Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
File: 60899ba4-2e02-3634-b503-2d70ad64f496.roa (raw, json)
Hash identifier: m6psVRYfg+k3sweL+PTOICkgTDzR/JQbSPaSVcQQpjY=
Subject key identifier: E5:45:0C:2C:B5:6F:CC:48:AF:AB:68:EC:7B:29:D5:47:B6:3F:80:DC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4EF0F9B1BB7F88F8F0740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:ef:0f:9b:1b:b7:f8:8f:8f:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=dedfad4f-5e9a-41b0-bbad-528dd0b1a574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:5c:66:27:2f:29:c8:c9:c3:df:e2:89:07:
44:e6:83:51:b2:c2:00:71:00:a4:d0:6d:ac:10:9a:
6c:ab:06:f3:15:8c:e4:d3:88:ae:4e:79:c3:a3:cf:
92:49:98:62:be:72:af:56:32:79:a4:71:19:1d:10:
51:6b:82:da:1c:2b:cb:1d:2b:7d:02:01:06:b9:ee:
22:35:66:3e:63:39:0f:e0:c7:4a:1a:da:1c:39:b7:
20:9f:3d:de:6e:18:59:fa:a0:fa:87:ef:74:1a:9e:
f5:83:50:9a:11:24:64:9b:30:dc:83:a4:3a:36:6d:
f4:98:7f:1a:c5:71:db:05:2e:2f:3a:0f:13:e8:cc:
4c:10:e2:2e:95:1d:15:4e:9c:e6:ea:84:b9:d7:a4:
8c:d4:34:c8:79:d8:d8:69:f3:58:f0:e2:8d:f1:47:
e7:c5:95:25:67:bd:53:69:65:fa:7f:ec:1a:a1:09:
aa:1e:fa:d3:b8:ce:70:ed:8d:10:df:17:3a:0b:3a:
39:ae:49:53:0b:a1:a2:7e:ab:9c:3b:75:e4:e9:71:
ec:d2:61:42:a4:6c:4b:d0:d6:5e:32:96:18:ce:80:
86:30:84:07:fa:de:85:27:21:ea:55:cf:0b:26:c8:
fd:7e:65:30:1b:45:49:8a:f6:65:2c:ca:24:e4:68:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:45:0C:2C:B5:6F:CC:48:AF:AB:68:EC:7B:29:D5:47:B6:3F:80:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fa:82:56:ec:46:d7:d6:c5:53:64:13:05:bc:2f:76:98:66:
66:bc:86:11:f2:b8:cb:d5:3e:e5:d4:6e:f6:92:42:e4:8b:1a:
4d:57:96:6e:12:e3:20:3b:99:3e:5e:d4:7c:c0:c8:10:41:f7:
84:1f:ff:b7:ef:ab:01:40:18:f8:d2:ae:99:f6:c1:21:da:0e:
0d:e5:29:91:2a:33:a2:a1:fa:72:42:86:2a:72:26:e1:b4:0e:
fb:69:f1:ce:a8:70:81:88:d9:68:9e:4b:c0:02:3d:c4:06:90:
01:8a:5b:b3:e3:9d:d0:79:03:e5:fd:43:9d:a4:7b:fe:50:36:
4c:2c:26:97:26:fc:d5:22:15:57:fd:15:04:52:72:cd:6c:71:
e2:47:08:63:ac:f4:36:9d:ea:5c:01:c2:33:ff:eb:8c:a5:90:
8e:b5:d3:65:b1:a7:be:ed:ac:61:1d:78:ac:77:6d:8b:44:dc:
4d:eb:d8:3d:57:2c:d3:df:08:26:e4:93:3c:35:a1:18:80:50:
ad:46:1c:5c:b9:ea:d7:ea:59:fb:3e:72:d2:42:a5:79:47:ae:
a8:07:b1:34:60:4d:29:8e:30:3d:e3:b4:e6:69:55:21:cc:b9:
52:40:ff:cf:df:f7:6f:6d:f9:7c:cf:49:13:07:07:22:a4:4c:
8e:b1:72:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9O8Pmxu3+I+PB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZGVkZmFkNGYtNWU5YS00MWIwLWJiYWQtNTI4ZGQwYjFhNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0lcZicvKcjJw9/iiQdE5oNRssIAcQCk0G2s
EJpsqwbzFYzk04iuTnnDo8+SSZhivnKvVjJ5pHEZHRBRa4LaHCvLHSt9AgEGue4i
NWY+YzkP4MdKGtocObcgnz3ebhhZ+qD6h+90Gp71g1CaESRkmzDcg6Q6Nm30mH8a
xXHbBS4vOg8T6MxMEOIulR0VTpzm6oS516SM1DTIedjYafNY8OKN8UfnxZUlZ71T
aWX6f+waoQmqHvrTuM5w7Y0Q3xc6Czo5rklTC6GifqucO3Xk6XHs0mFCpGxL0NZe
MpYYzoCGMIQH+t6FJyHqVc8LJsj9fmUwG0VJivZlLMok5GirAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVFDCy1b8xIr6to7Hsp1Ue2P4DcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjA4OTliYTQtMmUwMi0z
NjM0LWI1MDMtMmQ3MGFkNjRmNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRiCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADD6glbsRtfWxVNkEwW8L3aYZma8hhHyuMvVPuXUbvaSQuSLGk1Xlm4S
4yA7mT5e1HzAyBBB94Qf/7fvqwFAGPjSrpn2wSHaDg3lKZEqM6Kh+nJChipyJuG0
Dvtp8c6ocIGI2WieS8ACPcQGkAGKW7PjndB5A+X9Q52ke/5QNkwsJpcm/NUiFVf9
FQRScs1sceJHCGOs9Dad6lwBwjP/64ylkI6102Wxp77trGEdeKx3bYtE3E3r2D1X
LNPfCCbkkzw1oRiAUK1GHFy56tfqWfs+ctJCpXlHrqgHsTRgTSmOMD3jtOZpVSHM
uVJA/8/f929t+XzPSRMHByKkTI6xchY=
-----END CERTIFICATE-----
Generated at Fri May 9 20:14:40 2025 by rpki-client