Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa
File: b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa (raw, json)
Hash identifier: o7YrNXoiAN5E/X+PtUCIBj2UPJz9wXTt9AxHxNbH1qk=
Subject key identifier: 40:FE:83:CC:EB:7F:FF:71:E9:26:93:DF:B4:0D:31:2C:21:45:46:05
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F4328584894A5EC20D9DE8F631E860300
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 237
IP address blocks: 35.58.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ec:20:d9:de:8f:63:1e:86:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=983e884f-d767-4d32-a658-06830654573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:ea:37:dd:43:f6:3a:91:14:fa:ed:fe:bb:
ca:56:fc:c5:9e:62:f0:61:be:51:b5:76:d8:a2:15:
8f:01:dd:34:16:3a:8f:a3:36:24:87:99:a4:13:2e:
77:45:db:2e:fe:0d:a1:94:40:e5:5f:ac:e3:59:64:
3a:13:32:07:79:43:b4:94:1a:58:f5:39:72:b5:f8:
49:99:7d:70:7c:b9:8e:73:c5:c6:66:c6:10:f8:ec:
6d:23:27:bc:c8:6e:53:77:fc:4b:91:d8:bf:e7:76:
f3:0c:dc:d0:49:f4:73:76:ef:4f:64:86:7d:a4:99:
30:64:c4:66:57:fb:be:ee:e5:3c:27:42:a5:00:34:
53:93:78:dd:a8:42:e7:23:d1:6c:41:a7:86:4b:cb:
76:57:2d:e0:0e:96:8c:62:1f:14:34:c2:a5:c6:fb:
a4:1c:67:51:fe:00:97:6b:1c:a4:74:54:ac:2a:3b:
30:d4:d0:5f:5b:24:52:34:b9:6c:87:b0:54:aa:20:
2d:0f:15:81:b5:d6:c4:bb:7f:77:7f:ab:03:49:6e:
fd:1d:1d:2d:48:3b:55:62:09:c6:02:60:63:f4:ca:
3f:f5:05:09:84:1a:fd:bc:d1:52:84:76:5e:24:b9:
86:76:4d:f6:ba:17:43:2f:24:33:75:24:bb:93:09:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:83:CC:EB:7F:FF:71:E9:26:93:DF:B4:0D:31:2C:21:45:46:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/b1b5837b-b0cf-3c8a-a2d5-5fe9f91d80e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:a0:2b:01:31:71:6a:61:7e:c6:d6:2e:20:97:a4:b9:de:de:
ba:86:f0:fd:17:33:87:59:74:4c:af:e6:6d:3b:d2:85:79:d3:
de:b0:98:70:f5:35:9e:ba:31:31:08:c3:61:8f:7f:df:a6:f8:
46:ea:ef:ae:59:f2:bb:6e:14:a3:9e:f8:0c:97:3c:ec:9e:51:
e5:ca:d5:cd:17:81:4a:74:b8:d3:13:44:0a:0f:eb:31:76:0d:
11:70:4d:07:84:13:4c:b1:9b:ba:8b:97:bf:75:c0:bd:9e:b4:
40:38:58:86:c3:06:cf:1f:e6:d0:77:0d:a0:15:a4:70:87:8a:
c7:b0:ce:36:00:f0:8e:63:6e:11:3b:18:ab:00:e6:3f:f6:63:
db:38:b3:01:df:af:76:0e:cc:fc:02:ce:16:a8:41:34:01:02:
c2:91:a7:9b:96:cf:0b:3e:88:56:b8:bc:83:ba:1b:d5:16:45:
9e:e9:b1:cc:a9:12:f5:b9:ee:87:c7:fb:9c:8e:62:fb:12:a8:
c3:e3:79:d6:fd:e3:1d:d3:92:8e:f2:49:5b:b5:f5:6a:79:a5:
db:1b:93:f5:69:ba:ea:8e:8c:b1:d5:1a:02:bd:a1:e4:3d:4c:
da:9b:ff:53:5e:88:e1:76:93:21:6f:42:6e:11:3a:3f:71:4a:
15:96:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:08:26 2025 by rpki-client