Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa
File: f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa (raw, json)
Hash identifier: yy/P42OxBZ9OtwRtnJp1UAK2K5zJNzCbcLhloscD7yg=
Subject key identifier: 70:B4:CC:29:52:3D:8C:E0:35:2A:32:83:A0:C6:3B:A9:86:0B:9B:82
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E094EE3FDDFFE719D263E980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 396982
IP address blocks: 108.170.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:ee:3f:dd:ff:e7:19:d2:63:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=0482be05-6461-45f1-b0fe-5e3ddc209036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:07:da:d2:ff:83:f0:be:ea:ee:43:73:e3:
18:91:65:ee:87:2a:3e:3d:c9:38:6f:10:05:7d:ee:
2c:c5:31:68:23:96:0d:ab:28:e7:9d:ce:37:c5:b8:
1e:14:08:5f:78:fd:e4:d8:10:63:70:47:35:f8:db:
70:79:65:7b:e8:37:d7:e2:20:7b:0f:63:a0:d0:6d:
cb:8d:e8:20:c6:ba:be:cc:7f:8c:c5:5f:09:e4:20:
0b:85:70:92:9f:21:57:0f:1a:3d:a3:31:21:43:b9:
4d:51:bc:8f:80:b4:f3:cb:8f:13:a1:98:90:a3:98:
d9:62:68:c4:7a:25:d8:54:f5:17:59:27:27:f5:8d:
ec:6a:0f:5a:f7:40:3d:af:89:b7:b1:99:0d:2a:7b:
4d:1a:e6:b4:3f:1e:25:46:ab:ab:6d:f9:ce:0c:4e:
10:1f:b5:9a:6d:ce:6f:ac:4e:e7:53:b9:76:03:54:
8c:76:c1:d9:11:5c:ac:bb:df:91:ea:08:77:d2:7d:
19:2e:c3:eb:28:c9:5c:7b:bc:8f:52:ed:3b:7a:66:
32:4d:c8:c6:ab:88:cc:76:c9:38:dc:79:06:36:bb:
06:eb:b2:5e:29:0f:d9:5a:a8:6d:21:47:e8:b0:fc:
40:6b:5b:b4:f1:4c:77:b2:84:0d:af:2b:03:47:a0:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:CC:29:52:3D:8C:E0:35:2A:32:83:A0:C6:3B:A9:86:0B:9B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70ac09e-f6fd-3f0e-9860-de7c7c57daf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:3b:dd:02:75:ef:a2:8e:e9:26:df:33:96:81:e6:52:e3:e2:
71:bc:3b:67:46:93:2c:8c:25:aa:3d:98:75:01:52:27:d3:20:
1e:37:93:9e:e1:78:65:be:63:e3:65:d0:80:ae:b1:ad:9c:fd:
81:06:e5:ef:4f:e0:79:1e:70:bb:a8:77:0e:89:ca:f0:91:7f:
16:44:2f:7a:19:c7:ff:d2:ef:23:db:f6:58:02:5a:3b:ab:13:
0e:61:e6:4a:ae:78:b4:6c:e2:b0:14:8b:ef:ca:68:d1:3f:3e:
4b:90:76:d4:08:c1:0b:0e:a3:71:3f:51:85:67:e9:e4:2b:f9:
5c:94:1f:90:12:23:61:22:50:f8:94:31:b2:4d:54:dc:38:e2:
91:d4:c4:7e:2e:f0:4e:e0:89:78:80:6a:a8:44:41:43:ad:12:
ed:ef:69:74:c9:c4:79:b4:5c:47:cf:fe:4d:a1:8d:95:f7:62:
f6:bd:05:ed:58:ab:60:1b:13:27:ec:21:4f:06:85:62:de:f2:
ef:4f:30:17:d0:89:68:2e:58:9d:da:64:29:62:84:73:b3:6f:
29:9d:3c:b2:31:46:05:d1:6f:ba:9e:40:b4:7f:eb:b0:7c:28:
72:be:f9:81:72:5d:8e:8e:d2:7e:ba:f8:7f:f8:f0:42:8c:77:
2f:44:d1:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglO4/3f/nGdJj6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
MDQ4MmJlMDUtNjQ2MS00NWYxLWIwZmUtNWUzZGRjMjA5MDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s0H2tL/g/C+6u5Dc+MYkWXuhyo+Pck4bxAF
fe4sxTFoI5YNqyjnnc43xbgeFAhfeP3k2BBjcEc1+NtweWV76DfX4iB7D2Og0G3L
jeggxrq+zH+MxV8J5CALhXCSnyFXDxo9ozEhQ7lNUbyPgLTzy48ToZiQo5jZYmjE
eiXYVPUXWScn9Y3sag9a90A9r4m3sZkNKntNGua0Px4lRqurbfnODE4QH7Wabc5v
rE7nU7l2A1SMdsHZEVysu9+R6gh30n0ZLsPrKMlce7yPUu07emYyTcjGq4jMdsk4
3HkGNrsG67JeKQ/ZWqhtIUfosPxAa1u08Ux3soQNrysDR6BTOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHC0zClSPYzgNSoyg6DGO6mGC5uCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjcwYWMwOWUtZjZmZC0z
ZjBlLTk4NjAtZGU3YzdjNTdkYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK073QJ176KO6SbfM5aB5lLj4nG8O2dGkyyMJao9mHUBUifTIB43k57h
eGW+Y+Nl0ICusa2c/YEG5e9P4HkecLuodw6JyvCRfxZEL3oZx//S7yPb9lgCWjur
Ew5h5kqueLRs4rAUi+/KaNE/PkuQdtQIwQsOo3E/UYVn6eQr+VyUH5ASI2EiUPiU
MbJNVNw44pHUxH4u8E7giXiAaqhEQUOtEu3vaXTJxHm0XEfP/k2hjZX3Yva9Be1Y
q2AbEyfsIU8GhWLe8u9PMBfQiWguWJ3aZClihHOzbymdPLIxRgXRb7qeQLR/67B8
KHK++YFyXY6O0n66+H/48EKMdy9E0Zw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:26 2025 by rpki-client