Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3822e1bd-124a-3706-923f-59c9217ee90b.roa
File: 3822e1bd-124a-3706-923f-59c9217ee90b.roa (raw, json)
Hash identifier: T2gOvjz0lFPKKG7Tp8zuH1R4mpX9a9dG2aXqTAq+KtY=
Subject key identifier: 68:9C:1D:3A:89:6B:05:FB:93:D1:10:DD:44:37:8A:37:7A:CD:C0:50
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F529CBE779F4B5E6DB9E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3822e1bd-124a-3706-923f-59c9217ee90b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.196.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:29:cb:e7:79:f4:b5:e6:db:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=2c98ddd4-a0ea-4121-8060-ca69ea1174de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:92:28:04:3d:30:02:dd:39:53:e2:e6:80:
5b:78:f9:0e:58:67:25:ff:63:26:10:43:be:53:41:
40:de:c7:f8:a8:2b:e3:cf:90:82:48:2a:3f:fd:e4:
23:79:5c:21:70:bc:6e:ec:81:36:21:ae:2a:06:21:
83:0f:a8:f0:c9:8f:ae:aa:07:0c:75:25:7f:01:38:
6d:b0:33:b6:7c:7f:82:a8:73:46:be:02:05:9d:04:
3f:fd:b0:1e:62:0d:e1:3f:c9:1b:44:c9:b6:46:f1:
08:e1:c8:58:79:e6:70:d1:1a:1b:b5:ab:72:05:3f:
83:3f:da:73:ef:52:b8:f9:05:08:73:31:8c:40:2a:
54:69:ba:7b:d3:e5:c0:c5:f9:bf:35:6c:df:c2:3f:
ba:38:ae:ec:98:30:ff:c9:b8:f8:ae:b6:8f:a8:10:
93:fd:4e:72:18:45:0d:cb:36:f6:9b:6b:ed:7c:ec:
88:63:7d:f1:72:8a:28:39:11:9c:43:db:52:3a:b4:
01:af:6a:ca:80:73:21:37:76:aa:4a:2c:e9:76:77:
05:2c:1e:19:0a:f8:72:38:70:ef:fa:3e:d5:a5:e2:
17:13:87:f9:18:16:c4:de:4c:b7:a8:18:0a:c9:d3:
f1:68:f0:70:9f:80:48:48:6b:6d:74:12:c1:1b:93:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:1D:3A:89:6B:05:FB:93:D1:10:DD:44:37:8A:37:7A:CD:C0:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3822e1bd-124a-3706-923f-59c9217ee90b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ab:d7:d4:12:64:0b:b4:0f:1e:fe:17:30:a8:1d:72:f7:3a:
85:bf:07:73:32:df:2b:b8:3b:3d:86:2a:da:84:aa:3d:0e:c1:
c6:6e:c6:77:2c:9a:e4:b1:26:fe:4e:bc:12:45:de:d6:d0:69:
68:da:0a:12:0a:0a:3e:38:e3:3c:07:a9:e5:30:58:12:f5:05:
32:63:0b:ff:b4:44:21:40:c8:09:8b:ed:ed:ee:26:ab:9b:40:
a5:c7:b1:37:dd:02:c1:89:6d:5f:7d:76:45:c0:36:ab:83:54:
1e:92:0a:dd:97:1b:53:eb:a9:fd:bb:e8:1e:a1:84:bf:08:b1:
53:f8:9a:cb:4e:ae:a7:ee:13:be:8d:e8:4d:56:80:60:84:21:
0f:48:ca:0b:9f:51:9c:d4:f2:41:18:9f:fb:ff:80:c1:2a:68:
2a:b5:f9:69:10:8f:99:e8:7b:57:10:9f:c2:90:24:9e:2d:86:
6e:c7:63:2b:e7:8c:62:9b:f4:f7:10:ad:8a:b9:d7:85:39:73:
d9:33:a6:16:72:1f:be:e5:3b:8a:a5:f8:3a:82:7a:5a:43:53:
c5:34:15:a7:1e:d9:f9:5d:cd:9e:21:ee:25:9f:ad:0e:05:a5:
c6:6c:af:ac:e9:c6:4f:b4:1f:2f:24:39:90:61:d3:53:d8:b1:
6d:61:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:55 2025 by rpki-client