Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa
File: 783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa (raw, json)
Hash identifier: tu6csjaD7ZjTqhpX00VAzluw0JWRdMt/f4rCP6OwJqo=
Subject key identifier: 3F:AD:F0:BA:12:CD:7B:74:3D:3E:37:32:BC:DC:DF:F7:D8:F5:6C:34
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F5321C2CEA7DBF838AF200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:32:1c:2c:ea:7d:bf:83:8a:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5c8eafce-9ec3-404e-b46b-175db2647fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:c0:65:af:28:98:49:45:f5:85:8b:04:80:
00:ef:e0:f5:98:77:c0:8f:06:f9:c7:85:0e:79:04:
4b:d6:e2:b5:64:60:cc:2b:84:c5:05:65:5d:26:96:
55:ba:fc:57:ea:29:6e:94:5c:c6:be:92:99:84:c3:
5f:21:f4:8b:23:4f:b1:78:4d:40:85:af:d9:81:59:
de:36:35:ee:a1:a7:cd:68:8d:41:81:ad:27:67:b9:
b8:c7:0a:de:5f:f3:e0:4d:a8:65:49:12:56:7c:9f:
76:77:7a:b1:ce:69:01:7f:fc:da:20:44:23:d2:34:
65:2a:80:b7:45:04:98:62:f3:81:43:f3:89:1b:8f:
c8:0a:e5:c6:31:4d:ff:da:92:f1:4d:ac:6e:24:39:
fe:d3:c7:ec:2a:e7:97:9a:59:5a:da:9b:2a:a0:17:
da:57:7f:a7:5c:dc:10:57:47:1b:9e:b2:50:0a:ac:
f3:cd:71:58:00:37:45:d7:c9:be:95:b0:16:88:29:
31:66:ce:e4:07:e7:85:a9:53:83:f6:96:25:4c:40:
43:d6:fc:7e:e6:01:98:26:3a:9b:70:cc:4c:ef:a6:
b5:b2:b8:eb:c2:87:5c:47:91:fe:9a:9f:9d:f8:ba:
e0:d7:41:ea:88:6c:31:64:77:85:83:dd:de:f5:70:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AD:F0:BA:12:CD:7B:74:3D:3E:37:32:BC:DC:DF:F7:D8:F5:6C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:54:5d:32:fb:52:80:9d:c6:2b:64:21:3f:26:85:33:1c:43:
29:c6:ba:5f:30:a2:d8:f7:54:df:02:83:1f:a8:94:90:8d:44:
53:75:c7:e0:28:51:45:41:a8:b6:eb:11:60:b3:f6:65:1a:77:
e6:ea:f7:11:9c:da:aa:fe:91:26:f5:ed:ab:b3:2f:15:4b:2f:
64:1c:28:5c:67:e1:43:28:9a:dc:8d:ad:27:51:f7:10:99:41:
2f:1a:dc:c9:72:c8:f2:ff:8c:23:e2:73:2e:eb:cd:2f:e6:e6:
98:ed:c5:f8:8f:16:7e:55:20:87:5b:cf:51:2b:9d:96:32:ae:
9c:1b:fa:0f:7d:b3:4f:c3:3f:8c:b8:20:c5:a5:62:34:38:9e:
46:46:c0:11:43:61:85:c4:0c:20:7f:b4:1e:ea:4a:2b:f4:31:
50:84:d3:87:91:39:c6:e8:9f:2a:b2:a4:7d:40:83:14:3c:26:
87:77:e2:df:9c:c1:b8:4a:7e:40:d4:74:42:f0:29:fe:e2:fc:
9b:b9:e0:b7:f4:36:85:98:5f:62:01:ee:58:56:68:0a:c2:5f:
ec:01:5c:9d:44:a0:42:68:47:c8:82:7e:17:89:c3:fa:26:f3:
b9:d9:35:c8:d9:3c:ac:cc:46:9b:e9:26:cc:2f:ba:83:bb:36:
8f:47:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:54:51 2025 by rpki-client