Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa
File: 17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa (raw, json)
Hash identifier: PoznjBnkieqL6yMoRKIwzuJzD8FwRuvJhHiifZ8ZRgs=
Subject key identifier: 49:7F:5E:1D:98:FF:37:EE:CB:7E:48:71:BE:5A:9F:38:A4:3C:57:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F506E838B0E6E6C2069580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.198.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:06:e8:38:b0:e6:e6:c2:06:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5228d2f0-9744-4e45-8b56-0307b78237bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:6e:77:d6:da:61:c0:ce:88:9c:81:94:59:
92:55:b8:6a:a4:2f:dd:3a:e8:5c:df:ef:2b:79:e1:
de:49:f3:ee:1f:09:cf:6a:88:d0:58:ae:06:23:ae:
a7:50:8a:c2:6e:32:20:ad:65:a6:f0:b5:66:38:5a:
27:04:02:cd:1b:11:9b:d6:d7:d1:10:6e:bf:79:27:
35:b8:00:a9:08:ac:45:a6:fc:14:bd:fc:6a:d9:ed:
e2:f8:22:a4:b9:d3:00:a7:0b:44:73:fe:af:ef:c3:
5e:a0:0c:21:0b:05:9f:6a:86:87:7b:4b:17:0c:6d:
3c:94:e6:31:17:f5:06:51:42:a3:9f:29:b8:18:0b:
53:a9:08:87:15:11:8c:cc:2b:11:41:f6:14:81:69:
d0:c0:da:19:20:56:a8:44:30:7f:6a:b7:8c:d7:4b:
f9:36:25:a6:2a:fe:2f:e9:35:a8:0e:d7:28:64:48:
64:99:f9:5b:32:3c:4e:cd:68:ac:d0:99:ee:66:ad:
1b:64:94:55:cf:7b:52:c1:e2:ce:e6:a4:86:81:50:
e8:9e:f1:0c:d6:ee:4d:da:91:95:ff:11:59:b9:6d:
da:65:57:36:9d:b1:6f:cf:1c:1c:5b:83:44:ca:ba:
c5:57:f6:cc:e3:64:90:b6:ec:6a:0d:63:16:17:10:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:5E:1D:98:FF:37:EE:CB:7E:48:71:BE:5A:9F:38:A4:3C:57:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:0b:2f:c0:15:c3:fd:01:a4:0c:29:b7:68:83:92:1d:ef:7e:
52:95:b5:6f:b6:71:07:f3:1f:c6:6d:f7:25:00:54:7a:db:fc:
82:1b:93:18:44:67:e2:65:d7:96:ed:2e:93:27:9a:84:c1:d3:
f2:ae:b1:86:9f:ef:ed:ee:fa:b2:0e:b4:80:c7:e4:16:7b:30:
e0:21:d0:af:22:53:05:ea:a2:f7:42:f5:0c:be:58:f4:37:28:
45:7c:b8:a0:49:5d:0c:d5:3e:37:32:82:f8:ef:6f:4a:33:03:
0c:df:3a:82:95:60:6d:c3:54:ee:2f:62:81:6f:25:66:69:96:
15:4d:79:b4:de:1c:09:76:fc:52:19:a1:5e:9f:d5:6e:01:3a:
f8:88:09:30:ff:04:96:05:52:7f:7c:79:de:a6:40:c7:9d:92:
c4:62:36:49:ab:56:28:00:d2:93:2b:9c:29:d2:1f:1d:fd:e5:
e3:d3:4a:d6:18:e7:79:f2:27:b3:3f:02:25:ab:da:dd:82:2b:
b4:a3:72:5b:83:bb:37:43:51:62:a3:58:03:a5:c7:10:16:ac:
ee:c1:23:08:74:e7:91:73:19:61:b0:04:b3:74:71:2f:e2:57:
ad:92:d0:c6:37:7e:95:a0:ce:a7:c8:46:c3:91:20:c7:b9:80:
2d:06:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:33 2025 by rpki-client