Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa
File: 34bcf9a3-a232-3124-a010-fbd2231925d1.roa (raw, json)
Hash identifier: ty6SSLNbXZw8BSxEQGoLk92kGyoKf7obU88UhgEkrdI=
Subject key identifier: 5E:D8:EA:EB:68:78:19:A6:BC:5B:DD:A2:4E:AE:9C:E6:AD:90:0A:15
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F51D6927D52B28B25EB980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1d:69:27:d5:2b:28:b2:5e:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f2f5bebd-726c-4131-b8eb-a7692e1ad104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:14:dc:aa:e3:8a:21:9d:c9:54:1e:01:1d:b5:
57:ab:5a:13:31:89:f6:d0:e5:93:04:27:aa:fa:5a:
79:12:ce:01:9f:bc:00:d4:44:38:76:eb:fd:57:8b:
37:58:c0:e3:4d:38:da:c6:70:3c:7b:80:1c:7c:d9:
ed:44:f2:58:df:50:74:ab:6f:0b:35:0e:46:27:3f:
2a:81:f2:a4:44:8a:3a:42:a0:c7:99:11:ff:6b:85:
54:9a:80:4e:84:2c:77:68:b5:4d:51:86:ee:57:98:
31:4e:a5:cc:f4:7c:19:3e:0c:ce:fa:87:e2:06:16:
14:a8:94:d4:26:02:e3:2e:44:39:72:64:66:2e:60:
a5:a5:bc:b7:22:0b:71:d3:6f:d9:67:5f:07:8c:8e:
2b:a3:37:77:01:98:4b:99:2e:b7:07:5e:b3:d8:a1:
aa:f3:30:f9:66:cd:34:c6:45:1d:3d:0f:ca:f2:e6:
e3:a8:23:49:f5:ee:75:46:1d:16:7d:0a:f3:20:f8:
a7:17:c7:07:95:34:19:83:52:fe:3e:a5:05:12:70:
cd:cb:7d:ad:a9:d5:eb:15:5c:b1:c3:2f:30:9e:b4:
f7:9b:ce:78:03:53:4e:a7:28:ae:9f:98:95:c4:85:
63:bf:12:76:31:18:84:98:d7:99:ca:db:bd:57:61:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:EA:EB:68:78:19:A6:BC:5B:DD:A2:4E:AE:9C:E6:AD:90:0A:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34bcf9a3-a232-3124-a010-fbd2231925d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:b1:e3:bf:b6:40:75:d0:d1:ea:bd:d8:7a:62:2c:e3:7a:8c:
ad:76:19:f7:23:1e:40:69:07:ea:ca:49:ab:02:2a:4f:32:1c:
4e:de:32:6b:6a:1a:05:b2:3b:62:df:9f:45:2e:9b:c9:da:3e:
9c:bc:c6:33:49:6e:1b:19:d7:96:4b:48:83:68:82:e5:07:bb:
3a:58:55:e7:b3:8a:a0:e0:d6:d2:89:a9:c8:74:ac:d9:d6:0c:
40:73:df:6e:74:bb:2f:0c:c3:76:af:1f:2e:54:3c:05:e3:59:
ba:ac:12:76:f3:26:88:6c:f2:a8:f3:55:af:34:d5:b8:62:16:
d4:98:db:46:2e:58:11:c5:a8:79:e7:10:c8:48:ff:3c:d0:e3:
86:86:b3:6a:11:cd:c9:58:3f:53:a0:25:46:93:05:23:95:f6:
9d:58:2f:19:4f:1d:1e:0d:c7:6b:fa:9d:97:c8:a5:6d:c2:bf:
52:bb:a7:49:7f:ef:70:8f:f1:0f:e3:10:e1:2a:f4:5b:9d:05:
ae:be:de:c2:b6:f1:8e:2d:7c:d8:07:4b:da:3d:d8:58:41:67:
de:94:72:83:23:a3:ce:3a:4d:07:2f:f4:6e:b6:cd:6d:37:5c:
ac:25:14:16:ba:6f:78:a9:0b:4b:65:05:5d:d7:a0:0d:82:aa:
85:d5:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:55:52 2025 by rpki-client