Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/286327ed-f691-380a-9246-ffc706a1ebf1.roa
File: 286327ed-f691-380a-9246-ffc706a1ebf1.roa (raw, json)
Hash identifier: 1qRSSyztpLVkKTOKVB6Iw7V3L5mT8vNX6Hjgu86YujI=
Subject key identifier: 64:AA:0C:6E:9A:72:1C:95:FA:DA:AA:05:3B:66:E5:A9:E1:D2:3B:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F522EA985E14DF19305E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/286327ed-f691-380a-9246-ffc706a1ebf1.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.201.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:22:ea:98:5e:14:df:19:30:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f24b05ba-b55a-4da1-a43c-346ddc46f70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:56:e2:7e:87:6f:64:ca:c0:fe:0b:29:de:
cc:9f:06:53:94:9c:7e:1d:8a:8e:44:04:8c:7a:25:
d7:51:72:71:53:9a:96:e5:f7:52:a6:e8:56:10:17:
45:94:ed:1f:69:00:a7:28:d8:73:64:49:7f:bb:d3:
c6:f9:dd:fc:fc:b5:2b:57:92:92:e0:05:d7:a0:f2:
ec:fc:b8:79:44:d2:64:30:fe:4a:32:48:33:2c:2d:
ea:ff:ab:99:03:b5:39:34:44:dc:de:83:b7:df:7a:
53:b9:4c:f9:1a:e4:35:d3:d8:98:8f:ec:1e:bc:a8:
a8:ca:04:ef:c6:5b:18:21:4a:dd:9e:41:47:18:6c:
ea:15:14:7d:42:3d:26:7c:ba:2d:be:a5:6e:64:2c:
8d:99:80:ce:36:ec:8d:fe:d1:50:d9:65:cb:63:43:
64:13:6d:22:cb:68:7d:4f:3a:9a:59:1c:35:ac:6a:
a5:81:ae:6d:bd:f1:e9:9f:49:28:32:99:97:74:11:
90:20:3e:e8:bc:9b:ee:b0:93:32:e1:9a:f2:c1:3d:
2b:6d:6f:df:79:cc:2e:43:f8:a9:f3:8d:f4:9a:51:
21:a8:09:e7:51:98:72:dc:10:d5:6b:45:3a:9d:3c:
29:eb:05:aa:95:13:e4:c5:f3:e7:0d:f4:4a:e5:97:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:0C:6E:9A:72:1C:95:FA:DA:AA:05:3B:66:E5:A9:E1:D2:3B:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/286327ed-f691-380a-9246-ffc706a1ebf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.201.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:60:4d:2d:ab:a1:a6:82:b8:56:4c:28:83:df:3f:0f:50:21:
50:5f:dd:22:95:ca:38:ab:c8:35:97:0c:43:80:24:cb:86:b0:
2b:04:e2:9c:b7:a0:9d:17:4b:8d:81:2b:de:d2:c5:ed:b3:c4:
80:7d:6c:60:1e:41:6d:7d:6c:c7:a7:93:5f:59:4a:77:1e:7b:
8a:47:f9:fd:47:15:f5:2e:e8:bd:71:8f:3f:09:e9:d5:0b:85:
fe:0f:75:8f:62:a9:51:53:20:d4:84:d6:24:b9:b3:1e:cc:94:
26:17:31:1d:a7:7a:54:49:c1:03:03:7f:00:d6:5f:90:47:6d:
32:82:4e:f9:f6:29:08:74:be:f6:c6:e3:6f:3e:2a:91:a1:48:
fe:0d:91:32:76:2c:cb:1b:71:22:f5:7a:4d:a5:3d:8a:f6:20:
5c:45:28:b6:e3:ce:80:51:ce:ac:c9:e1:75:93:60:a0:f4:38:
2e:2a:e8:41:c6:c6:9d:d8:ec:c4:75:bb:8b:29:44:8b:c6:6a:
1c:b6:8b:9d:78:f7:e4:48:d6:8b:f8:62:88:23:90:58:8b:c1:
54:24:30:8e:4f:dd:34:90:cd:04:44:81:f8:d0:d7:eb:24:40:
36:31:f6:64:d8:4b:59:c9:85:21:f2:7d:fd:8a:f3:36:62:88:
ce:3f:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:49 2025 by rpki-client