Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa
File: 8660f259-74b8-3570-a008-aac9009ba729.roa (raw, json)
Hash identifier: RNM1o0+GBfXleC0WZWkH0OSfUtHXfjiSf74m34KFE30=
Subject key identifier: CE:B9:68:93:95:15:A2:EB:0B:57:D5:DD:3B:BA:D0:1F:70:55:25:53
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BE4DAE40BBF9587E85440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:e4:da:e4:0b:bf:95:87:e8:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=6a4316e5-acee-4237-8777-2d18110be481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:22:98:ba:43:bd:3e:c8:d8:d7:5d:b6:43:
f9:27:4d:74:08:69:6c:4a:fd:76:ce:db:2d:02:dc:
69:88:b9:2d:1c:a3:83:9a:a8:7a:6c:b9:8a:97:88:
6a:3b:28:04:21:66:06:43:f1:2a:66:4d:ef:0e:bc:
c4:c3:30:ba:d3:cd:33:6e:3b:3e:f4:2b:92:be:f4:
04:4b:e5:d1:5c:b5:e7:3e:dc:4f:87:f7:5c:b0:ed:
e6:34:37:d4:f8:51:28:96:5d:6f:b6:1b:b2:6f:13:
ac:de:cf:cf:02:21:84:12:d8:b9:9b:be:fe:a1:16:
ec:44:db:26:f4:5f:de:be:4e:8a:72:9e:4d:df:60:
9f:b8:3d:0f:b5:21:b4:3b:dc:3e:26:b6:3d:80:bf:
ae:68:aa:5e:ca:74:21:3a:86:61:01:e2:db:57:8a:
11:cf:87:21:c0:06:0c:ab:05:d6:24:ad:bd:6a:6f:
76:64:0a:be:79:fd:0a:7a:25:42:d2:49:a7:5b:16:
b6:11:b9:8b:83:7f:6e:2f:93:67:9a:ae:db:35:81:
21:4f:a6:29:68:45:2d:e1:c8:ee:81:59:bc:7a:5b:
1f:56:3b:7d:79:f6:6c:ce:15:c6:5a:3b:99:b0:55:
10:8f:51:04:bd:f6:8b:b5:da:60:f0:44:bc:3a:19:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:68:93:95:15:A2:EB:0B:57:D5:DD:3B:BA:D0:1F:70:55:25:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8660f259-74b8-3570-a008-aac9009ba729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:a2:b7:f6:90:d9:a9:58:ad:ed:00:32:19:c5:62:2b:7a:05:
ee:1d:cd:44:f8:59:07:4f:e6:53:d1:ea:0e:17:50:72:f1:6c:
9d:aa:69:af:87:dc:45:0a:79:9e:72:28:f6:c0:a6:40:1c:7b:
d6:a6:ee:61:09:40:16:a2:d4:46:f7:c5:2a:23:bb:cc:7e:c2:
1e:dc:19:90:89:24:dd:86:9f:a1:73:17:eb:97:5f:72:2a:55:
d9:6d:0f:1c:3f:04:9c:d8:fd:ac:df:cb:e5:ac:9f:cf:01:dd:
4f:03:17:ea:a2:6c:ba:71:ac:0e:e2:15:9c:53:23:48:67:c0:
18:ea:96:82:68:05:fd:66:19:4e:72:41:7e:b0:78:85:41:8f:
12:75:20:57:0d:7b:24:36:06:41:c2:3a:41:a9:98:cb:c8:d8:
b8:44:27:d1:d9:cf:d0:87:9a:30:57:b7:d4:98:a0:ea:0a:f3:
a1:37:e1:25:4a:70:8d:62:61:9b:27:82:15:66:7d:4d:0c:d3:
ea:88:83:13:43:4f:13:e3:d5:2c:fd:10:c3:f4:25:c8:d0:9f:
29:20:1b:f9:23:bf:ce:35:2f:0a:b1:fe:79:a7:5f:25:9e:45:
69:2d:d7:dc:d3:c1:39:83:07:c0:60:3a:f5:ba:b3:ce:fe:ad:
22:77:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:45:21 2025 by rpki-client