Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27ee7b9f-538a-3d65-9305-9b3d5401aa4b.roa
File: 27ee7b9f-538a-3d65-9305-9b3d5401aa4b.roa (raw, json)
Hash identifier: 5aZHz6/j5ddQ/B+FQgaEwIQ3gcZPdR6PUFB4vCFEM/Q=
Subject key identifier: 22:C9:36:EE:1F:B4:7D:76:FE:C9:09:0C:3B:94:23:9E:06:8B:A3:E0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F53FF9DF54FFAC5C4F0680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27ee7b9f-538a-3d65-9305-9b3d5401aa4b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.240.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:3f:f9:df:54:ff:ac:5c:4f:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=69e984bf-e956-44ac-854b-6f9ad18537cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:f5:33:eb:1c:f1:aa:18:98:f2:67:ba:0d:
48:6d:f0:ac:b7:bf:c5:c7:94:a9:1d:80:e0:2a:28:
4b:01:16:4d:70:de:e3:f4:2f:e0:0e:89:98:6a:b9:
d7:68:61:d0:b5:c5:b5:e8:7f:7f:47:db:4b:88:51:
f3:a9:7e:03:87:60:b4:e3:4c:19:d1:9c:13:0b:3a:
dd:e3:14:85:cb:ed:eb:20:26:2e:64:31:15:54:a5:
f8:85:b6:81:92:13:af:b1:d1:61:c5:8d:b3:dd:3f:
39:30:6c:d8:40:77:c6:83:f0:66:1f:e6:1e:61:b6:
85:3b:7a:8c:7d:6c:e3:b9:6f:39:73:74:f5:c2:49:
3b:f4:8c:b1:4e:b3:1d:dc:ff:3a:2a:ab:8f:20:05:
b5:9e:09:1c:e4:ee:de:7f:09:1f:5a:df:e5:00:3d:
bb:a6:8f:d8:4e:b1:3a:47:77:8a:9e:77:eb:68:1f:
8f:d7:01:9e:7a:29:87:58:83:22:4b:3b:7b:a1:2e:
fc:14:00:02:18:89:bc:6f:fe:ea:97:d0:d0:50:17:
30:12:a1:cc:b2:29:25:52:04:cb:2a:e6:e3:d1:be:
a7:b8:bb:02:ac:f2:e9:88:a7:99:3a:c6:3f:56:e5:
56:c2:2c:cd:2d:ea:b0:a0:54:83:bd:74:50:f6:02:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:36:EE:1F:B4:7D:76:FE:C9:09:0C:3B:94:23:9E:06:8B:A3:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27ee7b9f-538a-3d65-9305-9b3d5401aa4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:d1:74:d1:af:08:23:70:eb:a1:1e:68:0c:cd:69:37:65:88:
81:e2:d9:72:1f:27:1f:b3:c4:a4:65:97:b0:4e:2f:3b:10:31:
46:b1:a9:60:f6:f9:98:61:62:c3:b9:e6:da:16:c7:9a:0e:0b:
79:71:2a:ea:8b:48:17:ed:e2:ef:9d:f7:9d:2a:5a:5f:89:da:
10:76:86:dd:74:5a:96:f0:f2:a2:78:1d:f5:af:76:e2:6b:ef:
9d:8e:bf:fc:43:c0:93:b9:91:fa:9a:57:b2:5b:b8:21:61:9c:
af:45:e2:ef:5a:1c:3a:91:e6:72:dd:5d:ef:69:8f:3b:05:ba:
9a:28:b6:c8:7b:71:5c:10:29:e6:18:f0:ec:31:01:a3:ec:6b:
7f:ad:0d:5b:d9:13:bd:14:9b:34:be:e6:70:fd:21:db:0c:d5:
0f:71:ec:84:f4:d6:48:d0:b0:24:38:a4:e5:3f:62:0e:e7:23:
47:37:fe:12:fb:35:70:6e:21:92:f9:05:91:ff:20:e8:4b:1a:
ae:5f:50:9a:1f:e4:72:6d:12:ee:f9:43:cd:23:aa:02:d2:fc:
5a:61:b5:ac:2e:29:a0:32:ca:7c:09:98:54:7a:f3:3e:64:70:
d1:7b:5f:06:c5:56:1a:fb:9e:cc:2c:d1:c1:a8:d0:58:33:d7:
dc:d2:eb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:22 2025 by rpki-client