Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c5b376-79c2-38d5-9028-3935c65cc14b.roa
File: 06c5b376-79c2-38d5-9028-3935c65cc14b.roa (raw, json)
Hash identifier: Gxdu0IKIQgvDYR6rcPdtFcnkn+mSNj/hZr9EVVGwc8k=
Subject key identifier: 8E:1E:C3:9E:BF:92:EF:C9:F6:92:F1:5B:2C:9F:7C:5C:70:83:26:6D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848BFEBCCFA87A023AD73AB01B0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c5b376-79c2-38d5-9028-3935c65cc14b.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 108.170.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:cc:fa:87:a0:23:ad:73:ab:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=b00eae4c-5c8a-40d2-aa8f-81de8bcef2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:6f:57:33:78:9a:50:bb:bc:e3:94:37:c6:
1f:df:31:e4:41:92:ce:07:4b:4c:e6:49:1d:cb:49:
20:24:1c:e9:71:9a:dd:2c:84:bb:5b:37:40:21:bd:
18:b1:50:44:69:7c:81:72:2a:d5:a8:6d:64:23:be:
51:e7:a0:34:70:d4:43:cf:df:3c:71:68:3c:e5:52:
77:4e:94:a2:7b:89:70:b8:c0:73:b0:17:01:a4:5b:
c6:69:47:f3:a4:56:83:b1:a0:54:c2:90:f0:e4:ce:
e9:0a:08:ef:f2:c4:c7:45:7f:cf:61:ff:7b:e6:d1:
c4:cb:bb:b9:44:be:0d:06:67:ae:8d:8b:be:29:98:
1d:68:39:09:44:1e:9c:39:84:77:1d:19:0a:04:09:
b8:9d:a0:55:bb:49:fb:9a:84:0e:54:80:7b:ab:fd:
e0:5d:18:42:bf:26:10:01:4e:e9:c2:81:cc:68:7b:
65:d2:2c:43:21:b7:99:71:a1:d5:08:fc:0e:c8:6a:
ae:f4:5e:4d:65:76:91:15:4a:bf:be:5a:44:b1:2d:
71:6d:23:fe:b4:cd:6b:77:c8:8c:31:33:d7:7a:ff:
89:55:77:5e:61:6b:ab:71:85:52:03:d1:ca:7f:fc:
4f:06:d1:37:f8:20:ce:1d:b7:27:eb:cd:df:c4:a5:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:C3:9E:BF:92:EF:C9:F6:92:F1:5B:2C:9F:7C:5C:70:83:26:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/06c5b376-79c2-38d5-9028-3935c65cc14b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:03:81:03:05:5a:dd:6a:83:89:d0:16:f7:45:41:15:2c:98:
2b:fb:ad:65:9c:92:19:98:fe:e1:dc:95:34:89:d8:e3:cd:d9:
97:cb:2a:17:4c:53:98:fa:05:0c:f7:b9:f9:ee:75:92:a3:4c:
2b:92:2e:a5:2c:7f:cc:be:d5:cd:11:9f:c9:05:d8:24:5b:1d:
78:fa:b8:6d:fa:cc:af:5e:93:11:14:90:8c:f7:f3:52:11:96:
9a:d6:57:24:48:d6:c1:76:68:e2:ca:48:62:2c:97:d3:0d:82:
23:28:be:7f:33:0e:75:fb:c8:b5:cf:90:a7:90:e0:8d:48:23:
16:59:d8:d7:61:1e:e4:c5:5f:9a:98:99:dd:f3:4e:43:20:9e:
c6:49:e6:4a:33:fc:ea:fe:33:60:09:7f:d4:a4:19:cc:f3:5a:
d6:6d:80:b9:84:9b:ea:ef:6d:dc:76:2a:67:22:27:32:75:ae:
c0:99:24:1f:54:84:f0:7e:c8:8e:1d:48:00:0f:7f:f5:e5:83:
6d:bb:a6:29:13:98:4c:1f:6f:d1:1f:f4:4e:d8:68:b5:f2:1a:
44:38:ba:96:9f:2f:2b:9e:22:8d:31:9a:07:19:f4:51:d1:36:
a4:9a:1b:95:9c:5d:dc:f8:e9:10:44:15:ca:5d:09:22:db:bb:
87:7c:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:12:42 2025 by rpki-client