Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
File: c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa (raw, json)
Hash identifier: 4nMaKiy4NupIMex2RAiN7IGYhDkO5EVCaHL3Kg+b4eE=
Subject key identifier: 6C:72:A9:FC:8D:F0:0C:A8:7C:1A:19:22:9E:08:CB:F2:1A:EE:2A:BE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BBDBB95D03A289AC99180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:bd:bb:95:d0:3a:28:9a:c9:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=48818002-7ef1-4ea0-9e29-99d0e894687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:cb:05:6a:b8:17:d9:81:3a:af:62:77:0a:
30:fd:d7:74:66:6a:b9:21:dd:7f:f4:4e:fe:de:b0:
30:22:85:04:67:0c:a6:50:5e:40:db:20:74:68:25:
61:80:9e:4b:00:92:2a:79:e5:b3:34:f3:e5:cd:e6:
28:3f:59:5c:02:9e:2d:76:9b:c9:2c:9b:d9:f6:e9:
18:49:f6:d8:1d:77:55:3e:72:cb:50:5a:92:d8:94:
33:b7:fd:88:10:a4:1d:80:63:e8:7f:a1:0c:e7:c5:
18:c4:f0:54:14:18:83:f3:d3:da:e7:45:25:5c:b8:
26:72:25:7f:05:bb:df:6d:6b:58:2d:6f:1f:30:63:
a4:64:0f:58:36:95:4a:70:ac:2b:5a:c8:48:b6:72:
f7:f9:1e:c0:a8:47:d6:d3:56:32:b6:07:4f:80:9e:
f7:3f:ac:fe:4a:85:c9:05:a3:97:f7:cf:a6:04:48:
d9:dc:c3:ed:e7:0f:fe:16:bf:cf:28:39:9e:de:9c:
b3:40:c2:82:4e:98:ee:5e:f6:28:6f:df:a7:71:76:
a5:a2:40:3a:ac:92:c9:98:ca:18:80:18:ef:4b:2b:
1b:a6:fb:85:3d:b5:2e:35:5f:2c:60:a1:1d:43:81:
fa:6f:39:60:eb:22:d3:62:11:e1:58:5c:e6:6d:92:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:A9:FC:8D:F0:0C:A8:7C:1A:19:22:9E:08:CB:F2:1A:EE:2A:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:65:36:76:58:1e:a8:34:ef:7c:92:a6:45:c0:b5:b6:54:f2:
8a:28:a2:d4:c4:0a:76:b9:ef:04:f8:ab:e4:82:54:13:b2:05:
72:fc:a9:98:3f:12:3a:99:07:0b:19:f3:43:38:90:60:f7:29:
d9:ad:88:4d:e0:70:9b:dc:25:4a:0f:59:eb:d4:90:26:a3:0c:
39:b0:69:d7:f1:b7:ec:f9:34:55:e5:59:ae:db:c4:1d:aa:9c:
f4:56:3f:53:c5:e0:a9:5b:97:25:42:9f:86:dc:9e:21:62:26:
0f:49:58:df:88:be:60:85:a4:db:19:77:e5:4a:61:65:f4:8f:
8c:ab:7b:43:f2:1f:e0:c6:de:26:0f:65:0c:3f:fd:a0:4b:b1:
8d:fd:dd:f6:0b:c4:4e:00:b3:0f:cb:bb:87:30:49:b6:9a:89:
7c:6b:7e:1b:1e:02:c6:17:72:be:81:9f:88:e4:7d:de:1a:a8:
d4:6d:95:0c:1a:51:b2:cd:d1:ee:5b:5f:e7:ea:38:bd:18:96:
fb:b7:f1:09:e9:c6:58:83:d5:0e:e3:67:c8:05:39:8a:34:33:
8f:ac:a6:9e:0f:26:13:71:a2:66:af:35:6d:12:08:ce:eb:87:
bc:69:36:e7:80:6d:d4:16:ff:67:4f:d0:85:a4:0f:ad:bb:49:
c9:fb:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:14 2025 by rpki-client