Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa
File: dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa (raw, json)
Hash identifier: aTHNI/NJef5aGq2x1CTO+B4dGl0ee7jLtFp+YuEKJAw=
Subject key identifier: E9:40:4D:C4:57:93:C9:99:4B:90:F1:82:76:43:D4:6C:74:E0:8E:AD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F5357AA58A61EAE4591B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 70.32.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:35:7a:a5:8a:61:ea:e4:59:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=44cc5e28-704e-4b01-983f-d827bbc2f2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:4c:a7:3c:41:c7:a5:d1:50:93:a9:1d:70:
90:d4:ae:4c:a4:9c:55:68:35:4e:64:cc:a9:ef:21:
75:23:15:65:37:ec:6c:3b:95:0e:f8:10:89:be:2d:
3d:cc:be:54:74:53:87:05:aa:6f:74:dc:be:1f:c1:
93:7b:08:10:f9:8f:a3:08:30:8d:43:42:88:ff:25:
07:f9:2f:89:51:fe:20:57:c6:c5:a0:e4:11:50:65:
e8:cb:b4:9a:5b:78:9a:e0:f4:82:b3:69:bf:62:5c:
24:aa:d8:11:b1:c4:c8:e9:33:d9:88:44:86:82:6c:
b5:99:fa:4e:b2:e3:b8:8d:64:52:3a:10:33:dc:f8:
79:cf:9f:6f:b0:d9:9e:ab:8e:55:eb:f0:35:ca:7f:
8f:26:60:c6:9e:69:e7:23:9c:3f:59:af:c1:64:37:
9d:70:c3:53:5a:50:ca:61:a9:53:8a:e4:53:1a:af:
88:49:3b:e1:93:eb:a4:d8:e3:c3:ce:ee:38:50:b8:
cf:83:25:aa:37:e8:18:e7:fb:8e:2e:0d:a3:93:80:
8d:28:28:f4:00:32:4e:50:6e:d0:a0:e3:c1:44:1d:
1a:ab:ee:6a:81:1d:12:5f:85:2a:0c:53:85:48:06:
43:2f:30:0b:15:93:bb:96:05:6c:dc:a3:ee:f5:f0:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:4D:C4:57:93:C9:99:4B:90:F1:82:76:43:D4:6C:74:E0:8E:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd4e5559-cff0-3313-afc8-fdcdaf3d9878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:71:98:c8:4c:20:a4:3c:bd:fa:bc:86:3b:e3:43:71:f9:fb:
80:e5:09:55:ee:6a:f9:63:ff:38:5c:76:09:0a:bd:2f:4d:41:
6f:41:bc:a7:09:9d:50:2a:5e:2c:7f:14:92:23:1c:ad:69:83:
9b:31:1f:4d:9b:49:48:46:00:0e:d1:91:e5:3b:4e:59:2c:c5:
d2:1e:60:55:50:df:92:0a:e2:96:b8:38:c9:3a:b4:35:11:05:
e3:3d:dc:b4:2a:29:90:a4:6b:3c:05:20:4f:46:84:82:14:e8:
7e:19:a4:b1:e1:eb:e0:94:80:50:14:3b:cb:e7:71:00:3a:b5:
93:98:73:56:bc:f7:aa:24:45:9c:0f:4b:58:89:4b:07:68:ab:
d2:cc:38:b2:aa:16:30:3a:40:61:a9:14:46:3c:be:fe:96:c0:
a8:4a:99:6a:c1:8a:7b:a5:6a:d4:40:80:aa:4b:9c:92:2d:e0:
cd:09:53:08:32:49:cc:dc:13:32:44:69:b4:74:b3:c3:69:9d:
36:22:38:7e:53:be:51:68:11:00:1f:0d:51:90:7c:e8:c2:df:
d7:e4:2a:ff:6d:f5:55:a3:ba:e7:cf:9f:02:e3:e3:cd:b0:4a:
41:e1:dd:4b:5a:6c:24:9d:19:b6:b9:e5:fa:72:39:d6:5d:b5:
4d:65:db:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TV6pYph6uRZG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NDRjYzVlMjgtNzA0ZS00YjAxLTk4M2YtZDgyN2JiYzJmMmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxBMpzxBx6XRUJOpHXCQ1K5MpJxVaDVOZMyp
7yF1IxVlN+xsO5UO+BCJvi09zL5UdFOHBapvdNy+H8GTewgQ+Y+jCDCNQ0KI/yUH
+S+JUf4gV8bFoOQRUGXoy7SaW3ia4PSCs2m/YlwkqtgRscTI6TPZiESGgmy1mfpO
suO4jWRSOhAz3Ph5z59vsNmeq45V6/A1yn+PJmDGnmnnI5w/Wa/BZDedcMNTWlDK
YalTiuRTGq+ISTvhk+uk2OPDzu44ULjPgyWqN+gY5/uOLg2jk4CNKCj0ADJOUG7Q
oOPBRB0aq+5qgR0SX4UqDFOFSAZDLzALFZO7lgVs3KPu9fDldQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlATcRXk8mZS5DxgnZD1Gx04I6tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQ0ZTU1NTktY2ZmMC0z
MzEzLWFmYzgtZmRjZGFmM2Q5ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK5xmMhMIKQ8vfq8hjvjQ3H5+4DlCVXuavlj/zhcdgkKvS9NQW9BvKcJ
nVAqXix/FJIjHK1pg5sxH02bSUhGAA7RkeU7TlksxdIeYFVQ35IK4pa4OMk6tDUR
BeM93LQqKZCkazwFIE9GhIIU6H4ZpLHh6+CUgFAUO8vncQA6tZOYc1a896okRZwP
S1iJSwdoq9LMOLKqFjA6QGGpFEY8vv6WwKhKmWrBinulatRAgKpLnJIt4M0JUwgy
SczcEzJEabR0s8NpnTYiOH5TvlFoEQAfDVGQfOjC39fkKv9t9VWjuufPnwLj482w
SkHh3UtabCSdGba55fpyOdZdtU1l2wg=
-----END CERTIFICATE-----
Generated at Fri May 9 18:46:18 2025 by rpki-client