Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa
File: bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa (raw, json)
Hash identifier: DnDmV44mkxqg9OZFxPomyPSCzaETXH03BkeYiWPUB28=
Subject key identifier: 5C:DB:EF:BC:0C:4D:F7:14:91:B5:BC:C6:DA:29:A1:C6:70:3B:97:E4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848BFEBCD2A3F4142DA546EDE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 108.177.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:cd:2a:3f:41:42:da:54:6e:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=dcb1043b-6fb7-4dd0-b283-f69e6584ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:f8:e7:52:dc:37:24:f5:4b:13:93:bb:77:
aa:57:df:83:92:f1:4a:a6:24:b8:16:33:3b:44:50:
af:ec:9b:53:f8:ae:a6:93:85:72:b7:48:6e:1d:01:
c1:fd:77:e0:6e:76:79:fc:12:a8:7e:bc:5d:3b:70:
b5:d8:56:b4:26:08:b0:3f:36:a1:ab:0d:b0:24:24:
ba:3a:5c:b9:fd:82:0a:e5:79:17:fd:5d:03:95:03:
80:87:7c:d1:a9:0a:4a:5a:ce:82:52:29:38:49:60:
ef:9b:57:3c:98:e4:2b:72:3b:23:1a:ae:dd:d8:9d:
ad:7a:cd:2c:9b:52:e1:43:9b:a3:39:1b:0f:4c:c6:
6c:06:c7:a6:c0:53:ff:08:44:85:91:76:61:af:c9:
60:78:52:de:8c:fd:36:62:e1:10:e0:99:02:9f:60:
47:23:31:53:b0:7b:6f:ce:51:48:e5:7d:b2:68:08:
9d:33:f4:5f:01:b7:31:2d:f6:3d:f9:3e:16:7f:54:
05:a6:30:83:57:ce:42:1e:70:a8:d2:75:2c:54:6c:
29:90:b9:c3:fc:5c:b9:61:e0:a1:a4:98:ba:05:68:
ac:67:63:3d:9c:c5:06:7b:b5:6d:7b:02:87:9e:c5:
36:d8:ef:a2:d3:eb:44:ed:ac:48:a3:43:6f:8a:9d:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DB:EF:BC:0C:4D:F7:14:91:B5:BC:C6:DA:29:A1:C6:70:3B:97:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d3:19:5a:c1:8a:b2:15:67:c4:66:d3:72:80:e0:cd:dd:4e:
64:1e:e4:02:57:e3:18:59:03:92:dd:94:17:4f:f2:8c:f1:be:
b3:90:50:b4:38:77:73:c7:9a:ed:0d:93:4c:ed:3a:b2:97:3c:
0f:92:83:86:44:8a:2f:15:d6:ca:b3:ba:f0:4f:e5:52:7f:4f:
17:2c:34:0c:2d:88:1e:2d:1d:2b:fb:c1:49:92:9c:6d:ce:eb:
49:c2:2b:b3:85:ae:57:7e:82:9f:d2:f9:8c:3f:43:b1:58:17:
7d:2c:84:6d:2b:d2:2c:af:e0:02:2a:d2:3a:d9:14:69:05:d1:
fc:18:1b:ec:9f:b6:23:7a:54:86:1b:63:4b:65:6b:b5:f5:5d:
5c:d6:e0:3a:e7:d5:99:62:95:53:52:46:53:49:fa:75:f2:c5:
b1:24:f6:13:a5:e1:77:3b:31:ff:42:20:c9:db:0a:37:af:bd:
81:41:13:82:e0:29:08:36:40:27:f2:cb:22:3e:f9:4d:ff:29:
03:f4:d7:96:75:87:5b:14:f7:ef:c2:a9:1b:5a:62:0b:05:63:
eb:fa:7e:8d:a3:f8:37:49:11:74:3f:3d:9e:dd:2a:2c:7f:4d:
07:35:48:7d:98:98:f2:89:d1:7c:2d:7e:50:27:9d:09:af:8b:
3c:f3:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:48 2025 by rpki-client