Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa
File: 49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa (raw, json)
Hash identifier: R6WPOsv41cOjbU2Us7xaWO5n2+EYjSfoVk8qlr0p1GA=
Subject key identifier: 91:15:37:CD:10:00:4A:37:E3:EB:B4:A2:07:F2:57:DC:AE:7C:ED:A5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F521844970E26B225AD000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.238.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:21:84:49:70:e2:6b:22:5a:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f6298601-d51b-4d15-b60b-c52b017ae95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:b8:61:3c:04:10:83:78:a9:b3:08:17:ae:
ad:15:12:d6:81:83:20:e3:8d:47:fc:c4:f2:09:43:
ad:c6:9d:82:3a:6b:e2:78:e2:8b:75:7a:8b:e2:75:
69:fb:5c:a4:dd:50:14:05:43:ed:dc:8f:f7:a6:92:
54:af:bf:9b:17:06:a1:bd:27:34:d5:6f:03:63:36:
23:dc:52:73:fe:68:db:80:54:21:9f:89:7a:f1:5f:
e3:74:a9:9c:3c:41:15:75:30:de:e9:b1:0f:d4:8f:
fd:6b:dc:76:ca:35:3b:2d:0c:2c:c5:d0:28:f2:c4:
ff:f8:ef:7d:92:1c:0d:31:94:57:ec:4f:76:01:f2:
c3:23:d7:46:2a:5c:32:bb:24:ee:74:18:19:1d:f0:
3c:8b:43:2b:b7:82:70:fb:aa:60:9b:05:41:81:4a:
fe:09:cb:e8:a2:e6:4e:51:ad:7e:1c:5f:b9:4c:cc:
6b:4a:f5:29:76:2d:3b:97:9a:7f:ec:22:ad:71:b7:
51:76:dc:2d:a2:87:c0:13:23:9c:14:1c:c5:c0:db:
ad:37:27:4a:a6:86:b9:c4:88:ae:e6:48:ed:00:77:
64:d2:5c:17:7e:53:87:71:98:7c:88:40:04:0e:d3:
b7:0c:09:86:cc:8c:45:d5:fa:99:b6:d5:db:75:02:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:37:CD:10:00:4A:37:E3:EB:B4:A2:07:F2:57:DC:AE:7C:ED:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:3e:2c:0d:37:4e:65:4f:f7:93:04:2b:e1:ca:d0:21:28:34:
23:c6:40:df:0f:2f:89:83:db:d6:da:1b:1a:2a:b7:49:ec:cb:
4d:85:74:ac:d2:40:2b:a2:c6:cf:2e:07:00:26:84:43:3c:fc:
e2:5f:7f:24:2b:b0:cb:b4:4c:f9:a7:b1:10:45:45:d2:09:96:
fe:ad:2d:95:85:59:c4:38:f3:0d:bb:8e:31:dc:ec:a8:90:1b:
32:ff:05:03:13:00:d6:30:21:45:53:97:ff:ab:92:94:3e:57:
59:50:16:18:0e:57:e1:bd:fd:1e:fc:60:15:e1:c0:28:21:dd:
6b:6f:d7:19:b0:8d:82:ca:dc:2d:68:cb:e9:17:27:71:86:ee:
aa:46:89:00:f9:a0:51:8d:e1:bc:eb:e6:db:2d:37:6f:10:19:
21:ba:93:ea:c9:99:a5:33:ff:bf:ab:f6:db:cc:04:bd:6c:cf:
f7:cd:a4:0c:c2:4b:9a:4a:b5:ff:86:df:de:5e:0a:12:c1:29:
60:ac:11:a4:42:2c:86:75:d0:7f:d6:30:99:73:f1:4b:49:6c:
26:29:bb:5a:c0:2f:0e:15:f0:22:33:24:d9:2e:7e:a6:63:7e:
c6:17:dd:32:7e:87:3b:96:bd:f8:9d:1d:db:87:e4:d3:05:43:
b7:a9:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:40 2025 by rpki-client