Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa
File: 4867dc89-6f52-3a23-9d9c-4e26531651da.roa (raw, json)
Hash identifier: d8xfUbLLcxmQvrZKEzdEdbzxbXbE/GN+ARKFe2Ecmxk=
Subject key identifier: 71:1C:27:01:3D:C6:40:54:40:49:6D:4F:BC:8E:A7:2A:76:B9:93:6C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4FCA53285C0179D0D5940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.235.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:fc:a5:32:85:c0:17:9d:0d:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5e6e13f1-0aa2-4f4e-8988-0427679278be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:46:36:b9:2b:d0:41:55:46:33:af:8f:5d:
d6:d8:94:97:b2:15:93:fa:4c:c1:f5:9c:d8:a7:be:
92:d2:5e:6e:bc:14:d8:2c:fc:0f:7d:f4:e1:72:88:
a9:12:cd:b3:39:0a:bc:51:7d:a8:47:f2:55:32:53:
1b:57:05:5d:ba:6f:4f:be:07:5a:94:31:41:9d:bc:
8a:c1:df:5c:d3:7e:08:89:4a:ca:e9:90:5e:77:3f:
e9:39:de:3f:f2:25:af:b2:df:80:9c:3c:41:37:02:
14:9c:39:2e:de:05:4d:ae:34:0a:86:92:a3:6c:f7:
20:43:38:b8:2e:db:e6:34:5e:80:19:a9:d2:4e:ad:
38:62:e8:3b:3e:81:d8:9b:10:33:4c:a1:24:07:a6:
96:f8:ed:da:48:df:3a:c3:9f:60:28:6a:12:bc:63:
07:f2:d1:7e:76:48:7b:93:5c:0e:f4:a0:f6:a9:10:
34:b4:32:e5:a0:90:56:b3:75:55:51:cc:2f:67:50:
0d:27:84:e7:8c:40:12:0d:e4:63:b9:cf:45:d3:47:
c0:c5:1d:0e:c8:17:77:d9:ef:84:0a:e0:84:c4:c5:
a8:56:28:8f:01:a2:35:14:a9:4e:db:c4:e9:b6:fe:
44:2a:d7:af:e7:15:16:2d:52:98:e0:16:8f:7d:52:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:27:01:3D:C6:40:54:40:49:6D:4F:BC:8E:A7:2A:76:B9:93:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4867dc89-6f52-3a23-9d9c-4e26531651da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:ea:c1:fc:30:b2:d1:63:bb:ac:66:1b:52:6d:c8:40:ed:d5:
36:29:7a:72:33:57:3a:ad:21:eb:66:1f:bd:ee:f2:6c:80:b6:
f7:5e:18:1c:52:a8:46:c7:bd:2f:4d:64:d8:78:a0:a9:e5:fe:
10:4b:b3:03:ec:41:76:79:28:bd:6f:91:42:12:5d:ba:8b:1e:
77:65:f8:fd:94:bf:bd:8a:43:9f:aa:eb:52:5e:39:5f:b9:c8:
6e:b2:53:a5:92:e8:1b:7e:52:74:6b:b2:ab:cb:89:82:60:50:
ea:55:ad:ff:7a:93:7d:06:ee:9c:9f:e1:cf:d9:e9:ac:84:21:
da:72:30:46:fb:1a:02:88:ef:37:29:99:d8:4e:4d:a8:66:97:
d0:01:82:ab:7b:3f:08:f6:e8:4f:de:b8:30:3d:9c:95:b7:35:
72:c9:15:54:79:ab:7e:20:f9:77:04:9f:b2:b7:ac:9a:bf:6d:
8a:d7:d7:8c:55:97:50:62:b6:a6:47:52:32:67:ad:bc:33:c8:
0f:99:df:6b:b3:c0:16:78:b9:7f:6a:05:4a:ab:7e:99:0f:97:
db:fc:47:fd:c1:49:4a:03:20:57:5d:4e:b1:4d:d0:eb:22:0b:
bb:36:b3:46:54:66:d4:a7:8e:41:74:75:16:90:fc:9e:58:12:
94:f0:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:41 2025 by rpki-client