Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa
File: ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa (raw, json)
Hash identifier: KAAr2eS+f5QTlcX9U8M1fjNhT/85YB7c4OCZeSp1Zgw=
Subject key identifier: 23:B8:6C:39:9E:C1:45:60:D8:0E:C0:E0:5D:0B:D4:C4:94:45:FF:35
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094EED4EBF1CE039BE4A280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 108.177.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:ee:d4:eb:f1:ce:03:9b:e4:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=63ed2f43-12e8-48ca-8a1b-60b028054ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:6c:cc:c2:7f:f0:b8:92:19:95:4c:59:07:
fa:b3:78:95:18:bb:76:d2:00:bb:7a:7d:88:d1:eb:
ba:cf:2c:fa:fb:cd:77:b8:4a:8f:67:cf:d6:b8:2d:
b7:92:3a:f9:f1:20:f3:9f:a3:f5:ab:2b:3f:bc:3f:
d0:a0:26:c5:51:52:f2:e3:ec:5b:8a:25:49:2f:5a:
bd:9a:43:cc:18:a5:ed:9f:fc:f5:a1:28:2c:ce:ba:
76:99:9e:f1:0b:65:80:b5:bc:b7:c5:7f:61:9a:37:
3e:83:2c:28:5b:3c:f2:f7:4d:cd:d4:58:a0:db:3c:
40:56:f2:6f:0f:0b:ad:fa:29:86:0a:76:4d:cc:d9:
d5:ed:62:cb:17:ef:7b:3e:05:ba:ff:44:a2:fe:a8:
17:24:d4:da:24:e6:9a:fa:5d:bd:48:db:15:e0:53:
dd:6e:14:fc:47:f9:58:44:ee:e1:5a:06:a6:38:eb:
34:9a:59:cb:4d:fb:92:60:3c:01:70:f5:4b:7e:b1:
52:c3:32:73:32:23:50:d9:f3:7f:73:11:9f:03:8d:
ba:b8:6d:f7:3f:cd:4e:d8:62:48:5b:b3:b6:22:1b:
dc:3e:cc:56:e9:27:b7:c4:25:96:3a:85:2f:c9:b1:
44:6a:9d:7f:23:2a:c4:07:6a:e0:b2:6b:81:38:6b:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:6C:39:9E:C1:45:60:D8:0E:C0:E0:5D:0B:D4:C4:94:45:FF:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ecfb5c54-bcda-3f13-a79f-f3128d2c146b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:d3:27:dd:aa:37:33:2a:05:60:c3:78:b9:2e:14:c5:b4:e6:
b8:57:f6:5d:0e:93:96:c2:6f:b0:8f:01:4d:05:12:ca:c4:82:
0d:a2:df:4b:a0:b7:59:33:bf:f7:93:57:ed:ef:28:f8:85:70:
02:a8:34:7e:cb:16:d6:6b:4f:7f:07:ff:0f:18:66:a9:7f:b1:
cc:fe:8c:79:0e:3b:f7:c6:30:0c:fc:f0:3a:9f:ae:dc:eb:b6:
47:c2:11:64:6c:0b:9f:14:c4:8a:f1:62:f4:6a:e7:05:a7:fe:
1c:9e:cc:e7:42:21:ba:34:5a:60:4f:f7:4b:3c:aa:76:6a:f6:
9d:c7:93:06:4c:fc:4f:f0:98:5e:58:43:50:4a:eb:cc:de:8d:
85:e9:d2:e5:4d:e4:4f:aa:ea:04:2b:70:f6:fd:ec:b2:1a:03:
0c:43:2c:d6:ff:3c:f0:a6:30:1f:3a:ea:e1:74:a3:45:76:76:
35:cc:7c:8a:e6:0e:dd:f8:68:b1:4b:f4:28:b1:3a:ca:f6:2a:
5a:21:78:e3:bd:a4:10:78:da:b1:e9:30:71:37:f7:c6:ec:d7:
26:8f:35:00:ea:6a:0c:fe:12:cb:03:c3:cd:4b:0a:cc:b5:39:
19:14:9c:3f:ae:eb:bc:ac:77:58:94:c9:68:78:af:f4:66:ad:
56:39:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:54:51 2025 by rpki-client