Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa
File: d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa (raw, json)
Hash identifier: 0zSm3M/oyEqUk1wS1iGcTuDBKa84iBpp1rnoVghc7CI=
Subject key identifier: DB:49:7B:6B:2F:60:3C:6A:50:88:E1:60:03:F2:84:23:00:6C:96:96
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F43285848960B559C1853B3C82C73F240
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 27274
IP address blocks: 35.32.0.0/16 maxlen: 16
35.33.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:55:9c:18:53:b3:c8:2c:73:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=39ca9c28-8463-4f00-a7dc-b19982ecbff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:03:76:ca:ce:14:c7:04:3f:90:e5:24:53:
d3:ec:d7:38:b8:7f:bd:0a:fe:3c:ea:f2:a7:90:88:
0e:05:7a:78:d6:5c:02:d1:87:c6:f5:b9:5e:db:26:
1f:51:fd:04:95:43:2f:b3:fa:9a:20:31:56:74:5d:
85:bf:05:5a:ff:38:36:7a:e9:40:e1:a6:03:75:c5:
59:4e:f7:7f:a7:68:45:14:9c:6e:a0:8c:aa:49:d5:
da:b3:57:91:51:69:51:c6:02:d1:f4:25:90:7b:fc:
aa:c2:90:a8:26:68:c1:2f:f1:4f:d6:ac:dd:d2:43:
5a:8e:29:86:82:bb:be:16:78:13:9f:af:90:17:21:
27:21:9a:d7:a2:16:30:33:92:2b:0d:ea:39:71:7a:
99:89:dc:73:5f:bf:76:8f:8a:b4:27:f3:b8:88:6c:
17:d2:b5:ae:83:14:54:bb:59:87:c6:c3:77:c8:75:
b8:30:ba:96:73:7e:9d:74:82:c6:1b:d1:52:d3:5f:
e2:54:03:38:92:61:26:5e:21:58:e4:0d:b3:69:db:
66:64:2e:79:23:49:35:84:69:be:42:2a:9b:82:88:
3f:1b:4f:df:86:c0:ea:c7:29:ce:a7:46:3f:d9:c5:
d4:e4:50:7d:69:9e:21:0c:75:37:25:29:dd:75:c0:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:49:7B:6B:2F:60:3C:6A:50:88:E1:60:03:F2:84:23:00:6C:96:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/d598c65b-dd56-34f8-bbe0-4359b0c52b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.32.0.0/16
35.33.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:17:68:54:f9:bc:e5:6c:b0:53:ff:cd:8c:03:c3:97:1e:00:
ac:91:d0:d2:64:8c:ef:45:94:be:42:d4:66:10:74:c9:1b:76:
32:3c:02:e3:47:03:9b:f8:05:cb:63:5d:99:56:86:6a:8b:31:
ce:3f:5c:a1:46:25:54:4f:18:8a:eb:22:e0:7f:4e:6f:08:b8:
5b:8e:3f:bf:e8:01:d5:1a:b5:db:fb:4f:d9:63:92:02:46:a5:
54:15:bf:9c:f9:8e:fb:fa:fc:81:0f:10:5c:82:eb:dd:45:30:
83:42:35:e3:1c:51:7a:2a:29:9b:8c:c2:e5:de:d7:8c:05:cb:
88:31:b6:3b:19:31:84:a4:60:d8:5a:ff:9a:fe:19:7d:5e:fc:
d5:29:fb:6f:72:a3:fa:7d:40:e9:52:20:45:d9:75:c5:f5:22:
f5:76:b1:63:77:c8:19:f0:c8:c3:5b:f0:14:9b:96:08:71:36:
ec:92:9c:7b:92:30:cd:b2:38:3d:2d:c6:94:d9:7d:05:7b:8f:
a2:4b:94:19:83:5b:84:e7:c3:9c:7c:3b:56:73:78:2e:e6:4a:
ec:cd:f9:5c:08:04:ca:83:8e:f7:ac:e7:24:5d:a1:a7:63:40:
1b:5a:3a:ed:b9:cd:1b:34:5e:ac:cc:e8:92:54:7e:8d:43:d8:
5e:8e:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:45 2025 by rpki-client