Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa
File: 355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa (raw, json)
Hash identifier: p5c1myl0aFzUynDmaCnziWTWGzNG4YZVXaK99QsDWuc=
Subject key identifier: 22:9F:FB:23:4D:A9:24:F0:74:D1:8D:70:F8:69:6D:33:B2:B6:01:B6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F501A9FB6A726A6BF5D840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.228.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:01:a9:fb:6a:72:6a:6b:f5:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8c010803-6107-4459-aa15-0b3c6a93b7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:26:7c:e4:f4:ec:68:84:9f:9e:8e:dd:05:
3b:4e:d2:5e:cc:74:4e:05:65:32:aa:6a:dd:77:7e:
e5:22:ab:65:31:ea:52:08:47:e2:89:5e:2a:87:d7:
1f:7c:9b:1c:cb:12:f9:51:0d:2d:a1:1a:4d:14:56:
cc:5c:02:b7:4b:49:8f:29:99:be:01:d6:e6:3f:b9:
b0:7c:ab:b0:69:41:64:21:d9:cc:07:74:6a:99:ff:
55:4a:03:b5:ef:ca:9e:ba:d3:ef:c6:a9:71:c8:6d:
08:85:06:40:36:e4:32:37:62:dc:43:c2:dc:23:b6:
45:60:b0:13:b8:f0:b1:29:19:8b:89:fc:d0:0b:ae:
79:91:60:f9:a3:20:53:26:4e:cb:1c:19:0d:20:c4:
0b:41:ee:25:d1:ef:85:f9:ce:13:35:f2:6b:6c:4a:
af:26:d8:8f:c3:d4:88:61:8a:80:4b:cb:c1:64:0f:
b2:15:6c:5d:cb:1e:6f:8e:8c:39:49:01:27:03:2f:
ef:27:ec:c1:59:b7:e2:ba:58:27:1b:90:9e:54:e2:
28:8e:56:cb:95:54:19:a8:54:e6:b1:83:85:a7:1f:
8e:a6:26:c4:72:76:bd:0e:04:75:11:4d:36:60:4a:
35:60:d0:22:8d:76:9c:db:ad:1e:33:87:6e:1a:c6:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:FB:23:4D:A9:24:F0:74:D1:8D:70:F8:69:6D:33:B2:B6:01:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:5e:2c:be:b5:28:46:90:7d:72:e7:77:80:48:5f:8f:71:af:
bc:ae:c4:75:ca:c1:d5:b9:fd:39:fa:23:16:28:a7:9c:e9:76:
4e:7e:aa:b5:6d:f7:97:23:37:12:72:ff:cb:17:84:bd:38:2e:
36:ad:9e:a5:6b:bf:b3:53:8f:cc:5b:b6:d0:6b:70:7f:97:0b:
5c:fd:04:0f:43:5c:15:2f:03:07:c2:32:bc:68:f0:5b:b6:c8:
ec:e3:94:c0:70:50:a9:2c:94:dc:99:93:c1:34:17:0b:eb:12:
ba:6b:ca:0a:a5:35:ee:97:f4:ec:31:28:2c:c8:19:ff:46:1e:
7e:34:a5:5e:2e:53:89:24:40:e3:f4:16:f9:22:d6:f5:20:6f:
11:c5:e6:ec:f9:00:5f:0b:c2:cc:d7:4a:1f:e8:dc:17:b4:b3:
dd:04:46:c0:ab:75:c5:de:a8:5c:5a:ee:c5:af:b1:56:8a:70:
df:36:b8:3f:e4:41:a1:f9:9d:a9:80:2e:40:98:6d:91:e2:c5:
85:78:6f:1a:ce:3d:6f:1c:62:0e:67:57:0b:f8:e0:a5:a9:bf:
b8:b9:9c:27:42:ae:e8:47:de:67:50:7c:e9:73:78:01:69:d0:
46:6b:6b:c6:d5:68:24:9e:e8:59:6e:1e:72:ba:00:87:1c:7f:
fe:c6:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:56 2025 by rpki-client