Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa
File: 2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa (raw, json)
Hash identifier: a6MnBoN68UyPI6U8uKvZDz/idjCFsceXN8n6QYpTDtY=
Subject key identifier: E4:E4:39:5B:37:EF:2F:0E:5F:82:88:B0:62:E8:4E:25:72:36:0D:57
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52D8686BAF22C82E44480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.245.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:2d:86:86:ba:f2:2c:82:e4:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=dec3c0e9-2ed3-4b78-9927-84c16cf396c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:a4:e9:e9:1f:67:7f:a8:79:95:c8:5b:df:
e9:36:6c:7a:54:2d:9a:0c:78:40:ae:82:80:9e:37:
e9:c7:d3:e5:d4:64:56:1b:4a:c8:9e:81:85:52:82:
50:bb:98:cc:59:05:ba:3b:88:fb:1c:a1:2a:f3:b8:
cc:d1:5f:12:74:eb:2c:8f:b5:a6:e5:c9:12:12:20:
fa:6a:14:37:03:b3:40:fc:26:3a:be:56:39:2a:8c:
47:03:b4:03:ec:91:df:27:01:34:d9:8a:e3:9a:b1:
2e:cf:87:61:85:20:ac:58:54:fe:6a:1d:50:30:ff:
54:a0:b6:da:f0:10:0d:9a:74:95:f7:06:e4:19:72:
49:fd:31:01:f5:b8:3f:91:c3:d0:a2:51:bb:30:af:
c5:57:71:46:0a:f8:73:04:82:ec:b0:01:96:aa:02:
d2:e0:13:fc:17:88:b5:2d:61:b0:a4:89:36:7e:fd:
6c:c7:c1:44:c5:46:ed:5c:aa:08:ff:73:17:fe:63:
f0:ee:61:d6:03:3d:b5:7a:5f:0f:54:b0:9c:be:71:
3d:db:b3:81:38:4f:0c:d1:4d:ee:dd:c3:1e:49:1b:
23:be:eb:7c:b9:fc:e4:bc:8c:1f:03:e6:0f:54:b5:
46:78:4e:41:9a:da:6d:c0:bb:bc:99:d2:7b:d2:c6:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:39:5B:37:EF:2F:0E:5F:82:88:B0:62:E8:4E:25:72:36:0D:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2405ae79-5af1-3a8f-802c-a85caa8f00d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:bd:21:18:69:3c:fc:5c:5f:21:b2:0f:69:9a:46:6d:cb:bf:
30:4e:af:d1:8b:43:d9:44:a5:04:6c:2b:cb:53:80:8c:ef:28:
41:1f:8e:14:fa:a0:39:b8:eb:a6:3d:45:59:c9:a6:34:29:55:
fa:08:d1:32:4c:76:4d:64:92:db:e6:4f:1b:a9:95:87:b4:aa:
4e:bd:27:e8:ed:10:aa:14:26:40:ff:86:66:4c:2f:f8:72:f2:
dd:bd:1d:8b:b5:9c:63:53:d5:81:cc:24:62:fc:98:0a:65:3c:
e1:da:d3:b9:eb:c3:df:4a:e1:91:2e:35:f7:7c:89:38:c9:12:
8d:6c:f8:7c:a9:39:cf:bc:7b:82:cf:7f:59:8e:cd:2e:3f:9a:
8f:7e:98:ed:a0:6f:9e:65:65:6f:5a:67:a6:4b:4e:df:3f:7d:
3a:4d:62:2f:9a:04:c5:34:e2:30:ee:a5:09:82:d0:a3:84:0d:
96:9c:f9:f2:ec:57:f5:18:26:c6:54:42:24:a9:c3:f1:0b:1d:
22:5f:f4:4c:46:14:f6:76:0b:92:94:68:f4:5e:50:bf:37:48:
a0:3e:33:f4:b9:52:a5:16:7b:0d:66:a6:f2:9d:57:58:bf:0a:
2e:42:23:af:ae:ae:a5:9b:b5:83:06:1f:57:4d:15:57:93:29:
dc:50:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:43 2025 by rpki-client