Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa
File: 694ba017-8f45-370a-b378-b1d875587774.roa (raw, json)
Hash identifier: c+9vsRRyEQ/aBIl2PMLW2hA70wysqcrUSYA+9hbAu+0=
Subject key identifier: 9A:9B:B4:C7:BE:03:F4:E5:F5:FA:DD:09:19:03:D5:57:8F:0A:E3:E2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C014446404F515E33C980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:01:44:46:40:4f:51:5e:33:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=9cd4b830-696e-4d07-87d1-c3ac5038eb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:99:4f:9b:3d:d7:42:b9:b4:53:42:ba:a4:
ab:d5:90:17:f2:12:88:ca:46:cc:f8:84:e0:62:68:
f1:7f:78:e2:4f:ec:62:e6:5d:9b:14:16:f0:b5:96:
df:3f:b3:b0:3b:4d:02:a8:64:ee:03:08:80:fb:44:
48:25:f4:3c:cb:1b:91:fc:e0:a0:cc:3e:3c:92:a1:
3d:18:de:11:0a:c9:31:e3:1b:e1:64:e2:96:dd:34:
d5:8b:a6:eb:6e:88:9b:51:1e:8f:f7:b8:c1:40:64:
7b:5e:af:fa:17:8c:84:c2:cd:d7:7f:d5:62:b1:fb:
7f:ee:a6:bb:8e:9a:ee:8b:54:de:c1:1c:e3:ee:d6:
18:29:39:91:2f:08:d4:29:42:66:45:cf:1a:26:09:
13:63:8c:96:85:68:52:65:cf:db:e2:db:70:7b:3e:
e3:db:1a:79:3e:dd:5f:00:6e:ea:44:fa:ba:b4:85:
6d:83:42:eb:df:e5:5d:35:50:77:eb:5a:12:b7:d9:
a1:2e:a7:6b:3a:7c:63:d5:b6:cc:e2:2b:46:37:4b:
7f:ce:11:2b:cd:2f:ea:75:98:f3:e6:b7:82:bf:a1:
62:ff:45:55:b0:63:10:0c:da:cd:e5:92:29:03:01:
a7:a1:33:20:71:c8:49:ba:6a:d4:5e:c5:cd:95:fc:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:B4:C7:BE:03:F4:E5:F5:FA:DD:09:19:03:D5:57:8F:0A:E3:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/694ba017-8f45-370a-b378-b1d875587774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:0a:67:48:2d:46:e0:90:ea:32:4e:4b:88:a1:f8:ad:5d:f0:
90:6a:2d:a0:0d:7e:9d:a8:51:e9:40:67:c5:ea:56:d1:45:c9:
81:bf:4f:61:df:11:94:b6:43:20:f0:b1:6d:5b:ed:9f:18:72:
19:04:26:af:48:20:9a:a1:d5:4e:9a:a0:5c:a3:31:57:b6:e9:
18:f1:ac:6e:83:f4:f3:f0:3f:9f:79:05:d0:3a:0c:6f:1c:15:
ff:5f:77:1e:c1:09:e2:74:85:6d:5c:93:99:c7:9e:2d:66:bd:
2e:b5:3d:e8:4b:fd:c5:08:bc:fb:32:7f:0a:75:58:4a:f1:6c:
6a:da:74:3d:c9:1e:e2:ee:4b:45:ba:af:ad:ef:ed:76:fd:ca:
94:83:3b:c2:f7:59:43:da:1f:87:9d:47:9a:0a:07:15:7e:ec:
0b:00:8d:f1:9c:75:9e:ff:f6:a2:11:37:0b:b4:ec:2c:e5:21:
db:b0:26:33:d7:57:1e:5c:a4:59:5f:14:df:8c:72:aa:a6:a4:
d2:46:8b:46:c3:50:52:c9:a8:7f:99:95:18:e4:96:25:c6:84:
31:90:f0:1d:fc:a4:e1:a9:0e:92:8c:fb:b0:a7:e3:1e:71:e8:
f5:fb:a4:09:d1:ae:68:3b:ba:c5:cc:b0:c8:af:ef:97:4c:bc:
9d:96:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:48:33 2025 by rpki-client