Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa
File: 06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa (raw, json)
Hash identifier: k+ROVMLJ2DiCcjQrHP3v539+HUlMwE94+6scyBUxcj8=
Subject key identifier: BF:43:3E:1C:B7:F8:60:4E:23:A0:FF:34:D3:0A:B4:73:3B:36:0B:93
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4CF0FEC8628C510B1B780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.198.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:cf:0f:ec:86:28:c5:10:b1:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=a56808f3-e663-4e26-8eb5-4d6d2d1d6b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:0b:f6:5e:28:da:7c:c5:62:51:0b:2c:03:
27:52:0b:40:5c:33:c0:9f:3d:9a:d5:e9:ce:83:5e:
13:18:4d:95:85:07:f7:77:db:79:b7:79:cc:db:82:
60:27:aa:37:48:e0:a1:59:d9:a0:93:18:e3:5d:c3:
91:f2:33:d4:b3:dc:d7:e4:dd:20:16:31:25:84:8e:
7e:b1:91:ca:ae:fc:e8:b6:ab:35:bb:6f:f0:40:09:
1b:95:8d:0d:16:62:02:20:88:02:60:ce:f3:2a:c3:
ea:c3:96:bd:a3:f9:6b:98:29:3c:ef:3e:e5:e8:62:
40:76:dc:03:33:82:15:4a:e0:e8:7b:53:ef:f4:63:
d6:f7:1c:17:db:bc:bd:ec:cb:ce:a9:c8:83:d9:1a:
2a:fd:6c:d5:50:9a:38:11:54:7c:d2:60:29:57:f7:
5c:d4:4e:f3:20:91:58:5c:0a:cf:51:06:8d:8d:ee:
1c:3b:c0:37:12:ed:d1:10:72:03:e2:2c:5b:fd:d0:
b3:26:4c:aa:12:c6:44:1c:9c:08:db:8e:50:ce:00:
e5:76:88:16:c2:f0:2b:76:01:cb:6e:90:f9:4a:c8:
7d:82:4a:c9:8f:a6:50:c3:2f:c6:c1:0b:17:de:f3:
47:b9:dd:73:36:7f:ae:50:98:22:9e:ad:8c:2c:89:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:3E:1C:B7:F8:60:4E:23:A0:FF:34:D3:0A:B4:73:3B:36:0B:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:65:f1:aa:4f:8d:55:bb:78:65:05:9c:81:f3:34:44:79:78:
8a:a8:81:f2:54:eb:92:99:c9:54:f7:26:4c:f6:2e:56:13:b2:
5a:fa:dd:07:49:25:70:9e:7d:8d:6a:0c:dc:c2:e1:3c:52:a4:
13:71:40:c6:47:b0:a6:7a:82:0e:6d:46:0c:80:39:45:56:09:
68:33:4e:f6:cf:b4:a8:1f:60:03:db:c5:14:c4:9c:0b:15:69:
66:7b:2c:f8:55:2a:82:d6:ac:88:26:53:3d:fa:f5:db:44:08:
04:e8:27:dd:15:be:5f:6f:48:0b:fc:6a:fc:ef:73:2d:da:9a:
55:64:75:6f:f6:c5:4a:ca:68:d0:ab:b2:dc:96:1d:b6:67:fb:
b8:67:5a:6b:d5:63:46:56:38:d5:fe:f7:ad:ee:13:e4:02:32:
bc:0c:63:d6:fc:fe:76:17:31:1c:73:f8:39:c2:60:e2:c3:e3:
60:05:0d:1a:54:e4:1f:d0:c3:32:05:b2:44:3e:86:6c:73:7d:
89:62:02:af:94:66:cf:a2:91:bd:cd:91:0f:d1:89:65:0f:3e:
be:eb:71:f7:9e:78:76:c6:37:39:4c:7a:cc:89:c9:fc:f2:69:
bd:9b:fb:59:59:53:07:c4:bd:11:92:ea:1e:22:58:85:c3:60:
45:ed:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:23 2025 by rpki-client