Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
File: 50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa (raw, json)
Hash identifier: GBWpoooc+IvK/pXuCiNFt4NcsTgbivo/dPw86hyUirQ=
Subject key identifier: AA:FE:69:B7:2E:AE:11:3E:B9:E6:89:C6:62:07:C1:45:31:1A:33:59
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F43285848345569E3E85D075721253F00
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 32181
IP address blocks: 70.32.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:69:e3:e8:5d:07:57:21:25:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=0a8c1682-1ac8-4d27-8f6b-cf1eacf467de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:c3:11:a3:0b:5b:6b:97:99:35:80:b9:d1:
7e:3c:a5:03:fd:bb:28:81:0f:fc:12:54:42:af:1c:
fd:97:3c:34:e2:07:bf:37:e3:e8:04:d3:25:4d:bb:
43:9a:54:97:ef:ce:85:17:90:f7:64:ea:d3:e1:e6:
46:81:38:71:97:80:6f:10:3b:37:42:d2:f8:87:24:
d6:13:a2:d0:66:6f:31:fb:02:56:cd:ec:cd:c8:af:
37:7b:68:a5:a6:04:ec:76:52:a7:09:67:3c:0c:80:
18:09:25:4b:9e:36:d5:e9:8a:c3:25:26:2a:29:b2:
e5:51:14:09:47:a0:cd:5c:0b:f7:2a:ff:c3:28:cb:
32:b8:6d:77:4b:b6:c4:82:29:4b:a3:57:c8:97:d5:
a8:f3:f2:28:be:cf:c6:0b:6b:95:8d:88:b2:bf:64:
2a:b9:10:bb:f8:42:7c:b5:e0:37:ff:e9:0d:da:6f:
7d:94:ea:a9:a9:15:c6:61:ef:50:bd:b9:00:07:52:
2c:f0:ca:26:ce:26:99:ca:cc:54:b9:a4:bc:dc:62:
32:4f:a9:e3:90:32:f4:bb:4b:9b:05:47:0c:c0:40:
e3:82:ad:cc:f8:44:18:27:c3:63:00:5e:ad:1c:d4:
33:1b:dc:9a:fe:c2:97:90:27:04:35:65:c8:1d:49:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:69:B7:2E:AE:11:3E:B9:E6:89:C6:62:07:C1:45:31:1A:33:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:37:e9:eb:fc:36:5e:4e:08:a4:c9:d7:97:2a:69:6c:dc:9a:
9e:f4:41:10:ba:65:f1:d0:0e:7f:9c:fd:46:e7:c8:f1:81:28:
06:09:96:f1:11:f6:2a:71:be:20:c9:1f:f6:69:75:33:aa:8b:
01:6a:72:93:73:ed:68:05:78:bf:5a:80:3f:55:bf:c4:63:67:
3b:b2:4b:7a:72:37:6f:01:54:5e:19:5b:06:3c:6d:e3:0e:f3:
74:d2:2f:a2:96:8d:4f:6a:c3:89:a5:e6:5b:66:64:83:5e:48:
3b:95:e3:b1:6f:83:20:87:e6:29:99:58:bc:d3:ec:cf:93:91:
3a:bb:c9:25:fa:40:40:9f:1e:55:b2:72:f3:e3:49:8a:02:cd:
26:1b:8c:51:cc:55:0c:25:74:79:38:5e:3e:fe:35:0e:04:a1:
29:e0:27:bc:ce:58:3a:d1:61:0c:35:06:c6:11:df:09:4c:b1:
6e:1e:0e:51:38:e1:ca:29:05:3b:1b:cb:55:b2:a9:c8:85:8f:
b8:75:f2:b6:8e:22:22:41:85:99:d2:e8:4d:a5:c8:ae:44:94:
bd:b6:6a:79:c5:4d:c6:26:4e:37:13:32:e1:16:9b:69:4e:d3:
a8:cd:bc:bb:87:3f:77:e8:17:48:3d:ba:0a:80:8f:58:e7:eb:
e7:27:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:06:22 2025 by rpki-client