:c1:de:3c:b6:8e:e2:bd:a2:bf:7a:ed:f0:aa:dc:
6d:76:25:64:41:16:42:d8:95:45:2e:c1:3c:78:ca:
69:a8:59:59:14:6c:5e:2b:ef:56:44:6c:ac:7e:dc:
56:b2:88:1b:8d:5d:f4:c0:7e:aa:00:ea:02:3e:67:
bf:6d:9a:3c:77:04:c2:45:49:c8:66:1e:b8:07:2b:
3f:4a:e5:11:2f:ba:92:cc:14:e0:07:dc:9b:fe:ed:
57:b8:07:87:b1:92:a1:37:1a:ea:fe:85:48:c5:b9:
d2:bf:cb:24:ed:2d:8d:8d:d4:86:ed:4d:5f:37:ef:
07:52:bc:ee:7a:28:6e:5e:68:87:09:91:27:66:7a:
97:ba:64:91:e2:c6:c5:3b:17:bf:8b:f1:65:96:00:
a2:ff:20:f0:5e:46:b8:ef:8b:ce:06:82:d0:cd:91:
2f:7d:9b:8a:c2:8e:4f:67:6a:de:9e:cd:66:13:e6:
f7:b7:a9:6a:6f:12:79:a0:51:ed:ac:5c:9a:e0:76:
29:d1:ae:47:3b:fe:a8:2d:dc:3d:9a:f0:5d:e9:cd:
35:41:82:03:d6:0d:78:dd:90:00:f7:e8:ef:72:a6:
d1:b2:4a:72:0f:c6:ac:6d:ec:09:aa:53:6b:c2:ca:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:EF:53:68:C5:04:5C:57:5C:BF:C8:70:EF:2B:99:36:80:24:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d513e5ac-bb80-3ec5-9118-78a41c20aaba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:9f:8f:2f:34:07:fa:9f:c4:7d:a6:7d:00:a5:4a:86:77:1f:
6f:7f:b5:f2:21:04:15:17:73:24:f7:43:d2:b4:a5:5f:e0:15:
e0:a5:0c:59:7f:57:4e:72:71:40:2a:75:09:12:2e:33:f5:1c:
73:d6:81:ef:d0:9a:84:1f:4f:38:1c:a1:20:bf:86:d7:ea:ba:
13:c1:37:91:28:1c:85:a0:96:2a:81:e1:9e:8e:b5:99:18:37:
f7:40:21:14:5c:59:db:3d:e8:9d:c7:09:79:7c:f8:e0:d8:68:
5b:04:87:6b:61:93:e5:6e:f2:07:5e:b3:c7:30:61:5f:b3:b7:
43:ab:4c:a7:13:ea:5e:52:79:1c:29:60:85:9d:ef:b0:fb:c1:
a3:2a:94:4c:36:44:c3:21:4c:88:77:1e:84:c7:3a:00:ae:e5:
e1:fd:c0:a2:7c:5b:26:62:d4:49:d1:35:39:83:a3:60:1a:1b:
5a:de:d6:90:26:96:ce:7e:19:c3:5c:41:96:6c:48:76:bf:4c:
c2:9f:d4:2b:7c:5d:8c:0d:9d:c9:e3:42:75:5d:c4:eb:67:97:
aa:a3:55:be:e2:8f:b3:fb:57:35:21:72:fa:9f:64:51:db:bc:
db:b9:99:3b:4a:3a:5e:54:8a:ad:e6:a2:bc:db:02:73:20:e0:
4c:f2:5a:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglNRngYlAPOZRcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
MGE2NmUzMDUtNTQzMy00ZjU5LWE2Y2UtMTA5YmYwZjRhZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimK0k+6i8hUapY3Bq0dlwd48to7ivaK/eu3w
qtxtdiVkQRZC2JVFLsE8eMppqFlZFGxeK+9WRGysftxWsogbjV30wH6qAOoCPme/
bZo8dwTCRUnIZh64Bys/SuURL7qSzBTgB9yb/u1XuAeHsZKhNxrq/oVIxbnSv8sk
7S2NjdSG7U1fN+8HUrzueihuXmiHCZEnZnqXumSR4sbFOxe/i/FllgCi/yDwXka4
74vOBoLQzZEvfZuKwo5PZ2rens1mE+b3t6lqbxJ5oFHtrFya4HYp0a5HO/6oLdw9
mvBd6c01QYID1g143ZAA9+jvcqbRskpyD8asbewJqlNrwsqp5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsR71NoxQRcV1y/yHDvK5k2gCTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDUxM2U1YWMtYmI4MC0z
ZWM1LTkxMTgtNzhhNDFjMjBhYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWfjy80B/qfxH2mfQClSoZ3H29/tfIhBBUXcyT3Q9K0pV/gFeClDFl/
V05ycUAqdQkSLjP1HHPWge/QmoQfTzgcoSC/htfquhPBN5EoHIWgliqB4Z6OtZkY
N/dAIRRcWds96J3HCXl8+ODYaFsEh2thk+Vu8gdes8cwYV+zt0OrTKcT6l5SeRwp
YIWd77D7waMqlEw2RMMhTIh3HoTHOgCu5eH9wKJ8WyZi1EnRNTmDo2AaG1re1pAm
ls5+GcNcQZZsSHa/TMKf1Ct8XYwNncnjQnVdxOtnl6qjVb7ij7P7VzUhcvqfZFHb
vNu5mTtKOl5Uiq3morzbAnMg4EzyWjs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:23 2025 by rpki-client