Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa
File: 8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa (raw, json)
Hash identifier: 0oahWvVfbYpa5hg5qqseBFV7ELZZXX4GEPtubSJ/PVE=
Subject key identifier: C1:F8:DA:5D:7A:E4:FD:6E:C7:C6:87:54:9B:51:CD:8B:07:C8:69:CB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C1907290FC6E507952D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 70.32.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:19:07:29:0f:c6:e5:07:95:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ac58cd58-bfbf-475b-aa72-5364d962fa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:a8:69:40:d6:76:aa:c6:15:17:e4:dd:22:
b3:e3:e2:49:02:97:e8:58:ec:d7:83:e9:da:54:52:
7b:25:f5:97:d9:94:18:bd:38:04:2c:11:08:b7:c1:
3e:be:81:44:31:0d:ab:8d:fb:7c:f4:2a:f2:6b:27:
83:2b:11:74:be:32:7e:07:98:33:ad:99:66:cb:08:
36:fb:58:7c:ea:9c:be:cc:aa:2c:5d:43:6a:b0:0e:
72:c5:3d:0f:44:3a:a2:7d:1e:80:0a:e1:3d:1b:42:
c9:21:e7:8c:6d:4f:2d:20:65:5f:d7:af:55:00:60:
4f:0a:95:76:7f:01:6a:b9:cf:3e:d8:4d:0b:62:c3:
29:47:fc:f0:b4:02:38:e7:0d:87:ed:c5:82:6e:41:
7d:a4:ef:98:59:0d:f8:83:8d:c1:61:d1:5b:70:99:
b5:bc:00:fc:28:43:0a:5f:bd:5f:23:7b:5c:9e:9e:
eb:dd:72:fa:a5:62:f7:4e:9a:88:51:20:33:6b:8a:
55:f2:2f:68:0e:c0:ea:da:27:63:6d:66:7e:f7:d4:
fa:68:d4:c7:a1:27:76:5a:25:06:f8:42:e2:f7:26:
0d:7b:f7:92:52:80:d2:cb:ec:84:16:44:86:5e:95:
79:9b:68:f9:b4:df:18:b4:35:00:25:86:c3:d1:b3:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:DA:5D:7A:E4:FD:6E:C7:C6:87:54:9B:51:CD:8B:07:C8:69:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a9f3181-8e60-3307-9da2-d9bb6fb22bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e7:d4:69:fa:c2:fc:14:4c:18:35:4b:97:d4:34:09:7e:08:
5e:6f:d8:3a:66:38:23:a9:ee:f6:20:77:ef:91:ab:05:73:20:
f3:2c:d0:1d:a0:df:61:dc:42:eb:93:9d:5c:a2:1a:3e:ad:72:
b4:80:35:68:84:b1:db:06:8b:2d:4b:18:cb:ce:22:d4:84:84:
c1:33:e9:b9:f6:2e:a2:7f:ad:e5:a9:a9:51:a3:08:83:33:45:
11:78:cf:01:9e:b1:ac:51:30:a3:1d:28:62:9a:96:c4:35:1e:
bb:2f:6b:b3:45:24:e2:db:7a:f2:03:95:4c:5b:b0:9e:06:7b:
c8:58:80:25:48:72:e7:d5:d5:de:d4:57:a9:df:4c:0b:5c:af:
4c:93:1e:0e:0f:9c:b6:f6:b5:28:91:66:0d:c4:51:5c:40:55:
8a:c4:fa:0d:22:ab:62:b5:56:52:c5:35:fa:df:83:9e:74:aa:
4c:d5:d6:d4:12:05:f6:bf:d2:f6:80:b8:6a:94:d2:48:e5:74:
50:c2:fc:18:3b:e9:18:15:f2:1c:25:1b:6b:42:30:60:cd:da:
01:71:f9:13:4e:01:34:7f:f3:eb:28:bb:a1:73:cc:cf:05:7a:
b4:fa:bd:19:fe:ec:2b:c6:6f:22:2c:5b:ba:c4:af:ed:dc:9a:
fb:d7:27:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBkHKQ/G5QeVLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YWM1OGNkNTgtYmZiZi00NzViLWFhNzItNTM2NGQ5NjJmYTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3+oaUDWdqrGFRfk3SKz4+JJApfoWOzXg+na
VFJ7JfWX2ZQYvTgELBEIt8E+voFEMQ2rjft89CryayeDKxF0vjJ+B5gzrZlmywg2
+1h86py+zKosXUNqsA5yxT0PRDqifR6ACuE9G0LJIeeMbU8tIGVf169VAGBPCpV2
fwFquc8+2E0LYsMpR/zwtAI45w2H7cWCbkF9pO+YWQ34g43BYdFbcJm1vAD8KEMK
X71fI3tcnp7r3XL6pWL3TpqIUSAza4pV8i9oDsDq2idjbWZ+99T6aNTHoSd2WiUG
+ELi9yYNe/eSUoDSy+yEFkSGXpV5m2j5tN8YtDUAJYbD0bN98wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMH42l165P1ux8aHVJtRzYsHyGnLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE5ZjMxODEtOGU2MC0z
MzA3LTlkYTItZDliYjZmYjIyYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjn1Gn6wvwUTBg1S5fUNAl+CF5v2DpmOCOp7vYgd++RqwVzIPMs0B2g
32HcQuuTnVyiGj6tcrSANWiEsdsGiy1LGMvOItSEhMEz6bn2LqJ/reWpqVGjCIMz
RRF4zwGesaxRMKMdKGKalsQ1Hrsva7NFJOLbevIDlUxbsJ4Ge8hYgCVIcufV1d7U
V6nfTAtcr0yTHg4PnLb2tSiRZg3EUVxAVYrE+g0iq2K1VlLFNfrfg550qkzV1tQS
Bfa/0vaAuGqU0kjldFDC/Bg76RgV8hwlG2tCMGDN2gFx+RNOATR/8+sou6FzzM8F
erT6vRn+7CvGbyIsW7rEr+3cmvvXJ5Q=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:06 2025 by rpki-client on console.sobornost.net