Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58f41d01-0eb2-30d2-84b1-0f7006fec20b.roa
File: 58f41d01-0eb2-30d2-84b1-0f7006fec20b.roa (raw, json)
Hash identifier: aAiNWNd3aZuxcRSUTMr3aa8W/P9YalcES6hVfMP1Fzc=
Subject key identifier: D4:CF:15:14:DA:1C:3C:F2:5E:32:B9:60:46:E4:F1:03:A1:56:6C:BD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7AA2CDC541B6D9E80EA2E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58f41d01-0eb2-30d2-84b1-0f7006fec20b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:2c:dc:54:1b:6d:9e:80:ea:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=194674b7-cffd-4c65-b7eb-43152738516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:9c:12:99:84:e8:42:27:dc:f5:53:42:69:
85:ee:93:60:db:6a:0e:89:39:44:71:63:71:10:ec:
78:9d:08:03:18:6b:6b:74:c0:a2:8e:4f:16:74:ae:
5f:2c:b6:94:b6:12:25:7b:b1:36:db:b4:7d:9e:f5:
87:55:d3:10:69:3e:68:f6:be:fc:b6:57:12:93:78:
4e:c0:58:0b:5c:c8:20:3c:bc:52:d3:cd:e0:46:05:
75:59:2c:cf:21:2b:74:69:78:81:45:71:3e:b3:ef:
46:64:55:6f:f8:96:d6:b4:91:6c:be:0c:65:47:7e:
07:a7:46:be:14:27:8e:a1:34:f2:47:be:20:c1:f4:
ce:ba:ed:0b:1e:40:65:4a:8d:48:ab:ac:04:9c:6f:
c2:21:fe:a3:43:02:f4:08:39:fb:9d:c2:e3:65:f9:
14:a5:52:a2:dd:72:38:83:db:53:ec:1b:3f:0a:81:
51:5e:8d:a6:76:10:06:18:61:ce:23:06:db:aa:c8:
db:2c:32:0c:7d:ba:1b:8e:cb:f9:b8:d8:33:3f:ce:
df:13:a2:fd:11:e8:3c:a6:d3:d2:0c:38:b8:e8:9a:
8f:04:0c:04:9d:21:4d:c7:c0:02:07:7e:1c:5b:90:
be:b1:f3:2b:21:43:49:57:25:aa:88:2c:6f:14:8e:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:15:14:DA:1C:3C:F2:5E:32:B9:60:46:E4:F1:03:A1:56:6C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58f41d01-0eb2-30d2-84b1-0f7006fec20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4a:b1:10:e9:ad:87:66:b7:bb:b4:66:d4:4b:13:58:06:12:
91:0a:27:ad:8a:96:c0:d5:fc:2e:44:ac:81:e0:ef:bb:f4:53:
09:4e:d0:ba:ae:dc:e8:e1:ec:7b:70:65:16:fe:a2:5b:da:e2:
80:46:5b:54:40:78:99:f1:94:50:7b:32:97:f0:dd:84:8c:1d:
c4:c5:dd:1c:99:a5:4c:40:a6:63:0b:fe:8a:bd:ff:b2:3c:85:
67:a2:19:1e:47:a4:43:01:1e:27:2b:81:1b:0f:76:f2:66:d1:
06:8e:7a:b6:2f:c2:4b:23:5f:cd:8f:ec:8d:9b:e8:4a:67:e8:
49:73:7e:a1:aa:d4:af:c6:a9:9c:2c:5e:fe:dd:22:cf:53:66:
50:ba:0c:7e:71:bd:a8:17:04:af:24:68:60:53:4b:5b:28:93:
87:b4:2b:f3:dc:05:e7:b8:07:d6:00:1a:78:8c:08:d0:58:55:
5a:72:ac:ce:d0:a0:17:e5:c0:ba:de:0c:97:40:92:68:ed:65:
f2:1f:6d:52:bc:f4:6f:86:b6:a8:a5:1c:3f:0a:1f:06:ba:5e:
8f:2e:cf:2d:cc:10:d6:46:b9:48:c6:d9:2d:8b:ae:6c:42:49:
59:8c:93:99:d0:12:b4:ec:07:87:cc:29:ad:35:17:2e:ba:67:
a0:a8:7f:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqizcVBttnoDqLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MTk0Njc0YjctY2ZmZC00YzY1LWI3ZWItNDMxNTI3Mzg1MTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijGcEpmE6EIn3PVTQmmF7pNg22oOiTlEcWNx
EOx4nQgDGGtrdMCijk8WdK5fLLaUthIle7E227R9nvWHVdMQaT5o9r78tlcSk3hO
wFgLXMggPLxS083gRgV1WSzPISt0aXiBRXE+s+9GZFVv+JbWtJFsvgxlR34Hp0a+
FCeOoTTyR74gwfTOuu0LHkBlSo1Iq6wEnG/CIf6jQwL0CDn7ncLjZfkUpVKi3XI4
g9tT7Bs/CoFRXo2mdhAGGGHOIwbbqsjbLDIMfbobjsv5uNgzP87fE6L9Eeg8ptPS
DDi46JqPBAwEnSFNx8ACB34cW5C+sfMrIUNJVyWqiCxvFI7uawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTPFRTaHDzyXjK5YEbk8QOhVmy9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNThmNDFkMDEtMGViMi0z
MGQyLTg0YjEtMGY3MDA2ZmVjMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNKsRDprYdmt7u0ZtRLE1gGEpEKJ62KlsDV/C5ErIHg77v0UwlO0Lqu
3Ojh7HtwZRb+olva4oBGW1RAeJnxlFB7Mpfw3YSMHcTF3RyZpUxApmML/oq9/7I8
hWeiGR5HpEMBHicrgRsPdvJm0QaOerYvwksjX82P7I2b6Epn6ElzfqGq1K/GqZws
Xv7dIs9TZlC6DH5xvagXBK8kaGBTS1sok4e0K/PcBee4B9YAGniMCNBYVVpyrM7Q
oBflwLreDJdAkmjtZfIfbVK89G+GtqilHD8KHwa6Xo8uzy3MENZGuUjG2S2LrmxC
SVmMk5nQErTsB4fMKa01Fy66Z6Cof34=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:03:56 2025 by rpki-client