Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc631e5-4879-3a4a-9694-621c467470e1.roa
File: 7fc631e5-4879-3a4a-9694-621c467470e1.roa (raw, json)
Hash identifier: Pg4mbaLjnBsPiSefcVyviI6fNr9LTOLmN4BeFisYUU4=
Subject key identifier: E6:27:CA:93:50:7C:3C:FE:6E:C8:99:89:FF:54:97:ED:9C:5C:C0:AF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BC34523BF3CE344F3DB1C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc631e5-4879-3a4a-9694-621c467470e1.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 19484
IP address blocks: 70.32.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c3:45:23:bf:3c:e3:44:f3:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=67f9a21b-6da7-41e2-8124-cc6a426b8e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:4f:fd:26:ac:eb:19:a7:bf:f2:43:c2:f7:
8c:eb:ff:4d:e5:c3:65:c6:96:cb:ee:23:7b:5e:b5:
a1:3d:f9:51:38:d0:c1:2a:0e:cc:4e:5d:7f:fd:5d:
10:37:72:03:35:6a:1a:e3:ed:3a:28:19:06:69:fd:
20:78:b0:55:0a:7a:17:47:6e:cc:bf:ab:96:3c:4a:
15:9a:54:c7:54:7e:07:b6:22:4e:5d:05:70:59:7b:
64:a0:c1:ed:b0:0a:1a:6a:80:a4:69:b9:a9:6a:56:
98:8d:4a:90:30:86:06:41:f9:f8:77:d0:e9:8b:33:
ec:e9:ba:2a:e2:bf:53:42:42:1f:8b:48:18:a5:d8:
fb:9b:54:56:89:6a:9f:63:78:19:f5:a0:b5:05:4d:
e7:84:c4:f1:b9:2d:30:a6:36:1d:ce:a1:1d:d8:2e:
c1:c1:3d:57:ca:ac:bb:bd:51:76:c2:22:8d:ab:aa:
8c:52:66:df:9c:0a:64:bf:db:3a:60:ee:53:61:61:
c4:2b:04:d6:f6:6b:72:24:be:13:bb:12:27:d8:a9:
7a:b9:ed:e8:5f:cb:d8:7e:d5:9e:e1:db:2b:2d:1f:
9e:6a:d2:bb:c5:2a:70:eb:4d:6e:2a:e0:78:ef:9c:
1a:5d:95:bd:ea:6d:2d:f5:e6:2f:d1:fa:1f:8c:a6:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:CA:93:50:7C:3C:FE:6E:C8:99:89:FF:54:97:ED:9C:5C:C0:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fc631e5-4879-3a4a-9694-621c467470e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:25:cf:ba:bb:43:3f:01:47:13:2b:d2:5d:d7:02:74:95:81:
4a:11:12:7f:b1:86:e6:4e:4c:94:f3:04:be:44:a5:c4:fa:a1:
0c:29:54:5a:bc:03:e7:9b:04:71:d3:ed:8d:fc:c1:17:af:35:
ab:c9:3d:3d:2b:d8:f3:fa:70:01:41:0d:93:ea:c3:86:84:3e:
91:77:58:88:78:77:20:70:c5:ec:79:f1:26:51:99:e8:7f:70:
62:95:c1:51:e3:4b:8a:5a:7b:a6:16:bd:4e:0d:47:57:fe:e1:
b6:23:af:72:8b:b3:58:75:d6:db:dd:7d:e9:bd:6a:55:f8:15:
a5:52:d5:d2:41:03:13:c0:3a:a8:00:5c:d5:da:e5:e0:6d:99:
31:14:72:a4:76:2d:35:fb:d6:79:e4:3b:0e:4b:45:14:03:c7:
9a:87:b1:3e:b2:63:f3:a1:2d:d9:88:35:5e:ef:64:50:50:18:
ab:f1:4f:51:f6:39:67:94:9d:39:50:3c:4e:ae:ec:b9:e4:c5:
7b:92:f1:22:12:4e:48:23:3b:6c:72:32:8b:49:fb:31:b9:52:
79:71:41:f5:26:72:7e:97:2f:17:97:5e:8d:3c:45:29:26:b9:
de:ff:e0:82:3f:00:13:6c:7d:9d:2b:e4:7b:95:1a:14:ea:4f:
b0:22:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:08:24 2025 by rpki-client