Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09179594-6d15-3092-9a21-52f07aacec71.roa
File: 09179594-6d15-3092-9a21-52f07aacec71.roa (raw, json)
Hash identifier: oblgbMhmdFHM/HT8i5Uxvl6MFub4BmELfu6pmMZwfHk=
Subject key identifier: 35:BE:AA:52:2E:63:CA:6E:AD:41:4B:B2:B0:8D:EC:83:99:E9:46:15
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C0B5C78AA8435B6633D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09179594-6d15-3092-9a21-52f07aacec71.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:0b:5c:78:aa:84:35:b6:63:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=0038e0cc-d92b-46e8-9058-65384f579a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:fb:6b:39:d0:26:5d:9f:48:f3:85:d1:b2:
05:44:d5:c1:74:f2:21:71:23:fb:68:4f:f8:ea:9f:
5f:1c:96:28:18:1a:58:79:09:53:d5:8d:0a:8d:59:
67:e4:b0:40:07:8e:0d:02:09:8c:41:04:45:d2:b7:
b9:35:81:42:e1:d0:4e:70:e5:6b:0b:f1:90:7a:06:
39:66:f7:b7:98:ed:e9:79:30:ea:b7:d1:a1:c6:ff:
48:d1:d2:b9:89:ce:e4:7a:49:63:57:9d:a5:a8:09:
5c:f4:9d:3f:65:b3:62:de:7e:ea:a3:bf:fc:dc:da:
d5:92:ca:10:b8:98:94:6c:09:44:10:14:9d:46:78:
ef:6e:85:50:b4:3c:1f:38:31:24:79:ce:8a:e9:84:
05:e7:35:fc:69:4f:6e:ef:54:87:c8:fa:36:45:97:
61:d5:8a:85:f9:4d:ed:41:64:c4:7e:86:03:9e:56:
7b:e3:fa:17:94:00:ab:9c:f8:12:cd:13:af:62:58:
d5:8f:e8:6f:91:ea:69:69:3b:71:a3:5a:0d:ea:31:
a4:d7:e3:1b:34:7f:b9:94:c0:01:7a:f5:df:c8:ff:
75:cc:63:36:6c:12:df:4e:da:8a:6c:84:b0:21:11:
30:b5:1f:14:18:4f:93:e9:fb:43:fb:df:0a:43:3d:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:AA:52:2E:63:CA:6E:AD:41:4B:B2:B0:8D:EC:83:99:E9:46:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/09179594-6d15-3092-9a21-52f07aacec71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:aa:2b:d9:fa:6a:99:cd:4b:5e:32:40:01:a4:44:3c:15:6f:
e2:c2:ee:e8:24:7c:46:98:6f:b7:ee:82:44:0e:00:b0:84:a3:
85:90:96:0d:f1:d1:06:eb:c9:86:8e:4a:93:23:0f:d0:4b:da:
e7:32:56:73:0f:ca:45:45:00:7f:bf:51:2e:e6:b9:30:d1:f4:
57:82:d6:ea:ef:a2:de:31:d7:3b:75:b4:76:ec:d1:4e:8f:c7:
f1:96:62:60:78:83:97:4e:19:9d:84:a6:67:13:65:99:6b:21:
56:ed:0b:f1:11:c6:d6:d6:5c:b4:99:84:02:bb:97:bb:d1:d5:
6b:cd:3e:8c:31:0b:c1:f0:14:9f:fd:76:2d:e6:ad:2c:91:03:
e5:cb:2b:cc:59:bb:c7:96:c5:82:01:d6:08:35:36:d0:bf:bf:
d5:85:79:16:b7:ed:86:a8:6f:12:47:74:a2:a1:b5:ac:8e:38:
2c:7c:d9:59:01:1e:eb:63:3a:31:5a:fe:ef:b3:b4:9c:e7:5a:
ab:df:7e:01:9c:d9:1a:b6:d0:b6:6f:ea:e8:87:f4:57:a0:bd:
60:dd:7f:ed:bf:e6:98:c1:30:f9:01:60:79:41:5f:88:03:d7:
68:3f:90:90:d0:2b:cb:53:54:99:42:9d:d6:29:bb:09:6c:f3:
07:13:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:02:57 2025 by rpki-client