Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa
File: ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa (raw, json)
Hash identifier: U7kzte3kq/HPqQ7nkizOCMv8bK+B0ZART/pw7mWTs9w=
Subject key identifier: 10:3F:03:3C:56:B8:00:4C:91:B8:EE:3F:A6:00:42:48:F2:B2:C9:D9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4E123493091CD2482DB88
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e1:23:49:30:91:cd:24:82:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=b2c1b9a1-2ced-4d6b-978e-1def44a075e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:0f:7e:d4:82:82:3f:72:9b:a7:42:d8:33:
17:97:73:34:d5:39:cf:16:d0:a2:26:5c:24:0e:2c:
97:a6:92:26:5b:18:93:d2:f1:11:39:12:0a:81:23:
60:60:cd:3b:36:a3:8f:de:d4:73:d2:1e:ba:2b:39:
f8:82:41:e4:4a:d9:f7:69:27:6f:21:f0:af:fb:4d:
54:87:a5:4d:58:d6:54:56:22:0c:44:95:07:84:12:
de:f5:48:26:43:82:8e:7c:88:2f:5b:b4:65:24:4b:
1c:bb:fd:b5:60:22:4c:55:a7:eb:0e:79:d0:47:c4:
69:51:91:5e:7a:c4:84:65:9b:20:ed:21:f9:e6:3c:
de:3c:ad:14:f5:eb:17:2a:7f:03:4f:e8:6a:51:0f:
56:a8:b8:25:49:e8:f3:8b:c0:90:ad:19:04:31:28:
65:50:5b:e0:59:ae:21:c4:b5:16:09:e7:d7:f0:f3:
33:3a:12:31:d8:e4:aa:8f:0c:ad:dc:56:09:cf:55:
e5:6c:2e:5d:c4:c0:0e:8a:0a:05:db:1b:20:64:f7:
73:ab:6e:1d:a7:ff:d2:e3:88:16:45:4d:9e:26:34:
11:f2:5c:6f:b1:fa:ee:48:7e:34:20:b0:a7:d4:d6:
da:d9:bf:55:33:9a:03:58:61:5a:4a:21:d1:37:88:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:03:3C:56:B8:00:4C:91:B8:EE:3F:A6:00:42:48:F2:B2:C9:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccac1cb9-e4e9-3fe8-a0ea-3709e9b07fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:29:ea:01:b2:5c:dc:af:95:af:e1:85:be:f1:40:a3:7d:c3:
76:a0:c7:90:25:1d:df:d9:75:38:dc:7e:75:f8:b4:75:af:60:
83:8a:80:c8:00:f0:40:08:4c:3d:62:82:f9:88:62:96:66:93:
36:c1:e1:90:37:28:cd:76:92:4a:5e:a1:9e:ca:d4:a0:5c:06:
69:fc:35:31:03:30:3a:f4:85:22:95:68:73:b7:d2:04:2f:32:
ff:0f:c1:0e:d5:84:3c:dd:96:65:2c:16:79:af:ad:2d:e8:cd:
10:6f:e2:7e:1d:70:00:2d:01:48:3c:66:e3:bb:cf:f8:ac:62:
1c:89:b9:62:2a:f1:14:8b:f7:74:c0:3d:3b:10:b0:63:40:ec:
6b:b7:44:71:ec:4a:f7:0f:84:5e:1c:10:30:ce:f9:9c:42:c8:
b2:4f:f6:10:b1:47:e5:f1:70:41:58:1b:56:a2:ad:c7:14:be:
26:94:94:9c:a2:9c:12:ef:40:26:3c:ec:cc:3c:19:25:15:52:
68:fa:c9:ab:e6:96:83:7b:f0:f6:9e:a6:04:b1:0d:85:0a:49:
37:c1:bc:88:7e:71:b4:b3:c5:34:b3:8c:65:8a:17:7b:76:c4:
b0:1f:c0:c6:16:18:9c:70:61:27:14:31:e0:d9:de:e6:de:21:
e2:b2:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:04:05 2025 by rpki-client