Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b53c87b-0857-3b7b-bd2d-d130908be7e9.roa
File: 6b53c87b-0857-3b7b-bd2d-d130908be7e9.roa (raw, json)
Hash identifier: mJuXhl1WlIQj2kkJxnVJmwswybVfbTYEIfvQ7oY5sEE=
Subject key identifier: 29:5B:FA:03:82:69:8B:7D:93:4D:6D:80:10:D1:D9:1E:1E:E7:E0:A9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A768C17D6F80FFB37FFCE0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b53c87b-0857-3b7b-bd2d-d130908be7e9.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:68:c1:7d:6f:80:ff:b3:7f:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=924df533-a8b8-4870-9e94-fb9695ca5db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:5d:db:8e:c7:21:b3:69:01:74:b3:2f:67:
76:30:4a:12:0e:9e:d3:09:d4:56:dc:1b:3f:6d:ff:
df:40:81:70:e2:cf:01:b6:65:5d:55:17:d8:a0:25:
6f:a0:3b:01:78:22:d9:e6:33:e7:b0:ec:fa:51:0b:
61:0e:1b:14:1c:51:7e:69:6e:6e:90:0f:07:d4:3d:
fe:2b:c4:a4:fa:ba:f3:09:06:58:a0:e6:d1:31:63:
66:7c:21:fe:61:ac:b7:c2:4c:4f:0c:b9:fe:65:49:
57:ff:20:20:c8:5b:b8:b3:c0:ee:c6:21:e2:c9:ed:
71:ac:43:4e:2d:ae:1e:f7:ec:b8:37:49:10:93:7f:
a7:79:21:3d:60:f9:f0:2b:67:55:5f:51:f6:fb:93:
47:a9:e5:3a:8b:54:cf:d9:2d:4a:48:51:14:d8:e7:
22:b4:dd:2e:8e:fc:13:2c:56:de:05:67:7d:d6:e9:
37:f7:e4:92:63:17:9d:24:e9:c0:ec:86:25:6d:29:
35:9a:15:c8:ef:07:a6:55:a7:2c:44:aa:60:b9:a5:
1d:15:3d:b9:38:4b:ec:cd:f0:ab:f0:82:1f:1f:ee:
8e:33:d3:f4:8d:ef:c6:93:77:09:1c:d8:03:52:a1:
54:a2:4c:86:e6:2d:12:16:92:19:b2:49:21:0b:9d:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:FA:03:82:69:8B:7D:93:4D:6D:80:10:D1:D9:1E:1E:E7:E0:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b53c87b-0857-3b7b-bd2d-d130908be7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:3f:20:ea:0d:92:68:9b:1d:c4:1c:32:e8:ee:91:9f:f1:fb:
17:bc:c4:9f:5c:72:6c:29:c0:46:60:2b:99:d0:5e:8e:ce:56:
4b:55:5d:ee:14:f3:54:91:dc:8a:4e:c7:86:d5:23:a7:fd:54:
53:91:18:65:72:f0:71:85:df:38:f6:4f:38:27:c7:ea:09:28:
af:4f:e1:ee:10:92:79:80:62:35:57:b3:a4:1c:43:8b:07:9c:
e5:43:65:97:dd:41:f9:42:67:9f:fe:92:21:ae:b6:35:a2:6f:
54:4d:bc:ce:f8:d8:97:3e:6f:e8:72:ff:6e:fd:7c:58:e9:7c:
48:32:af:8b:8e:fa:4b:39:2b:ed:c7:32:3e:19:d3:16:60:48:
b4:59:d3:46:86:82:c6:5b:ae:c8:54:34:8a:94:28:49:6c:81:
1a:a3:ea:2c:6b:7c:53:bb:db:f2:7e:88:b0:58:3e:7c:8e:f4:
8c:7c:f2:e1:d3:19:d1:01:8b:f9:27:c0:bb:6a:41:70:52:ff:
9b:08:bf:fe:aa:08:11:d3:0e:fc:d5:b0:02:fe:73:77:42:e5:
88:94:9e:77:78:1f:e0:99:c7:2f:b9:b3:45:8d:57:4d:cd:ef:
1e:af:09:1d:9e:f6:5e:8f:0a:0b:e4:d7:4a:91:16:72:01:6f:
16:78:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:09:23 2025 by rpki-client