Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa
File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json)
Hash identifier: XM1/nxHMym3OmdkYmJXEyWUu/PRh0Jxv5abfKHHx7jo=
Subject key identifier: 2A:05:E5:8D:38:FA:1B:56:C3:60:D4:2D:66:61:C1:F2:25:9E:48:C5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BB12556921934AAA4B300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:b1:25:56:92:19:34:aa:a4:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=1f895eca-4be1-43d8-b235-de5e93e6d2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:35:e3:6b:f9:4a:10:8a:02:b2:ad:c3:87:
ec:4d:6d:8f:00:0e:f1:b7:39:7d:55:df:4e:1c:5f:
82:74:82:96:b8:3e:fd:21:f7:e1:2f:14:20:ef:c2:
50:43:1a:a5:e6:c3:3f:90:23:d9:93:1e:3a:0c:62:
8b:c0:0e:a1:15:78:3e:0f:78:b8:54:71:e1:5f:bb:
d7:51:6b:6e:45:97:44:86:13:d1:d9:1f:3f:4e:09:
81:9c:8c:6e:f9:1a:60:a0:aa:99:37:ab:80:33:a0:
71:f7:16:6b:7b:c0:81:eb:35:db:1f:1c:23:22:94:
f2:ec:c1:d9:1c:1d:72:aa:0a:f7:19:d2:5f:2e:7c:
77:3e:bc:47:a9:8c:b8:8b:4e:90:88:78:22:ab:3f:
3f:1f:4e:63:1d:42:c8:42:75:bf:59:ab:c7:91:1b:
d0:69:36:89:14:b1:96:97:76:c7:d6:ad:90:be:c5:
85:d9:a0:49:92:a3:f5:d7:56:4e:47:69:c0:39:59:
b8:43:33:8d:e3:51:9b:73:aa:aa:fa:04:9b:e3:a2:
8e:0a:d8:51:e4:8c:23:22:6e:2c:7a:25:17:56:c6:
a7:f4:7a:77:5c:8a:23:c2:a7:3e:2c:c0:4a:86:73:
d9:53:d9:46:5f:f8:21:1f:50:e4:97:72:a9:2b:06:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:E5:8D:38:FA:1B:56:C3:60:D4:2D:66:61:C1:F2:25:9E:48:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:73:0b:e8:df:2d:f6:35:e4:55:49:67:08:4d:75:df:b7:8e:
5d:23:bb:e2:ab:fe:72:23:e6:51:d2:dc:9e:d6:0e:15:d1:b7:
5b:3e:b2:ae:04:66:4c:a2:8b:c0:93:67:47:d8:95:14:da:3e:
e4:0e:26:a7:1f:9e:52:c8:c0:78:d8:80:44:8b:75:58:73:28:
f6:11:01:fc:78:20:d7:5d:99:47:f0:b2:5d:50:d2:5c:48:37:
d7:01:3b:34:cb:56:e8:71:82:b6:d3:37:fa:3a:05:49:df:2a:
8e:78:d4:27:3a:52:58:be:b4:1d:7c:41:7a:2e:33:2b:59:38:
9f:ad:21:d6:82:8d:8e:99:17:70:43:09:c1:e7:62:78:80:8a:
36:3a:02:5a:f5:f1:f0:1b:d1:ff:cd:26:e2:f6:10:10:23:a8:
c0:e1:73:af:72:f9:82:0a:bb:1b:ad:ca:ab:31:9b:ca:b0:13:
a3:39:32:c3:af:43:c5:bd:a7:49:2a:a7:01:6f:00:1f:04:8a:
4d:ba:e9:55:73:c6:e9:d4:cc:50:9d:a1:93:c3:c3:df:64:0d:
ff:59:68:1c:73:5f:6d:c8:6e:42:b5:4c:09:fd:b2:bb:ae:26:
19:b7:9e:2e:72:1d:a8:2f:a5:cc:d4:10:85:2e:22:8d:02:32:
e5:64:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:03 2025 by rpki-client on console.sobornost.net