Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc649e3-c686-32c6-85ba-100b006e900e.roa
File: 1bc649e3-c686-32c6-85ba-100b006e900e.roa (raw, json)
Hash identifier: WbAthQ9uQ9M5C2BkOTDmxUw953BIQiGmv/Y5x8Z+e5A=
Subject key identifier: 43:A8:6A:84:79:13:25:03:87:29:BC:BC:52:61:A0:69:A9:E4:6B:00
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4DD37E5A1DD397BAD9C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc649e3-c686-32c6-85ba-100b006e900e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.194.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:dd:37:e5:a1:dd:39:7b:ad:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=04e1c9bd-7480-4078-8071-143abb57f2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:5c:28:35:f9:b1:f4:f5:c0:55:55:51:83:
b5:66:56:0e:6e:3f:59:e5:e6:08:48:7c:2d:ac:47:
b4:6a:77:95:91:05:dc:a4:f1:44:d3:88:f9:33:76:
31:f1:97:6b:28:99:55:f3:4c:52:f7:f5:22:27:a0:
c3:13:0a:35:91:47:0b:66:42:72:27:e3:67:f2:72:
e9:80:38:c8:6f:4d:85:62:9f:e4:83:2c:0f:ec:4e:
d2:48:8d:3d:b0:f3:da:2c:da:20:35:78:6f:3a:f9:
a4:e9:ea:56:ae:ff:55:23:e7:ba:ca:f3:29:7e:c4:
03:b1:3b:d4:09:a3:2e:93:75:50:45:8b:ee:84:36:
e0:4b:a3:8a:7e:43:7b:39:73:98:07:cb:72:9a:06:
9f:4d:27:d6:5b:6e:36:53:11:ac:ce:b6:99:e3:ec:
bd:7b:cb:f6:e8:c6:bf:b2:d0:6d:e7:61:91:3e:31:
5c:44:ef:b0:da:0f:c4:f3:87:99:3e:5a:93:f5:1f:
55:1a:7c:ba:c8:79:66:5b:5b:46:3d:21:dd:66:65:
90:0c:e4:da:7a:0f:6c:85:32:30:f9:57:93:f4:98:
98:f8:b1:3e:85:37:60:5c:ba:5e:c8:93:5f:5d:13:
42:4d:7c:ec:b2:93:b5:b0:5b:a7:fa:f4:2e:0c:56:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A8:6A:84:79:13:25:03:87:29:BC:BC:52:61:A0:69:A9:E4:6B:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1bc649e3-c686-32c6-85ba-100b006e900e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:13:c1:95:57:93:23:f5:74:9b:ca:5d:96:6b:d4:f5:51:1f:
f0:45:ea:7c:e1:f9:00:c0:64:af:80:fc:b7:58:36:37:6e:03:
73:13:94:32:80:08:59:19:c8:61:1e:66:1a:30:98:d8:05:29:
e2:77:72:9c:f3:f8:34:cb:19:eb:eb:d1:be:ed:67:9f:96:89:
5f:2e:b1:bc:dd:45:37:fd:fa:78:5f:54:66:fa:7b:6b:67:0c:
b6:93:06:7a:b4:12:04:1b:21:33:47:ae:6c:a8:95:21:20:ca:
ba:b9:68:1b:92:71:91:c4:9c:77:4d:27:bd:eb:cc:39:3a:1e:
d9:6e:69:f2:b1:b8:81:06:0c:6e:bf:b6:11:b4:33:45:0e:1b:
b1:c5:88:f0:5b:07:6e:39:47:d5:40:ca:48:6a:1e:6a:a6:09:
a1:1e:8a:ed:76:e9:2a:3f:1c:92:c8:b7:14:bf:d4:72:e6:40:
d5:ce:de:dc:5a:9e:5d:27:9f:d5:d5:30:d4:0f:55:ae:6d:e9:
c9:82:43:ec:04:52:ad:7f:14:e3:92:57:c1:f1:a7:17:a6:ec:
f4:99:97:65:20:ec:77:b7:38:1b:34:ad:53:14:5f:c5:6f:0e:
3c:54:dc:f4:18:49:1c:df:93:48:ab:92:ab:ef:73:72:aa:34:
23:4e:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:07 2025 by rpki-client