Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa
File: 1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa (raw, json)
Hash identifier: Xfb7r+Pqj+JTbAkEq8ok+ZSmmCmqNy4ii85a5GKyzpY=
Subject key identifier: 7C:B5:99:B1:C3:53:3A:B1:1B:13:68:CF:AD:F7:B1:FF:2B:64:69:B2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4E6F47698F78AE4CB8DC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e6:f4:76:98:f7:8a:e4:cb:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=efa0c64d-d749-48d9-a54a-5b8097d7bcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:f4:ea:f1:13:f8:ab:c6:67:e1:04:d5:2c:
2c:a0:c4:3c:a9:3a:01:3f:9e:6f:fe:30:2d:f8:87:
21:be:86:34:5c:5c:16:bd:f4:44:fc:fa:c4:b7:3c:
12:f1:c7:7d:5c:82:a7:9f:1f:61:6d:ea:ce:4d:55:
30:48:ef:12:33:78:04:98:ed:4c:5a:27:fa:bf:0c:
bc:35:72:83:72:da:06:9f:bf:f2:ff:a9:8b:55:8c:
26:41:36:7b:70:fb:90:89:ce:4c:47:1d:cb:be:ee:
0f:44:75:94:2b:89:e2:93:b3:89:09:71:68:70:fd:
cc:e2:82:30:30:26:7d:57:b5:f4:83:da:86:f8:e6:
84:91:2b:51:94:d4:c9:fb:db:f6:34:24:bc:1c:d3:
bd:0f:df:60:be:93:a6:9f:1d:20:a5:91:a3:8a:c4:
29:fd:a3:c9:bf:f1:97:9d:e2:d4:a5:06:f9:d8:b0:
88:6d:02:a8:a2:5b:a3:f9:53:5d:b8:54:b6:d0:55:
b1:00:de:50:0c:7b:8e:0b:ad:b1:2c:dc:34:8e:f5:
6c:14:eb:6e:51:35:23:c3:e2:fc:a4:95:b0:46:08:
2c:29:8b:60:30:35:43:bd:62:bb:a0:fe:53:e1:a3:
11:15:00:c6:57:db:81:41:a6:6b:d0:e2:ba:cc:71:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:99:B1:C3:53:3A:B1:1B:13:68:CF:AD:F7:B1:FF:2B:64:69:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1108c55a-d2c0-3cf2-a66b-8674a70e4277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:04:9a:92:80:29:de:c4:75:80:b3:54:27:f5:eb:d1:e6:db:
df:9f:1e:0f:b7:a5:1a:ea:e2:cb:20:f5:cc:bc:ec:48:cc:a1:
83:0e:9e:40:0e:5c:b4:52:4a:da:08:6a:17:98:78:c1:c3:89:
db:49:75:c1:34:a5:85:59:4b:00:4b:61:0c:b9:50:68:76:78:
14:98:af:6d:52:23:7f:6d:a4:08:73:51:29:7e:6b:f9:85:47:
b2:ed:11:8b:ad:7c:6f:0a:d0:9e:08:4d:81:e9:1a:44:0b:61:
20:d4:45:51:90:10:3a:49:92:e6:75:12:71:94:ec:36:5c:c9:
00:e9:e8:75:5e:ad:44:dd:ac:9d:80:a0:18:05:8f:f2:ee:a3:
9c:28:5c:30:f5:b0:90:29:93:d8:58:a8:8f:e0:16:73:aa:5c:
ce:f6:44:b5:12:b7:f1:62:7d:27:8f:b7:6c:95:29:f3:fc:ef:
d8:ba:ce:70:66:92:32:06:73:de:cf:fd:96:b8:53:37:d1:5b:
b6:1a:3c:6b:26:96:6f:01:a5:fc:30:e9:91:03:ea:c7:9c:83:
9d:91:a4:55:11:f8:4d:a4:78:65:b1:79:9a:64:a7:6b:2c:0b:
95:7f:a8:31:ce:d6:b4:3c:de:b5:ac:b4:af:6a:5e:50:24:3c:
32:ac:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:57:57 2025 by rpki-client