Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa
File: dbd2d048-07e5-3fee-ae9a-f5488717c295.roa (raw, json)
Hash identifier: O67CCzL7Jou9t+mynP/3KBFBTRmoVBtP79bYS2T72zA=
Subject key identifier: 2C:FE:C1:EB:AD:15:7B:71:E0:02:29:CB:D9:CB:EA:00:3F:83:49:CE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094F0F1F3CE98C6BA65A080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 108.177.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f0:f1:f3:ce:98:c6:ba:65:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=66882c8d-d2bd-48ed-ad1c-93543b610baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6f:a9:c6:06:fc:bf:46:e7:e9:36:e4:9f:c5:
97:53:c5:65:eb:c4:fc:fb:46:ea:9b:cf:af:50:9d:
aa:07:42:7e:f8:57:34:a6:a8:37:31:d6:8f:36:64:
ce:c8:a2:de:86:cb:ea:e5:74:f5:83:c4:62:75:7e:
23:76:6b:31:f4:72:81:73:09:a3:71:e7:53:28:c8:
bf:3d:06:4c:c0:f7:93:fa:c9:8f:0b:20:32:ac:8e:
75:45:b1:10:3e:50:5a:85:36:96:94:7a:6f:d5:a6:
8d:ba:61:00:4a:ef:ef:7c:5e:72:ed:e1:ce:fa:c9:
d7:27:cd:99:9d:db:c8:3d:6d:40:fd:bc:2d:9d:29:
bb:64:47:ac:41:60:ed:81:fb:74:18:7b:6f:b3:9e:
6c:f0:bb:11:5b:42:66:0a:f4:3d:f3:f7:ec:84:4d:
a0:ec:58:40:d0:dc:a4:5f:9e:64:f7:60:ae:bb:fa:
84:a6:a8:91:ae:68:89:c0:5c:17:92:6b:a2:ab:1c:
74:c7:33:78:a3:b8:b1:f6:ba:16:d8:5b:13:c3:b1:
c2:a5:13:89:3d:49:d9:d3:a5:3c:ba:88:e8:12:13:
5a:40:84:e4:7f:2d:64:d1:0c:42:e5:25:62:c7:01:
49:76:bb:1b:61:bf:97:d3:d9:1a:b3:ea:2a:a3:f2:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:C1:EB:AD:15:7B:71:E0:02:29:CB:D9:CB:EA:00:3F:83:49:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbd2d048-07e5-3fee-ae9a-f5488717c295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:2b:67:6f:71:11:79:df:d7:72:a5:10:88:bc:6a:2e:4b:e1:
80:c5:ab:b8:d2:dc:5a:a7:c2:76:7a:96:01:b8:1c:e0:51:8b:
f7:36:43:82:91:77:1f:eb:e1:4c:51:21:6a:31:3f:d8:bb:62:
f7:85:d1:7c:7d:4b:ac:b1:65:10:c7:5e:74:c1:13:ce:b8:7f:
bc:86:b7:ca:88:b6:25:f1:51:28:2a:3c:8a:23:c3:b9:ea:4b:
1b:1b:dd:b6:f1:48:6a:e5:34:2a:e5:e2:63:b5:1a:70:c5:a1:
2e:22:39:b0:57:31:cd:af:f9:34:ae:c3:c4:74:f8:1f:db:bd:
6f:80:65:a6:18:6f:02:24:1d:ef:8d:86:ce:23:4f:83:7f:a8:
c7:4e:1e:6e:36:60:95:d1:e8:35:84:7b:ea:34:a7:9a:b8:c6:
f7:8c:4a:ab:15:91:ca:02:e2:88:8e:c9:0f:ff:a6:bc:89:e5:
b7:38:36:58:b2:07:93:80:c4:97:73:7c:8c:50:ab:07:d4:a1:
24:e7:70:8c:1a:67:53:fd:f8:c1:fe:78:d1:21:88:08:4c:8e:
ee:f5:7c:3c:a7:17:7d:bc:43:ee:c2:1a:39:71:8a:c6:ef:2b:
2f:9a:8e:49:f9:a4:02:a3:b8:ed:04:81:8c:13:62:3c:90:fe:
b6:f0:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:15:10 2025 by rpki-client