Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32bdfb3f-2388-3b78-9234-3b775a8f4981.roa
File: 32bdfb3f-2388-3b78-9234-3b775a8f4981.roa (raw, json)
Hash identifier: EeQRUQyCsYwVQww4QFwypTIxj3Q85U8O4HE4NioeQro=
Subject key identifier: 69:A9:3B:6B:F9:2F:DC:25:02:64:60:3E:04:F0:8C:AB:02:B6:CD:6A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28CE0A89CA20FEBB12EE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32bdfb3f-2388-3b78-9234-3b775a8f4981.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 3848
IP address blocks: 70.28.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:ce:0a:89:ca:20:fe:bb:12:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=8d75b617-f888-4dcd-aa43-d7919515c993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:af:0c:28:49:69:50:2d:b8:8a:d2:73:99:
97:88:41:f6:54:7e:aa:5e:4a:af:b5:16:dd:f6:1b:
ca:2f:14:0f:5b:10:2e:a7:86:12:72:d4:f9:d9:6f:
28:c4:74:a2:70:57:30:90:aa:ea:75:9b:99:1a:bd:
d6:de:4b:51:ba:72:f3:99:97:0d:32:c6:78:23:52:
62:f2:e6:34:bf:20:4b:8a:a9:79:a7:a2:51:11:46:
36:72:af:d9:3e:56:df:1c:11:07:ab:2e:39:7b:52:
c4:21:86:87:7d:7d:48:4f:15:32:63:92:0a:64:d6:
6a:0c:23:d8:f6:6b:94:58:0a:b3:fc:c9:68:6b:6e:
b7:8e:0c:73:05:b2:f6:97:e4:53:24:5e:1e:4d:3d:
c4:79:78:22:c2:b9:f2:04:4f:6f:7c:59:79:c0:74:
e1:60:90:4f:60:c1:c4:38:81:59:3c:24:c4:5b:11:
25:60:3b:cd:a5:f1:3c:28:79:55:c8:f1:c0:fb:39:
30:85:76:dd:39:d4:07:cd:13:4a:cc:27:2b:b8:12:
88:08:33:92:88:70:b2:84:ba:fa:7a:34:a6:f7:93:
e3:d6:38:e3:66:c6:7b:69:11:23:60:09:d6:fd:f3:
f8:9c:4d:ff:16:f0:83:1f:f6:67:6f:f0:51:8e:fd:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:3B:6B:F9:2F:DC:25:02:64:60:3E:04:F0:8C:AB:02:B6:CD:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/32bdfb3f-2388-3b78-9234-3b775a8f4981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:30:24:b9:4f:9d:21:51:36:53:fc:0e:9f:db:c1:3f:9f:0b:
d6:f6:93:78:bf:8b:4e:d1:09:94:2a:70:4f:80:5d:b3:65:41:
12:0b:22:1c:33:bf:71:2d:4d:27:82:e8:7e:4d:02:1d:de:9f:
7d:78:9c:86:b1:12:ab:01:b5:23:ce:be:c8:a4:97:93:0d:b4:
97:5b:0c:c1:68:1a:83:3d:1a:b8:e2:4b:77:b0:da:45:09:d1:
05:24:04:ff:7a:6d:a5:6d:e1:b9:49:7a:8f:be:e0:8e:c9:46:
38:a5:16:ed:99:b0:3b:2b:6e:08:15:20:8f:45:df:57:03:0f:
b8:65:eb:56:46:a7:da:68:2b:d7:2f:13:fc:b7:d9:4f:83:28:
59:78:d7:ba:c7:4a:2d:4b:72:69:fb:00:6b:be:0e:b3:dc:c2:
70:0c:c8:e6:d2:23:b6:13:27:70:4a:6e:8b:a0:96:48:11:74:
22:de:0b:67:f1:85:76:d5:a4:cb:84:96:22:a9:7d:aa:ae:25:
28:bf:cb:22:8d:1f:ab:ed:ec:c4:71:98:2a:90:10:16:c6:83:
24:93:7e:b2:cb:74:a4:f9:27:2f:34:0c:db:ad:ae:3f:6f:34:
d4:46:c3:41:8f:14:a9:f7:06:e6:a6:31:1d:57:cf:54:e6:a4:
c0:a2:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:17 2025 by rpki-client