Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/226a5283-5d32-3916-96eb-bb00ad7cb15f.roa
File: 226a5283-5d32-3916-96eb-bb00ad7cb15f.roa (raw, json)
Hash identifier: EHU1wlHSzGPr8PbfRudOF1auZLH7s/FbFRzxHwkGXVQ=
Subject key identifier: 07:16:69:F1:E2:BD:E8:52:60:F9:BE:CD:A8:BB:01:71:7B:15:34:D0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F51EA4A24CC3A399A5C6C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/226a5283-5d32-3916-96eb-bb00ad7cb15f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1e:a4:a2:4c:c3:a3:99:a5:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=85068f1c-98b1-4c6f-98a6-59d02b43949e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:86:3b:f4:7a:71:df:f5:ed:3a:4a:eb:f6:
75:50:2f:63:78:5e:0b:aa:d2:71:c3:14:62:90:c5:
f9:83:0d:a1:7b:2b:e8:72:74:bc:9f:6a:53:de:95:
19:59:c2:35:0d:af:31:93:ba:92:90:49:17:68:5f:
ff:5c:59:65:99:15:63:b1:27:45:e0:5b:6f:e0:b3:
f8:cb:ec:c7:e6:15:1e:f3:0a:df:36:ba:c7:9f:2d:
64:8f:16:ab:fd:c5:89:5c:3d:69:e1:5a:54:06:8f:
30:40:23:15:01:dd:f1:e7:27:09:3e:d5:87:59:e7:
1d:e1:74:6c:bc:ac:af:e4:26:7e:4c:9e:ec:5b:f5:
4d:df:76:51:59:92:70:14:18:a5:34:8e:23:a4:17:
09:90:64:f1:c7:f1:ac:34:87:6b:3c:14:9d:76:28:
5c:23:1a:50:1d:91:d7:73:bd:c8:69:f6:8d:3d:92:
74:07:8b:69:4f:42:8f:d5:1e:3f:40:80:b9:f8:8d:
b8:d6:3e:39:0d:02:64:e0:ac:a4:ac:e9:2f:c2:3e:
f7:79:d7:87:dc:45:66:79:70:fb:5b:f2:a4:47:9f:
8f:0a:29:07:ed:5a:fb:54:68:62:3c:a3:22:33:20:
b8:bd:14:8d:0f:b3:45:18:a0:28:d6:c5:cf:0d:97:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:69:F1:E2:BD:E8:52:60:F9:BE:CD:A8:BB:01:71:7B:15:34:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/226a5283-5d32-3916-96eb-bb00ad7cb15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:e1:9c:7e:cb:7f:36:08:e5:07:2d:1c:01:bc:f6:9a:84:1f:
2e:a8:2b:35:0f:a1:6f:80:91:dc:38:a2:31:e4:b9:69:41:07:
70:da:52:fc:7d:f5:d9:3d:5c:23:cc:4f:ef:3b:21:71:b2:7f:
a4:65:63:93:b1:78:4b:14:f2:ec:75:11:5c:c3:13:44:05:2d:
a5:58:84:60:d4:7a:9a:4d:32:5a:fc:a8:9f:78:cc:dc:6a:6c:
89:d0:26:f2:94:53:8c:68:3d:ba:39:5b:c9:28:f2:49:26:62:
b0:15:ec:01:0f:a1:1f:08:82:09:2b:a2:67:bf:f9:a3:2c:9a:
ba:b6:10:a6:1c:a8:a9:d9:f4:9a:a9:4c:7f:9d:34:89:f0:1c:
24:02:c1:35:1c:32:42:0f:b9:a8:37:d6:64:aa:1a:28:a1:20:
6a:4b:16:24:fa:62:00:c6:d2:d8:99:3d:82:f7:6f:4f:b7:8d:
5c:3c:ab:4d:10:07:57:b1:4d:b3:ef:1f:ed:b7:79:07:69:fd:
08:82:e8:d9:1a:ca:0d:c0:aa:97:1e:17:14:6a:56:7f:d7:ac:
e6:f0:b3:18:1a:81:68:35:69:61:36:b4:cb:f3:49:ae:5b:ef:
03:de:0e:9e:6d:22:40:8e:b7:4e:75:67:b3:3f:b7:d0:ba:74:
8c:31:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:44:12 2025 by rpki-client