Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14d651bd-49b9-3123-b683-12fe6b38f610.roa
File: 14d651bd-49b9-3123-b683-12fe6b38f610.roa (raw, json)
Hash identifier: n+LVdF2474UuqXP7/2MpnkwQ55K85XwKumjKlafXUQM=
Subject key identifier: 35:79:02:A1:21:B6:CF:2C:37:7C:64:ED:21:82:8B:FB:E8:C8:DC:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52664B9BD0C50C52C3880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14d651bd-49b9-3123-b683-12fe6b38f610.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.186.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:26:64:b9:bd:0c:50:c5:2c:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=fcc6c229-01a4-49b5-ad75-083a7b816b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:7e:84:1a:2d:da:ba:76:44:9a:17:2c:d5:
ba:75:1b:f4:76:02:59:85:05:32:87:cf:b3:9d:57:
a4:ef:7f:f5:c9:de:cf:0e:1c:a7:15:c8:59:bc:5b:
aa:d6:b8:64:ea:00:85:a3:29:44:6e:eb:d0:52:c7:
58:d4:35:9a:2e:a7:df:ff:f7:b2:e8:3a:df:ff:02:
a5:2d:19:af:5a:13:65:f3:1b:88:a2:42:8b:da:fa:
c5:57:ec:70:65:97:12:3b:f6:a6:ad:a1:2f:34:b3:
c2:32:99:b7:b7:2b:86:9c:84:0f:f7:53:8f:3b:26:
de:25:be:af:46:f5:53:9d:ae:98:a6:f5:2a:80:d6:
34:71:b0:45:27:ef:2c:d3:d0:e6:87:a3:b4:ac:b9:
f1:ea:de:96:f9:d2:8f:cc:65:dd:7b:6a:cb:08:c5:
ec:d6:a5:b7:d7:aa:56:20:c0:3a:2d:fe:8e:b8:c6:
86:db:8a:bd:57:5e:15:bd:7b:95:ca:29:c8:d6:af:
fb:9e:f1:e8:50:14:0b:71:26:33:2e:39:4e:09:91:
11:09:70:54:05:13:16:1f:a0:70:57:97:e0:76:14:
74:39:62:60:74:ac:5d:0b:b0:45:7e:5b:6d:17:e5:
06:9e:ea:fc:90:f1:94:2a:9d:38:49:c6:fc:01:61:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:02:A1:21:B6:CF:2C:37:7C:64:ED:21:82:8B:FB:E8:C8:DC:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14d651bd-49b9-3123-b683-12fe6b38f610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.186.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:9b:1c:17:f3:6c:bd:df:95:69:44:d2:cd:3a:7e:c2:2f:b8:
74:58:65:c0:43:2d:79:d6:6c:98:91:2f:35:09:48:be:a2:2b:
e7:08:90:2c:cb:90:ce:97:db:72:d9:f6:6b:28:4e:2a:84:65:
69:17:d4:88:e7:4f:9f:1c:ce:2f:7f:0b:50:d8:11:50:6e:47:
2e:e6:7c:dd:f7:61:f0:88:82:99:43:e2:05:57:20:e4:49:70:
0d:0a:2d:3b:55:17:44:9e:32:94:e9:fa:c7:ce:75:4e:41:f3:
53:13:11:02:d1:56:e5:43:7e:e2:f2:19:45:c1:16:16:3d:40:
d1:ac:08:68:7c:c6:dc:e6:46:fc:8e:89:29:4e:ec:78:d1:f7:
3d:0a:cb:0b:d4:d3:41:77:44:8b:33:57:1a:5c:8a:4d:92:f5:
80:b6:87:f7:2b:0b:db:30:cf:44:3d:9d:2e:5d:f6:34:53:49:
a2:8c:f7:20:b4:09:d2:96:8d:f9:51:89:59:79:56:7e:38:a8:
c0:0f:cf:bf:f3:f3:88:6f:fb:35:7c:a6:2b:d8:92:32:76:bd:
19:fd:23:fc:c2:41:ba:89:fd:f7:be:d1:66:e4:32:29:b1:94:
4b:b5:ac:b7:9c:a4:51:c1:ed:e2:1f:21:00:1d:75:a3:26:30:
ec:42:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:23 2025 by rpki-client