Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa
File: bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa (raw, json)
Hash identifier: gRoOWyculmUw4jqjpN4HLP0SxANvJjsyMOnBrWWd9hE=
Subject key identifier: 3D:65:73:35:F5:DE:3D:9E:6B:D2:BD:CE:F6:D5:80:6B:8B:4A:C2:40
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BDF4330145EEA0E141E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:df:43:30:14:5e:ea:0e:14:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=cc5e9c7c-780c-4194-a9ba-589c38bfb5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:88:b3:cc:60:b3:e8:25:03:4e:01:10:ce:
c5:6b:d6:c6:bd:8b:ed:ad:33:7b:42:ad:ba:be:a3:
cc:d7:bc:93:b6:98:49:72:d5:47:be:d7:6c:ad:27:
cc:11:4f:4c:eb:f2:e5:23:99:ca:1d:e6:c1:1b:fa:
87:f5:09:f4:77:b6:54:df:8d:a4:e9:db:5e:7d:74:
f2:b7:2a:ef:bf:d1:5d:ce:46:14:6b:02:17:81:81:
ea:c1:40:7b:b9:61:99:b6:65:ee:5a:f4:85:e4:10:
61:cd:c2:07:0b:37:37:99:65:e1:b0:3f:22:e8:76:
80:6e:c8:88:75:83:05:1c:67:71:1f:8a:d7:0f:cb:
95:58:6e:f1:17:83:94:58:2e:eb:f4:fa:36:92:38:
b2:6b:6a:3c:f7:33:fb:87:83:3f:91:d9:4c:db:5d:
42:c0:37:5d:36:10:f3:8e:b3:bb:a7:3e:d7:12:01:
d9:4b:7c:8d:d4:1d:ee:b2:ba:5e:7d:ad:47:84:f9:
12:45:0d:8e:00:09:25:c9:3f:b0:8b:2a:5e:fa:a5:
80:4b:71:82:c9:f0:ba:05:16:8b:c2:3f:cd:5c:5b:
18:f2:7d:94:85:0c:ce:c0:c4:a6:11:67:15:84:6a:
a3:66:f1:9e:e4:1a:e9:e0:2b:05:cf:29:a2:8f:bd:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:73:35:F5:DE:3D:9E:6B:D2:BD:CE:F6:D5:80:6B:8B:4A:C2:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bab37b5d-55db-3f57-a0a6-5d33c3ddc98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:44:a0:00:3d:1e:cc:5a:a2:52:65:54:25:13:13:e8:b1:4d:
73:a9:c4:31:3d:0b:ca:03:9f:c7:8b:bf:af:26:b1:b5:68:7a:
10:10:cd:48:88:af:40:92:4e:e3:30:aa:de:c3:38:6d:ad:6f:
0e:84:78:f0:d9:bb:1c:ba:cb:1a:80:45:a7:2e:05:43:8f:cd:
59:69:f4:1f:2e:e7:dc:b4:36:92:70:7e:77:41:db:fa:be:fa:
f5:c9:aa:33:e5:5e:29:9d:62:3f:d9:72:ea:08:0f:4e:7e:b2:
80:95:88:f7:a8:32:61:30:e8:1e:c4:ed:d7:b9:3d:3b:a1:c7:
69:cd:31:9d:df:f0:e9:e1:91:29:4c:8a:fb:9c:72:aa:e1:a9:
c3:f2:09:c7:2e:51:71:5b:04:7c:a8:9a:7d:81:d8:fa:94:fb:
e0:44:94:f8:62:df:5a:d3:06:23:6d:47:0f:55:83:ae:27:91:
64:dd:5f:5f:10:27:58:dc:9e:0c:e9:4f:94:db:bb:36:97:49:
69:a9:94:46:f8:26:ad:d2:ad:29:a4:d6:cf:f0:a1:40:3a:46:
0d:58:0f:ba:eb:39:d3:1c:8a:1c:47:cc:d4:a2:e3:e0:82:ce:
68:19:45:0d:45:4d:0b:87:e3:74:94:04:ca:e4:7c:73:ee:2a:
3f:9c:85:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS99DMBRe6g4UHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
Y2M1ZTljN2MtNzgwYy00MTk0LWE5YmEtNTg5YzM4YmZiNWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymIs8xgs+glA04BEM7Fa9bGvYvtrTN7Qq26
vqPM17yTtphJctVHvtdsrSfMEU9M6/LlI5nKHebBG/qH9Qn0d7ZU342k6dtefXTy
tyrvv9FdzkYUawIXgYHqwUB7uWGZtmXuWvSF5BBhzcIHCzc3mWXhsD8i6HaAbsiI
dYMFHGdxH4rXD8uVWG7xF4OUWC7r9Po2kjiya2o89zP7h4M/kdlM211CwDddNhDz
jrO7pz7XEgHZS3yN1B3usrpefa1HhPkSRQ2OAAklyT+wiype+qWAS3GCyfC6BRaL
wj/NXFsY8n2UhQzOwMSmEWcVhGqjZvGe5Brp4CsFzymij70b8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1lczX13j2ea9K9zvbVgGuLSsJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmFiMzdiNWQtNTVkYi0z
ZjU3LWEwYTYtNWQzM2MzZGRjOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhEoAA9HsxaolJlVCUTE+ixTXOpxDE9C8oDn8eLv68msbVoehAQzUiI
r0CSTuMwqt7DOG2tbw6EePDZuxy6yxqARacuBUOPzVlp9B8u59y0NpJwfndB2/q+
+vXJqjPlXimdYj/ZcuoID05+soCViPeoMmEw6B7E7de5PTuhx2nNMZ3f8OnhkSlM
ivuccqrhqcPyCccuUXFbBHyomn2B2PqU++BElPhi31rTBiNtRw9Vg64nkWTdX18Q
J1jcngzpT5TbuzaXSWmplEb4Jq3SrSmk1s/woUA6Rg1YD7rrOdMcihxHzNSi4+CC
zmgZRQ1FTQuH43SUBMrkfHPuKj+chUo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:25:09 2025 by rpki-client