Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d574cb23-ee5d-363a-bd88-2ec88693cd6a.roa
File: d574cb23-ee5d-363a-bd88-2ec88693cd6a.roa (raw, json)
Hash identifier: eIMWldAfQihN/AMrOzrJZqmXU+NUlRdrbjKmkZMisUQ=
Subject key identifier: C7:F3:26:3B:79:9D:2D:E0:82:99:E7:BF:66:0D:CF:F5:D8:EB:15:79
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A654E7E6DF763D5037BE0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d574cb23-ee5d-363a-bd88-2ec88693cd6a.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 32381
IP address blocks: 70.32.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:4e:7e:6d:f7:63:d5:03:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=4cb16cf2-95d3-4b13-925f-84ea45d40f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:82:51:49:5d:2e:37:2c:21:2f:aa:0d:e3:
b4:b1:ea:80:1f:90:45:b9:31:77:f2:61:e4:40:41:
83:6f:8a:5d:1a:59:55:3c:a5:db:7e:07:52:0e:52:
c0:08:6d:00:a4:4b:6a:bc:bd:52:fe:2b:35:59:2e:
b1:4a:e6:6c:37:0b:1a:a3:cd:f9:61:0f:de:cb:b2:
e1:53:05:e0:8f:54:66:40:f1:eb:03:52:73:eb:25:
dd:58:72:62:e3:44:f1:45:2b:db:5b:83:dd:b2:38:
64:53:42:b3:81:dd:3b:57:8d:08:c2:ba:cb:94:57:
6a:99:7a:0c:1d:8f:8a:a8:36:48:29:44:60:03:c4:
c2:02:3f:09:c7:f5:7c:1b:5c:fe:dc:fe:6f:d7:40:
3b:01:9d:df:9b:a6:75:43:e1:e0:91:ec:a2:02:98:
a2:56:b6:bb:96:56:88:7a:26:b7:9d:cc:79:1f:ac:
3a:1a:af:87:24:18:99:25:3e:76:17:c2:84:05:f1:
28:5e:ef:e5:16:45:58:d7:5b:c7:9c:e8:4f:3d:40:
be:73:88:8d:66:c1:f8:ac:29:f6:3d:ce:2e:4e:ad:
23:ca:a9:e7:b0:bc:14:54:18:35:2a:2c:36:6f:04:
dd:20:c8:5b:4b:9d:64:8d:63:0b:78:08:d3:93:68:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:26:3B:79:9D:2D:E0:82:99:E7:BF:66:0D:CF:F5:D8:EB:15:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d574cb23-ee5d-363a-bd88-2ec88693cd6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:fa:8b:a4:44:1b:05:d0:e6:ee:6b:38:95:71:ee:de:b8:df:
3a:1c:52:3e:df:54:7f:9b:30:8d:c6:18:52:e3:46:e1:cb:ef:
bf:34:9b:a9:bc:22:68:ee:73:51:53:d4:60:d2:ba:ee:64:0d:
5c:01:d5:80:b0:55:b0:c8:51:c8:49:df:ab:12:d3:0b:e5:7b:
ab:ba:ce:90:d2:74:7f:ae:2b:0f:1d:8d:9f:ee:95:53:55:e1:
71:e7:6d:db:3f:c4:c6:26:94:cb:2d:84:3b:f6:d7:73:94:35:
8b:ae:82:c9:97:a1:06:ab:23:76:4b:29:dc:a5:2c:8a:8e:f4:
a8:9d:55:3b:22:6c:7f:dc:8c:a1:9f:ed:f6:23:ff:3b:c3:81:
78:e2:ba:35:cd:49:66:40:aa:13:62:f4:29:7f:63:58:bf:c8:
07:e9:be:cd:3f:e1:a4:f4:01:ca:fc:af:05:51:d9:d9:8d:ee:
d8:16:b6:c8:a2:80:51:91:18:e0:25:e0:b0:75:64:01:60:8f:
1c:c0:18:d5:c0:40:ae:7a:84:ce:3e:b6:bb:0e:14:ab:f9:5b:
d5:e5:01:49:2d:0b:d4:f2:b5:d5:af:f6:7f:6d:28:c3:31:57:
78:3f:82:ed:03:aa:e2:96:f4:08:75:f4:28:89:13:e6:bc:36:
02:ba:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:06:01 2025 by rpki-client