Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/679303c8-f56d-3471-95c7-076fe303c0f1.roa
File: 679303c8-f56d-3471-95c7-076fe303c0f1.roa (raw, json)
Hash identifier: chtRvSbjWGVVbVUSAF0UbNoECgQK/VRadbBmvRfz3cY=
Subject key identifier: 62:C3:6D:AB:24:7A:D2:F0:5F:D6:97:45:5D:7A:B9:30:C9:E6:C4:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4CF4853E6C8789B01C580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/679303c8-f56d-3471-95c7-076fe303c0f1.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.244.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:cf:48:53:e6:c8:78:9b:01:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=2ed117cd-3207-44c4-b9ab-d3f61281afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:2d:48:ff:c4:6b:04:81:e4:f9:58:a8:84:
81:b4:cd:97:d9:f5:e9:69:f6:95:b0:93:07:17:7d:
6e:a6:40:05:37:16:54:52:ba:83:ce:f7:af:4b:b3:
a4:5b:74:fe:01:69:a3:38:e6:c2:a9:5b:09:4b:51:
0a:fe:fe:7b:a8:e1:3a:37:3f:ef:8b:81:78:5b:e0:
1f:57:49:43:f8:62:47:cd:ab:3e:06:fa:65:a7:fb:
9a:e4:65:5c:8c:f1:6a:6f:15:fa:59:01:1f:3c:f8:
f1:34:3f:28:fb:e8:f8:50:da:6d:4c:f4:b7:6d:42:
fd:d9:9b:cc:3b:0a:9a:a7:b7:9e:25:34:11:1f:3d:
81:dd:93:35:d4:31:54:18:94:31:49:0e:c5:cb:6b:
66:c8:67:67:a9:35:38:fd:bd:80:3d:4c:ce:77:12:
ee:2d:98:3d:9e:15:d2:ef:c3:68:1d:82:26:99:8e:
42:64:01:32:b1:1e:a8:77:3c:e4:23:78:db:89:b5:
ac:31:f9:fe:48:58:5c:0d:2c:8d:cb:94:0b:7b:16:
fa:6a:67:4b:46:68:3d:96:64:18:9d:10:d9:17:ef:
0b:f4:33:5b:1d:90:a9:df:5c:c1:48:e6:cc:72:2c:
39:62:2b:0c:9f:67:c7:23:84:47:7e:0a:33:40:f7:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C3:6D:AB:24:7A:D2:F0:5F:D6:97:45:5D:7A:B9:30:C9:E6:C4:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/679303c8-f56d-3471-95c7-076fe303c0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.244.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:04:32:c2:20:51:ba:2a:14:b6:71:4b:b9:ca:5d:ed:4e:4b:
db:5b:9f:28:fd:c7:e0:79:fc:f0:1b:2c:e1:97:80:d2:1d:e4:
62:7d:74:9e:8b:b7:64:7d:3e:a8:4c:b2:ba:e7:77:3d:28:48:
e1:30:65:c7:d3:9c:4f:0d:b4:35:3d:8a:11:c5:61:90:64:36:
1b:29:d6:b3:ad:d4:49:d0:bc:12:00:2f:62:fe:48:0d:bf:1b:
9f:5c:88:e6:41:f2:26:08:01:4c:88:5c:d8:9a:90:34:2b:f8:
5f:8a:f8:1c:39:a0:0e:fb:4e:0f:ea:31:6d:8d:df:3c:cf:a7:
8c:3e:0b:b8:ca:eb:0f:7e:b1:b6:e7:82:db:68:b4:28:2f:0f:
fb:4a:2a:fc:d0:3a:7e:d3:4e:76:b3:04:d6:9b:9a:92:41:98:
e5:70:66:f6:90:23:90:28:8f:27:40:9d:21:f2:7c:2c:ae:02:
22:2b:80:59:bd:6f:66:e0:f7:03:62:ff:a6:87:6e:ba:70:16:
77:a1:d4:aa:2d:a8:32:66:9f:b1:6a:e3:d7:d6:8a:c4:9a:ee:
24:2d:4a:33:c1:88:cf:56:4e:5b:37:fb:b3:8f:c1:25:de:4b:
7f:43:34:c2:3c:30:45:eb:c2:18:fe:e1:59:6e:f0:12:1e:d1:
38:c0:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:00 2025 by rpki-client