Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa
File: d0fa683f-b54a-312d-a1bb-62021883e18a.roa (raw, json)
Hash identifier: ASUcZkRsLjHnIOAMIFU6f+VbyNP6q8ecZM5CfTTAEvc=
Subject key identifier: B0:50:83:84:AB:0D:E8:C0:B0:5C:98:6D:CD:A4:9B:C5:1D:A5:44:C0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848BFEBC8E3BFC753FFC05DF480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 108.170.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c8:e3:bf:c7:53:ff:c0:5d:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=60ff1c6b-4ff9-4c27-bf91-58c2421cad39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:f6:2d:84:b1:87:db:10:44:94:3c:c2:8c:
03:ef:fb:dc:63:2d:55:41:50:30:d3:07:fe:b8:2f:
98:64:ae:bd:bc:6c:cb:7d:40:dc:41:77:03:bd:f8:
a5:86:ce:77:17:02:3a:08:80:f5:13:de:24:70:5f:
41:45:62:31:e6:bd:d8:1e:92:3d:88:3c:6d:67:53:
1d:de:6e:b1:91:aa:9e:ce:67:a8:ef:67:29:50:9b:
8e:74:df:b7:2f:7a:1b:ec:63:0e:8d:7a:4d:b8:e3:
d0:28:22:41:65:5d:45:9a:16:34:8f:d4:f1:0b:88:
47:21:fe:97:e7:3a:64:43:0b:ba:30:28:ff:f0:3f:
8f:5a:e7:13:8f:86:08:96:57:97:2d:d9:6b:86:92:
82:ad:e7:72:07:7e:98:99:03:f0:bc:56:d3:11:62:
ca:a2:0d:4c:84:7f:c9:56:67:c4:c6:8b:30:ad:50:
29:4e:20:c7:76:d1:9c:7a:17:8a:8a:ec:f8:9c:2e:
5e:08:84:63:8f:44:58:75:f8:e1:1a:35:de:3b:03:
fb:06:2b:f0:7b:e7:c3:26:2f:dd:83:c7:e9:d8:8f:
fc:26:71:92:2e:ae:18:81:03:22:d0:bd:81:fb:40:
68:08:a7:07:08:bb:bf:fc:a0:c7:0c:38:29:e8:9d:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:50:83:84:AB:0D:E8:C0:B0:5C:98:6D:CD:A4:9B:C5:1D:A5:44:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:c9:b1:c5:c9:68:c2:f2:c0:41:74:aa:60:29:3c:cb:b6:5a:
fe:9a:db:64:45:63:99:6f:80:6f:e9:e6:7e:85:d9:9f:f2:8c:
8d:2d:8a:28:5b:d3:d3:46:91:67:42:1f:81:e8:07:fb:1d:57:
b8:15:f8:ef:d9:cc:41:f1:1d:fc:b5:55:64:88:f6:b4:3d:e5:
6e:3e:1c:bd:4e:4c:45:ef:3c:2d:60:ed:08:29:0a:53:b6:b9:
2e:b8:e7:f2:53:4e:c9:2c:0c:86:54:47:d9:78:05:b7:33:3f:
4a:f8:aa:67:c3:79:77:d7:2c:c4:bb:55:fc:96:1b:1c:ac:2c:
6b:f0:1c:cf:6b:a4:1d:6a:6a:b2:d5:ff:7a:de:e5:8e:4d:a2:
2d:fb:ef:d6:05:97:9d:ed:c7:5a:f5:52:49:bf:cd:f1:fa:df:
81:b7:a4:05:91:19:3a:f4:cb:a5:ad:ab:1a:e2:fc:da:b5:9f:
86:f9:cc:54:9c:2f:fe:a3:a1:5b:37:d2:fd:c3:29:28:68:13:
fa:cd:42:0a:6a:fe:8c:80:62:2e:28:21:59:b4:7b:18:69:e7:
23:5a:fb:21:e3:54:fc:b2:19:94:96:45:2d:d4:2a:ed:39:b4:
7f:97:31:8e:05:79:69:26:fd:80:f7:ea:d9:4f:02:44:91:e3:
b4:3a:fd:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68jjv8dT/8Bd9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NjBmZjFjNmItNGZmOS00YzI3LWJmOTEtNThjMjQyMWNhZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkD2LYSxh9sQRJQ8wowD7/vcYy1VQVAw0wf+
uC+YZK69vGzLfUDcQXcDvfilhs53FwI6CID1E94kcF9BRWIx5r3YHpI9iDxtZ1Md
3m6xkaqezmeo72cpUJuOdN+3L3ob7GMOjXpNuOPQKCJBZV1FmhY0j9TxC4hHIf6X
5zpkQwu6MCj/8D+PWucTj4YIlleXLdlrhpKCredyB36YmQPwvFbTEWLKog1MhH/J
VmfExoswrVApTiDHdtGceheKiuz4nC5eCIRjj0RYdfjhGjXeOwP7Bivwe+fDJi/d
g8fp2I/8JnGSLq4YgQMi0L2B+0BoCKcHCLu//KDHDDgp6J2uowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBQg4SrDejAsFyYbc2km8UdpUTAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDBmYTY4M2YtYjU0YS0z
MTJkLWExYmItNjIwMjE4ODNlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbJscXJaMLywEF0qmApPMu2Wv6a22RFY5lvgG/p5n6F2Z/yjI0tiihb
09NGkWdCH4HoB/sdV7gV+O/ZzEHxHfy1VWSI9rQ95W4+HL1OTEXvPC1g7QgpClO2
uS645/JTTsksDIZUR9l4BbczP0r4qmfDeXfXLMS7VfyWGxysLGvwHM9rpB1qarLV
/3re5Y5Noi3779YFl53tx1r1Ukm/zfH634G3pAWRGTr0y6Wtqxri/Nq1n4b5zFSc
L/6joVs30v3DKShoE/rNQgpq/oyAYi4oIVm0exhp5yNa+yHjVPyyGZSWRS3UKu05
tH+XMY4FeWkm/YD36tlPAkSR47Q6/Rs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:59:57 2025 by rpki-client