Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa
File: 56a1775b-c9a6-31aa-9040-b34009d9f364.roa (raw, json)
Hash identifier: glCjpSvBZlSO+rBlfRtFhLzhTvd3ADwd5E4k95mpBP0=
Subject key identifier: F2:CF:54:7D:49:BD:57:64:0D:CB:4B:5E:CB:4B:0E:E4:63:14:F5:46
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BDC5BF853F98FC2AEDF40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:dc:5b:f8:53:f9:8f:c2:ae:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=d7b806e7-82b7-459d-91a8-b0f9598d1425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:0c:e9:c8:c6:1c:bc:96:62:c0:7f:c9:6d:
4b:f7:af:3c:d5:31:0b:17:b5:a8:cb:53:c6:76:98:
8a:b2:55:0d:f2:55:a1:0d:27:bf:93:6c:75:5f:89:
3f:28:7d:1a:37:c6:3b:2c:3b:46:aa:dc:dd:04:ca:
79:34:f1:e6:73:02:29:2b:32:b6:23:37:c8:e1:73:
01:16:31:70:b4:08:8d:86:35:94:75:c3:e1:e8:6d:
4d:5f:08:62:ac:4c:e2:37:98:46:60:43:94:d3:5b:
66:9d:14:54:5c:31:91:fe:7e:c8:44:99:78:77:65:
7e:a4:50:f4:e0:69:fb:35:07:7c:26:fd:9f:28:41:
59:97:06:9d:03:2b:a1:c8:fc:1d:65:75:bf:69:96:
f2:8f:85:93:82:68:97:bc:7c:aa:89:ad:16:de:d1:
80:41:fe:02:b0:33:3f:bc:ca:30:99:e0:a6:31:c1:
95:18:f3:f4:72:a0:19:a1:06:e9:dd:1d:af:aa:fd:
2c:a4:82:c0:8b:14:3c:71:04:74:1c:06:d8:c0:51:
d8:2e:7b:ed:cb:09:9b:b5:81:f4:d9:a3:d4:90:1e:
0c:2a:f4:0c:26:80:ee:ce:2f:c0:7c:57:84:5d:c4:
19:fc:fd:bf:dc:81:7e:1e:5d:a9:2b:11:6b:58:f5:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:54:7D:49:BD:57:64:0D:CB:4B:5E:CB:4B:0E:E4:63:14:F5:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56a1775b-c9a6-31aa-9040-b34009d9f364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:da:48:97:b4:f1:af:fb:72:51:04:6e:bd:66:70:f1:37:93:
54:b8:8e:36:04:5d:48:d6:4a:47:5e:1c:86:51:4e:5e:60:f6:
25:c3:9c:86:30:af:5c:36:9a:b3:31:18:d3:79:16:9c:13:8a:
36:6e:56:fd:93:83:07:05:0b:19:71:1b:d5:4f:a2:d9:f8:be:
94:0f:16:8d:44:59:b6:9c:b1:08:aa:4e:7f:f8:14:d0:76:b3:
f6:f0:e2:b9:d6:cd:f6:a8:1e:53:03:80:ee:ab:f3:50:22:70:
2d:e3:27:59:42:56:0e:12:f4:ac:b5:b6:8a:57:9b:43:3f:a6:
0a:1a:c9:5f:bf:ca:ef:3f:17:52:a6:8c:28:47:c0:c3:40:c8:
91:35:10:3b:dc:e2:c9:a5:e8:f2:b9:e1:e2:07:f7:d8:5e:03:
5a:90:f9:1c:bd:a0:45:8c:e6:cc:f5:dc:13:6f:54:99:58:5a:
f4:60:3e:be:e2:5e:47:9d:47:f9:b0:5b:9a:b6:51:66:4a:36:
a8:19:e2:26:78:1b:62:bf:4e:e6:71:88:05:b7:60:8e:cd:52:
41:d2:d2:ac:ae:da:b7:bb:9a:da:17:30:32:6f:af:fa:c2:7d:
7d:5b:d0:03:1b:84:5f:f0:bd:ab:02:33:2a:96:51:2a:f5:9b:
dc:5d:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:04 2025 by rpki-client on console.sobornost.net