Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa
File: 2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa (raw, json)
Hash identifier: 2SOxno25otY+kG7I3fbdA8gDJgGZMnf+xTfjcuw0xZ0=
Subject key identifier: C3:6A:0C:96:AB:F3:EC:31:4D:89:65:3C:F9:8D:AA:A3:6D:79:19:E9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4EA9F5FF743D579F70FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.197.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:ea:9f:5f:f7:43:d5:79:f7:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=c795af47-1afd-489a-bade-a78d0daa7943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:1a:1a:e1:98:85:e3:2e:a8:15:50:e2:48:
c8:6a:99:b0:8b:d5:1c:c1:66:d2:f6:3a:6d:63:52:
18:da:0c:16:12:bb:10:d2:07:20:66:e9:13:42:a4:
00:18:1b:7b:ca:ef:91:df:24:d7:e9:81:8e:3c:4e:
98:51:93:a7:7d:6a:85:55:9a:4e:b0:83:2f:7f:d2:
f3:94:09:0a:76:21:a7:ad:06:a4:e0:04:94:5b:ff:
cc:9e:12:6b:f2:38:eb:b2:ce:b7:9b:e7:83:03:f4:
21:fb:74:9c:39:e1:00:68:84:73:96:d7:49:aa:5c:
29:9e:77:52:90:c9:40:7f:b0:fa:aa:08:be:5d:a5:
90:41:f7:a3:50:f0:42:59:93:8b:bd:66:76:f4:1e:
8c:cf:10:27:b0:70:97:4a:28:bb:a0:b9:76:13:db:
ae:c9:eb:00:d7:23:20:eb:29:94:d3:b7:f9:fa:0a:
93:18:e9:0e:32:92:27:72:17:85:bf:6b:5b:03:2f:
4d:4b:3c:e8:7c:c5:b5:1c:01:fa:85:c9:b3:3b:20:
f4:4e:af:aa:51:f6:b2:9c:76:c1:1f:6a:90:8c:df:
be:aa:f8:dd:55:8d:68:85:8c:37:be:e3:9e:60:63:
15:cc:6f:1f:5a:b5:81:9f:dc:b7:a2:5b:46:14:3d:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6A:0C:96:AB:F3:EC:31:4D:89:65:3C:F9:8D:AA:A3:6D:79:19:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf59c82-1e39-3453-aa9d-66f5dda1b66a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.197.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:fc:45:4c:d0:ee:15:17:48:a6:6c:4a:e3:59:5d:10:46:e9:
95:e1:d8:9a:92:7d:f5:e4:45:49:84:ec:7a:70:03:41:fa:bb:
d6:8e:52:b2:fb:28:0b:5c:2d:93:e3:a1:5c:95:ba:82:75:b5:
6d:f5:c3:fa:b4:fb:0e:20:93:a4:7e:75:bc:93:6a:a4:b6:8d:
1f:ee:1e:af:18:60:26:63:a6:6a:dd:10:10:8a:cb:cd:1b:be:
2d:5e:44:bb:a2:3d:f7:9d:a0:70:a0:c0:88:d0:8c:8c:d7:48:
03:7f:6a:69:bd:4f:29:4c:9f:61:23:32:ff:d2:72:1b:c1:e9:
e2:89:aa:b5:0f:25:2c:d1:5d:87:ba:e1:42:4a:d6:24:3a:4c:
49:d7:cc:8e:43:8e:0c:bf:28:3a:1b:e7:57:df:9d:f1:f3:1a:
b4:00:a1:7f:4c:99:63:a1:e5:48:b3:7f:43:34:dd:9b:56:c0:
2b:f8:cd:d0:2b:8f:5f:68:f9:a0:92:53:73:b0:09:6d:2d:f8:
a7:8d:ac:84:a8:be:7f:04:13:3e:5e:c7:6f:5d:61:53:f0:7a:
fb:de:9c:9c:90:6e:81:1e:58:21:bb:3d:f5:6b:af:3a:da:0c:
53:84:68:a2:c4:88:92:de:81:3c:9c:06:02:b9:d1:3f:ae:c2:
75:e5:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:26:09 2025 by rpki-client