Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa
File: 6801e350-c9f9-3400-a69b-b70a48ee4a10.roa (raw, json)
Hash identifier: Yis5FuaLOG3F0anjnfXr1d9/s5i65LIACehgVV7I84s=
Subject key identifier: D7:1B:9D:D5:50:EB:A0:84:1C:40:EB:F5:75:B5:0F:9A:94:34:DE:23
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BC7E491D913A7AD1EB140
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c7:e4:91:d9:13:a7:ad:1e:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b2838c0e-f9f5-4efa-a092-a7f30325afe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:37:ec:fb:46:ea:e6:fa:f4:9e:4e:cb:b3:
1e:5a:36:ab:a9:9c:e6:88:1e:c8:1f:30:99:97:78:
45:15:cd:90:38:22:03:1e:9a:26:c9:0c:fe:f8:df:
6d:ec:bd:42:e9:18:6d:bf:a4:d6:50:8d:48:31:97:
98:18:db:b1:bd:70:23:fa:dc:59:ba:16:c7:50:6f:
b2:08:27:6e:70:63:3d:2e:c1:df:12:a4:f5:59:c4:
b5:45:81:0f:f7:db:7d:ed:52:a2:5a:dd:da:8c:c5:
63:5f:e8:e5:f6:54:40:45:3c:fb:a5:5e:78:95:db:
16:c0:22:9b:65:b4:32:88:34:ed:83:ab:f3:6b:8e:
f2:05:b1:81:7d:e3:dc:eb:9b:34:27:6d:2d:e8:79:
1e:23:95:e2:8f:7f:e5:e9:79:da:cd:52:9c:41:ca:
58:cf:6d:eb:47:d8:04:3b:c7:93:b4:86:ef:b1:48:
b0:59:05:44:fa:60:88:9e:71:b8:c6:3f:3b:64:8d:
69:d0:90:9d:e3:e0:0e:06:f5:ed:f2:2b:c2:ee:8d:
9d:00:d6:e9:c2:eb:ce:aa:e1:eb:87:44:6b:9b:bd:
45:a4:95:d5:a8:e8:64:ae:cf:18:3a:03:7b:bc:84:
2d:c8:d7:7f:cc:bd:27:26:ec:a2:62:de:20:0b:1f:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:9D:D5:50:EB:A0:84:1C:40:EB:F5:75:B5:0F:9A:94:34:DE:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6801e350-c9f9-3400-a69b-b70a48ee4a10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:5a:39:22:2a:8d:ec:cd:27:8d:49:e9:53:1e:1a:6e:f8:ca:
a0:26:10:3b:ff:46:ad:9b:62:87:b9:71:2c:dd:2f:00:26:48:
9d:1c:ac:aa:cb:9c:ac:55:6e:e6:db:97:80:bb:b1:6a:d8:96:
83:6b:c1:c3:44:90:fd:92:6d:0b:65:10:d3:ad:31:cd:fa:32:
fd:38:76:67:3b:9e:52:98:57:58:17:9a:06:02:3b:0f:e4:1f:
f6:e1:d7:57:ab:d0:f4:a8:17:8c:9d:5d:22:c6:f7:54:4b:c4:
a2:b8:c1:de:1f:6d:f9:87:83:8f:04:9c:85:f4:18:65:8e:c0:
e9:5e:9d:04:81:b5:aa:02:20:30:87:d4:c8:1b:35:d5:18:6c:
4e:56:83:31:1c:45:b4:c0:57:63:cd:37:c3:66:4c:f3:5a:00:
9b:f2:0c:9f:44:0f:d0:55:43:8b:07:89:9b:3e:cb:32:9c:71:
d0:fc:4e:98:3e:1d:3c:36:4c:57:3c:ef:e3:41:4f:4e:b7:ef:
0e:7f:18:9f:90:b4:b9:75:b1:09:11:aa:a6:c3:46:f8:6d:64:
26:ff:c4:5b:92:17:d9:ea:03:bc:2a:da:de:50:37:92:00:39:
8f:9f:82:94:b6:75:d3:ab:16:5f:90:35:e9:08:4e:48:ee:86:
6c:f2:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:27:17 2025 by rpki-client