Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/31d8b6d9-f6d8-3388-ad47-fc4517f98b6a.roa
File: 31d8b6d9-f6d8-3388-ad47-fc4517f98b6a.roa (raw, json)
Hash identifier: 7iqKkz2FwFaNChaB5lJXru3jbQf7fVArGw1hm3RN8YA=
Subject key identifier: 58:B8:FD:4A:3D:52:EF:89:13:FD:1B:44:4D:E8:10:9A:26:DF:4B:E4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B0FE9B297EF83B00ABEEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/31d8b6d9-f6d8-3388-ad47-fc4517f98b6a.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b0:fe:9b:29:7e:f8:3b:00:ab:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=757faeba-b2d9-4818-b6ea-1f24c381fce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:7a:04:d2:d0:8f:c5:22:6b:62:fd:07:d6:
bf:39:fe:11:71:35:25:9e:f3:e0:be:e8:09:17:da:
ff:85:61:f3:31:69:77:7e:5c:83:08:aa:67:f5:98:
1d:6d:42:75:41:3c:8e:93:7a:ba:36:9d:03:98:a4:
02:69:51:2e:92:56:96:4a:fd:72:10:5e:8d:3d:17:
f6:de:50:73:cc:25:56:f7:39:88:44:67:ca:6a:5c:
59:1f:c6:81:77:89:47:71:1a:a3:c8:df:80:f6:5e:
16:7f:88:12:08:e4:2d:24:da:b2:ac:16:6b:6f:e1:
5a:78:e4:2c:a1:86:fc:1a:96:2c:f3:3e:9c:19:14:
f5:f5:fb:02:e6:46:42:56:e9:00:d1:3d:6d:21:a3:
cb:8e:d5:42:8a:89:7d:13:6a:b2:46:c6:9c:75:39:
32:09:59:d7:66:b5:56:d7:d3:7d:67:83:31:b9:cc:
6b:6e:db:36:34:9d:5b:d7:e3:81:28:01:8e:6a:03:
9b:48:9d:1e:f6:32:03:72:2a:4d:0b:88:e8:d4:69:
d3:50:07:a3:4e:52:e4:e2:9c:57:3a:50:79:67:90:
83:f4:45:de:60:bf:85:8f:46:0e:be:ae:00:30:73:
03:01:3a:8d:ec:f7:dc:ba:76:cc:4b:d3:e2:a0:6d:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B8:FD:4A:3D:52:EF:89:13:FD:1B:44:4D:E8:10:9A:26:DF:4B:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/31d8b6d9-f6d8-3388-ad47-fc4517f98b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ba:45:dc:1a:2a:6b:a7:1f:b6:83:fc:12:9e:ad:b9:a8:f9:
8e:40:1b:c9:2c:3f:75:16:6c:06:23:d2:5e:d2:b2:f5:e3:7b:
69:c5:53:97:af:d7:67:5d:cc:4d:b6:47:e5:81:2a:4b:ab:17:
60:83:70:21:0a:70:4b:f1:5e:b0:69:f7:56:6f:60:87:e6:54:
98:26:a6:2d:07:dc:15:e8:59:82:a0:35:9c:44:b8:1c:c0:fb:
ce:2f:b0:3e:94:ca:6a:36:f5:d9:48:f6:da:2b:6c:8c:1d:89:
6a:16:36:15:a7:19:8b:d9:a4:4a:e2:49:bc:32:06:4b:69:69:
0f:81:e7:91:d0:c9:ae:43:ad:8d:88:cf:9e:e0:6d:5b:42:b4:
77:7f:9c:ca:e1:aa:43:27:77:a1:78:14:84:88:ab:0f:cd:79:
2f:77:e3:48:1e:09:df:07:89:96:55:55:c4:c7:82:74:5c:2a:
52:4a:cd:07:ad:b4:99:cd:cf:19:f4:6f:76:9b:aa:95:90:dd:
4e:d2:77:07:cc:ff:4c:1f:8f:16:7e:73:51:16:f5:ff:45:d8:
19:ef:1e:e7:4f:0b:84:e2:ab:fb:ab:41:80:16:02:a7:f1:82:
82:f2:40:ac:77:4e:ac:1c:9b:60:26:4f:b6:72:98:02:b5:bc:
ad:33:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:03:54 2025 by rpki-client