Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa
File: cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa (raw, json)
Hash identifier: ehyOLq00RLMZQXsQeRyjYgj0/7RYUNgXbjIVo3c4/cQ=
Subject key identifier: 80:83:85:24:93:E9:D3:D1:B0:0A:04:2C:2A:72:2A:6B:BA:07:F7:9E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4D825913D1558F7579480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d8:25:91:3d:15:58:f7:57:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=d75f89a4-efb7-430f-b0b2-24bac87f7319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:e9:4c:91:ea:be:e2:d9:f3:fb:b4:9b:95:
3f:4f:ee:42:1e:32:0a:a2:5d:4a:75:e9:3c:99:1f:
ae:ff:78:76:5e:2d:c4:ce:0e:ce:3c:d4:f6:ee:0b:
3c:24:0b:0d:6b:44:a5:95:8a:30:a7:d4:7b:dc:eb:
cb:84:9d:6b:48:8d:dd:cc:06:d3:49:0e:07:61:fa:
fb:5f:53:57:aa:13:e0:ad:2e:b1:18:e5:71:b2:65:
82:a5:e6:13:05:81:60:8a:83:80:42:b7:c3:e9:4d:
18:b4:a3:e9:98:67:6a:cb:a9:ef:01:b8:bb:31:6c:
e6:7c:72:a7:10:44:fd:60:00:83:7b:73:a7:19:45:
67:01:93:44:91:e7:c9:57:a5:85:12:f8:73:70:68:
59:c2:03:9c:31:ec:98:3b:7d:72:99:6b:2c:3c:87:
dc:01:d7:e7:4e:df:ef:f4:bb:92:6a:49:1e:c2:9a:
4a:f0:55:ce:9d:5a:36:27:75:05:44:59:7d:cc:bb:
7e:f6:58:a5:d9:d3:6f:e3:c3:46:c2:98:7a:43:75:
1c:92:3c:1c:10:c8:8d:22:77:24:6f:ee:a3:98:b8:
58:fc:17:65:f8:16:1b:d6:eb:84:bd:ed:a8:f2:b8:
a1:07:7e:d4:24:9b:29:1e:af:ab:74:58:20:30:0e:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:83:85:24:93:E9:D3:D1:B0:0A:04:2C:2A:72:2A:6B:BA:07:F7:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd86bd65-69da-368c-9dc2-8435f1ff9c84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:65:31:a3:58:1e:ae:0a:67:d9:db:83:aa:4c:ef:22:14:d4:
03:5a:dc:79:3b:8f:5e:82:41:b0:a9:d8:2b:39:c1:cc:f0:4f:
4a:82:b8:90:10:38:98:2e:83:05:55:1e:17:46:ec:b0:83:f4:
6b:67:2a:f6:06:f2:02:ef:0d:0e:2a:2f:0d:5e:d5:d5:5d:6b:
e4:80:cb:c6:64:43:d8:3e:10:f4:35:c3:d9:61:3d:ce:c3:69:
2e:19:25:47:a0:55:55:a0:76:1c:3c:7e:05:47:71:2d:3e:dc:
ea:d3:8a:db:f0:68:76:35:5e:a0:04:4d:e6:6c:ee:83:33:d7:
b7:b1:5f:72:bd:ac:ef:b2:12:9f:44:cd:9f:b1:79:bc:03:b1:
d1:22:dd:03:16:25:52:4a:47:d7:e8:45:25:35:68:1f:a5:a9:
6e:a4:f7:eb:ad:cc:63:23:38:2c:ee:00:65:20:f7:58:5b:34:
fb:1f:26:9d:8c:86:76:b9:18:3d:15:62:fc:0c:d6:cb:05:47:
c7:b8:73:99:c1:17:77:ca:a5:af:63:1d:75:47:e9:1a:95:42:
4c:60:29:c0:4f:2e:88:ad:ce:50:8e:f2:c5:54:ac:b8:ae:44:
bd:f1:d4:15:28:6b:15:0e:83:52:b6:45:c3:b4:ae:d3:a7:7a:
cc:dd:1d:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9NglkT0VWPdXlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDc1Zjg5YTQtZWZiNy00MzBmLWIwYjItMjRiYWM4N2Y3MzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTDpTJHqvuLZ8/u0m5U/T+5CHjIKol1Kdek8
mR+u/3h2Xi3Ezg7OPNT27gs8JAsNa0SllYowp9R73OvLhJ1rSI3dzAbTSQ4HYfr7
X1NXqhPgrS6xGOVxsmWCpeYTBYFgioOAQrfD6U0YtKPpmGdqy6nvAbi7MWzmfHKn
EET9YACDe3OnGUVnAZNEkefJV6WFEvhzcGhZwgOcMeyYO31ymWssPIfcAdfnTt/v
9LuSakkewppK8FXOnVo2J3UFRFl9zLt+9lil2dNv48NGwph6Q3UckjwcEMiNInck
b+6jmLhY/Bdl+BYb1uuEve2o8rihB37UJJspHq+rdFggMA6NpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICDhSST6dPRsAoELCpyKmu6B/eeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q4NmJkNjUtNjlkYS0z
NjhjLTlkYzItODQzNWYxZmY5Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5lMaNYHq4KZ9nbg6pM7yIU1ANa3Hk7j16CQbCp2Cs5wczwT0qCuJAQ
OJgugwVVHhdG7LCD9GtnKvYG8gLvDQ4qLw1e1dVda+SAy8ZkQ9g+EPQ1w9lhPc7D
aS4ZJUegVVWgdhw8fgVHcS0+3OrTitvwaHY1XqAETeZs7oMz17exX3K9rO+yEp9E
zZ+xebwDsdEi3QMWJVJKR9foRSU1aB+lqW6k9+utzGMjOCzuAGUg91hbNPsfJp2M
hna5GD0VYvwM1ssFR8e4c5nBF3fKpa9jHXVH6RqVQkxgKcBPLoitzlCO8sVUrLiu
RL3x1BUoaxUOg1K2RcO0rtOneszdHVw=
-----END CERTIFICATE-----
Generated at Fri May 9 20:16:52 2025 by rpki-client