Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e6f0229-9ba6-3d10-b907-cde70f0ac16f.roa
File: 5e6f0229-9ba6-3d10-b907-cde70f0ac16f.roa (raw, json)
Hash identifier: AtF+x7tHGP8DCrR+MhTPRX7nwzxDCO7whkajMORDnyQ=
Subject key identifier: 84:DB:7F:8F:F9:6E:5A:41:EA:87:88:BB:5C:44:67:B2:26:9B:C5:84
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A655C105F1A92E4CCA140
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e6f0229-9ba6-3d10-b907-cde70f0ac16f.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36040
IP address blocks: 70.32.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:5c:10:5f:1a:92:e4:cc:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=49de08eb-2710-477c-9fc8-66d92afe76bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:e6:c9:95:30:01:bc:f2:6a:6f:e8:f2:b0:
da:ec:25:61:55:c9:31:63:31:09:3b:e2:50:29:5c:
89:3b:76:39:60:f2:7a:30:d7:2b:2a:8d:65:5a:aa:
70:73:85:c6:ba:95:5b:2a:3d:8d:bb:8d:1c:d8:b8:
df:fb:2e:d5:48:36:70:d4:29:af:ad:1c:99:dc:c5:
3a:7d:46:9c:8a:2f:61:64:a6:11:f8:40:aa:7b:ac:
d5:19:4d:c0:3d:0f:29:5d:09:5b:56:91:92:7a:c3:
3a:cf:f6:db:ae:6c:06:ed:59:7b:23:a0:73:35:b8:
8a:d4:dd:32:b4:78:17:19:44:37:24:ae:61:2a:d8:
64:63:37:3d:cc:5b:4c:6b:a0:59:02:0d:4b:9f:e9:
3b:8e:f2:e9:33:7d:49:6c:37:66:04:0b:a5:e3:ba:
5b:2b:93:88:f0:3c:be:40:09:8d:cc:ba:a9:62:4f:
bd:90:b2:6e:c4:15:c7:e8:06:d5:30:b5:f6:9d:b2:
f4:7c:9c:05:f0:be:94:4a:88:3f:ee:5e:e7:3b:c7:
36:d7:70:39:f8:a7:47:89:f6:8a:93:2a:a9:1c:22:
56:cc:2f:ee:ba:25:10:5d:9a:8c:42:ca:38:ef:f7:
34:80:ae:82:07:1b:c8:c2:5c:6d:b3:2f:af:9e:cc:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:7F:8F:F9:6E:5A:41:EA:87:88:BB:5C:44:67:B2:26:9B:C5:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e6f0229-9ba6-3d10-b907-cde70f0ac16f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:93:f7:da:6d:2d:d8:df:6a:d2:94:cf:d0:c9:66:4c:aa:a8:
aa:19:a9:e9:c6:78:25:2b:19:e0:8d:24:14:16:3f:96:af:6f:
33:df:65:2d:f9:9d:a5:cf:85:fb:be:38:0e:84:6a:87:3a:3b:
00:03:e2:d6:4e:91:32:5e:65:30:78:89:65:61:82:a1:6d:99:
36:75:00:e9:43:cb:b4:d8:56:1f:34:0b:c0:0a:41:84:49:86:
5c:db:48:94:d8:96:ad:55:c5:28:26:f1:a6:82:eb:8e:94:30:
be:cb:82:b2:09:f1:63:80:8d:f8:eb:87:17:b5:be:3f:91:93:
22:92:1c:e8:47:d1:9d:73:c5:77:5f:6a:ec:76:88:3e:ef:2e:
20:bc:45:f8:97:09:eb:2e:6b:78:37:14:8d:0c:5b:a6:fc:00:
84:e0:ea:f1:17:a3:cd:7d:ab:49:cb:14:5c:e1:40:8a:e0:33:
b0:8a:27:de:df:6d:fb:0c:43:f0:46:c3:9f:b9:b3:ae:38:1f:
6e:54:c8:7b:c9:b4:1d:0c:14:bc:d9:88:dd:e0:bf:8d:3f:2e:
6a:07:be:8b:c4:40:25:29:66:5f:ab:fd:64:ab:4d:1b:f1:61:
87:84:b3:24:23:e6:34:d8:33:33:bf:60:74:da:00:f3:55:d4:
af:36:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:13 2025 by rpki-client