Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa
File: 46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa (raw, json)
Hash identifier: NZKSuAbqoVdXPljQNw6PDRNIlGoqLFgG76Ws8I6Wl0k=
Subject key identifier: 33:A0:79:44:80:28:F5:0F:73:56:C6:4D:AA:6F:C9:BF:D1:23:1C:47
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5004AB076436477ECED00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.220.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:00:4a:b0:76:43:64:77:ec:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=9b27499c-bf89-4dc1-85d0-44f862a09e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:dc:7c:b0:eb:e1:a8:d2:59:b3:76:64:bd:
68:98:4a:0a:7b:40:1d:4e:b4:2c:e8:73:37:05:e1:
fb:1e:d2:7b:e8:31:81:ef:0e:1b:ae:01:2e:1f:27:
34:f9:76:5a:83:17:cf:62:42:0c:50:13:07:f4:38:
d8:fb:b4:6a:8c:80:a1:16:ce:58:15:5e:e6:ca:2f:
f4:c0:24:cd:5f:1e:38:a7:07:5d:1a:57:31:48:72:
82:22:0c:75:f4:6d:9a:00:81:78:05:88:4d:47:db:
e7:fd:42:c1:b2:87:49:12:79:bd:3f:3f:8a:d0:9d:
09:1f:84:24:fa:f3:f0:18:2e:27:8e:95:f6:f0:6e:
3e:74:1e:f2:28:48:09:8d:4a:f6:2e:58:e1:2f:de:
8b:f0:26:34:39:7c:50:79:8a:41:8e:4b:9c:68:24:
95:69:88:fe:4a:79:9c:b3:1f:90:d5:18:f6:c8:a8:
83:79:4f:23:64:05:2c:03:07:96:70:f2:c5:12:27:
43:5f:74:bd:e5:a3:f4:aa:e4:da:14:c8:eb:f7:d0:
6c:99:bb:15:93:45:fc:95:82:7d:49:c2:c3:27:de:
25:6d:f6:cd:39:5c:b6:aa:d9:7e:34:cc:28:48:65:
a8:a1:5e:93:51:7b:70:34:60:56:d0:44:b1:3c:61:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A0:79:44:80:28:F5:0F:73:56:C6:4D:AA:6F:C9:BF:D1:23:1C:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.220.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:a5:6f:2b:e2:f3:5e:52:41:c9:25:a8:36:e3:13:7d:75:27:
34:3d:bf:a1:68:f0:5a:4f:c6:91:45:32:b2:ac:df:86:2c:72:
d7:ef:a6:28:25:9a:3a:93:92:85:b1:68:82:ab:86:fb:c8:81:
c3:4e:1d:5e:f1:ed:75:a5:84:53:42:20:89:8e:9b:02:74:aa:
06:bc:44:17:e9:de:4a:18:b0:8f:cc:25:a8:1e:ce:6e:bc:68:
78:bb:fa:bf:98:52:f1:d4:32:c0:a4:d3:a3:9d:12:41:7e:25:
3c:f1:53:b1:93:67:e5:29:30:69:17:78:d1:cb:28:67:f2:ba:
d1:1e:94:fb:bc:87:85:9a:32:40:5b:84:66:b6:7c:1e:9b:41:
f0:41:20:ac:99:11:df:f4:94:2a:16:d3:c8:5f:f2:fe:ad:3c:
8f:f8:1f:3b:0f:77:d8:b4:e2:fc:0c:69:35:aa:9c:17:a8:2e:
3b:5d:d9:9b:0d:f5:9e:fb:77:db:8d:9f:52:b7:4b:41:5e:94:
a4:07:19:b6:af:4b:c1:70:d8:59:b4:28:e6:27:e4:af:28:31:
07:cd:9e:7b:32:1a:9c:01:3c:6c:3b:25:21:64:12:c9:1d:0a:
c8:4f:61:9d:0c:d1:89:38:93:14:a2:c3:88:1c:c3:d9:70:8e:
cb:1f:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:37 2025 by rpki-client