Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
File: 4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa (raw, json)
Hash identifier: RYtdzervIYiD6AoOTa5RptJWamDYac2grF51JVOpqkU=
Subject key identifier: B0:9D:3B:E0:2B:3C:9D:36:54:B4:D7:CE:B9:44:22:71:52:E4:9F:24
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848BFEBBC374AA3D7E0A5E34500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 108.177.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bc:37:4a:a3:d7:e0:a5:e3:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=4ed58bb4-b220-4ab4-800c-e6ffecb72956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:56:aa:77:46:c0:2c:86:f6:78:b1:34:e7:
13:0e:bc:46:44:97:6b:9d:a4:8b:43:d8:62:fd:7b:
c1:5a:d1:b5:47:e6:79:d6:8b:e4:b2:a3:83:b6:be:
56:de:8e:44:6f:71:3e:80:40:3a:b8:10:90:6b:8b:
80:62:4d:10:10:b1:01:28:ea:54:92:90:9c:dd:90:
86:bf:8a:62:c2:f1:b6:52:bf:25:ac:ef:e7:68:61:
ce:ca:97:6b:e9:e1:d0:5b:34:f2:d9:3a:fd:a2:ad:
ab:cf:6b:e1:4a:2e:e6:02:3c:04:88:fe:e7:e4:89:
e0:74:0d:0d:3e:eb:8e:74:e4:36:34:85:87:0f:27:
76:0e:6a:e1:a2:bb:af:97:48:b6:1d:c7:23:c0:a1:
42:59:67:6b:07:26:53:b0:a3:83:23:ad:90:dd:1d:
3b:38:f4:60:ae:c0:7f:89:0d:d3:a2:40:74:38:ee:
9d:5e:46:3a:cf:45:9a:75:b6:9f:33:c7:15:9e:2e:
49:58:1a:22:48:c1:bc:e5:a3:01:43:9a:78:cb:ef:
87:15:d4:58:49:91:30:00:06:94:97:09:1d:49:5e:
3f:06:79:72:1c:b4:58:0b:56:4a:2d:66:2b:c8:3f:
d7:01:71:5d:60:7f:04:d6:18:ab:4f:61:67:23:01:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:3B:E0:2B:3C:9D:36:54:B4:D7:CE:B9:44:22:71:52:E4:9F:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:22:03:11:8c:67:81:88:f0:ed:8c:86:cd:bc:71:67:e1:05:
75:98:79:fb:e5:f6:5d:f8:31:b5:64:58:ed:38:36:66:c9:92:
89:af:4f:50:1e:9d:22:ca:9d:ad:47:63:a2:2c:4a:c8:be:30:
89:16:07:3d:ae:34:ae:19:ad:1b:24:4f:94:ae:2e:b4:af:6c:
9e:99:4f:38:68:6d:07:9d:fd:9d:5f:91:0b:8c:ae:22:ae:35:
1d:f1:b6:cf:9b:d2:72:c8:b1:81:5f:e6:90:f1:bd:02:69:b9:
5c:95:af:cc:73:d9:a5:c8:c2:27:79:81:96:05:dd:b1:0c:5b:
59:08:7c:4d:c2:5e:eb:e7:4b:3c:a2:74:44:fd:11:d8:a2:7d:
d7:0d:32:6c:e1:1f:01:61:df:e3:77:87:32:9b:8f:04:af:c4:
ed:21:2d:ca:dd:ea:75:67:62:79:46:2b:ce:3b:59:9a:96:48:
c7:cd:08:f4:b8:fd:b8:96:18:32:de:d6:b2:f7:25:f3:ed:23:
9f:7e:f6:6a:4a:53:d8:09:99:f1:39:c9:77:57:71:31:a5:1e:
13:df:77:53:ad:f6:00:4d:c1:c5:e8:2b:c1:37:e1:7b:cd:d3:
b7:6a:0c:67:f0:7c:39:05:56:8c:5f:b6:f3:58:95:c9:9f:fe:
8f:a9:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:45:22 2025 by rpki-client