Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa
File: 0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa (raw, json)
Hash identifier: CwdivkIQvGY9ZkCeRHEGjofY17H0WN1zHK/IqYH46S0=
Subject key identifier: 69:F7:2F:A5:C3:FC:27:0F:14:2C:34:B2:FB:DD:AE:67:B8:EB:04:E6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0D1FB27CC90532A9B3C780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:1f:b2:7c:c9:05:32:a9:b3:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c55cc4ba-9a13-4b14-a3d1-18fb9a0e0b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:75:9d:ce:74:0c:f7:48:51:14:73:fb:7c:
39:2d:60:ec:03:ae:ef:ce:7b:17:bd:1a:8d:ff:e9:
25:8f:c6:74:9c:b0:57:bc:e9:05:2e:e2:a3:d4:cf:
9c:a6:27:3c:17:a0:8c:1e:eb:43:d7:b8:79:43:fc:
36:13:62:bb:e8:c7:3e:e8:f2:b5:54:61:82:78:82:
6a:e7:bd:c8:82:cd:3a:97:73:3e:55:91:c9:f5:29:
63:55:50:15:ee:75:78:f9:cd:d3:d4:67:9d:6f:d2:
b7:96:19:77:ee:3b:35:79:6b:79:82:cf:95:92:02:
bc:f7:ee:53:09:14:fa:d3:de:cc:83:46:e2:98:92:
28:e7:66:f2:5b:a1:91:01:f8:81:64:68:cf:76:5c:
a2:dd:3f:32:d5:9c:c3:c8:6b:73:bc:19:9a:8d:00:
4f:eb:e4:e2:bc:2c:5f:ed:bb:1a:30:7f:9c:da:d9:
b3:ff:7c:f7:c8:05:0c:9c:f5:40:02:23:41:8e:71:
94:25:3c:0b:ce:24:6b:82:49:9e:b0:77:8c:a1:b1:
70:5d:b9:a9:bd:90:97:73:85:77:bb:85:9b:c9:36:
1a:db:56:cd:1a:c1:48:ce:3f:55:c4:2a:21:c3:05:
69:51:b8:83:c7:96:5f:15:12:89:0e:46:43:6c:96:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F7:2F:A5:C3:FC:27:0F:14:2C:34:B2:FB:DD:AE:67:B8:EB:04:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4c4c47-e1c4-344c-acf8-e4186bbe2fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:9d:dd:68:1a:e6:32:1b:2e:fd:6d:f4:97:fe:ef:4d:02:07:
2d:b2:1f:08:4f:bb:e7:d7:5b:d8:56:59:b8:8e:aa:52:b2:55:
54:1f:53:68:8d:29:94:41:fc:f5:b4:20:65:28:68:19:bf:8f:
60:20:1c:85:40:ac:83:18:ab:32:3a:52:78:51:a1:93:6e:26:
6a:ec:86:61:0b:45:43:1d:e7:30:77:ad:63:8e:49:fc:3b:6a:
a9:22:7a:dc:ab:1f:8a:a5:6b:3e:25:68:08:91:ed:89:aa:f6:
99:dc:a5:1a:e1:fc:0a:fc:42:47:59:f3:5e:fc:4b:10:a3:0b:
10:5b:a3:8b:9d:1a:72:a4:04:57:25:59:08:70:19:cd:51:b8:
69:94:30:67:f0:49:a1:05:fa:b1:b6:e5:53:14:07:b1:ff:a6:
6e:bc:e5:4e:e8:7b:a9:8d:9d:bd:da:d6:15:a9:61:d6:fb:c2:
62:a5:12:16:8b:22:a3:f4:e2:47:e1:92:a3:b8:32:2a:89:a9:
b8:73:73:ec:9d:d4:cc:9e:ad:19:bf:a6:65:33:72:09:8f:72:
f7:0c:47:57:00:ee:7b:ba:87:56:f9:96:31:3f:d2:fa:cb:32:
52:63:c1:46:8c:30:87:40:12:bd:9e:b6:b4:08:e2:95:67:f1:
ec:4b:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:49:09 2025 by rpki-client