Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ab63a59-d45b-3996-8291-053a848cd8e7.roa
File: 7ab63a59-d45b-3996-8291-053a848cd8e7.roa (raw, json)
Hash identifier: r9/9sqWdtv1rJefMpCkwdbXG68hRTG3RXKCGuPUhbbo=
Subject key identifier: 11:87:90:95:A5:F1:95:58:3A:9F:73:DD:EC:1A:76:0C:CC:32:F0:B2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5417DFBCEC87E9757BDC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ab63a59-d45b-3996-8291-053a848cd8e7.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.228.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:41:7d:fb:ce:c8:7e:97:57:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=c68ebded-9f2b-4ac6-9bf2-c0fc3b654270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2e:3c:b5:25:95:75:ac:36:c9:24:dd:7a:7c:
78:f8:fb:9a:f7:92:5d:a8:da:4d:62:c5:3b:5c:df:
16:66:91:57:bd:64:68:cd:b7:7c:25:f8:dd:0d:eb:
8e:66:81:62:8d:23:d4:00:e8:46:7d:c8:8f:0e:e3:
54:42:a7:eb:4d:84:3e:7d:e5:1d:61:90:89:80:c2:
c7:79:f4:f5:42:dd:e6:71:82:3a:ca:fe:1a:f0:dc:
a5:0e:3f:af:30:08:36:85:68:11:de:56:39:b0:29:
bb:81:41:75:c5:70:3c:88:9b:68:ea:bd:01:0b:7e:
09:73:9a:ab:f0:73:cb:ec:37:0b:00:e3:fd:cf:da:
e8:cd:9f:03:0f:eb:95:58:0b:e9:ef:bb:19:a5:2b:
01:85:73:75:ce:3d:35:da:fe:60:d1:9e:96:e5:e1:
d3:82:a5:d2:5b:81:39:18:02:ba:19:55:29:75:f8:
7a:cb:31:04:0c:55:6c:9f:93:91:26:f7:0f:3c:79:
25:16:e5:72:47:a1:75:ab:ad:a8:04:2a:99:c5:ee:
c3:eb:9f:40:be:b6:5a:af:20:34:0b:84:c4:b4:57:
a4:c1:99:75:0b:76:23:54:ca:ac:de:1a:ff:3f:58:
89:46:37:a0:44:9b:66:93:3f:15:e1:96:fe:c4:fe:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:90:95:A5:F1:95:58:3A:9F:73:DD:EC:1A:76:0C:CC:32:F0:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ab63a59-d45b-3996-8291-053a848cd8e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:29:d3:34:96:3c:f2:06:87:72:fd:bf:b7:7e:f7:60:65:ae:
95:07:21:a7:0d:23:6e:cb:64:08:fc:8e:2b:b1:4c:89:77:c2:
c3:d5:33:c1:02:e9:1e:80:b5:13:94:86:54:39:89:1c:f0:bb:
20:1c:48:c9:fd:94:b9:09:06:73:72:75:ea:3d:2e:20:cd:08:
47:2d:c2:a5:12:e8:f7:c6:0d:96:12:83:92:47:55:a4:10:2d:
4a:5e:9f:b5:57:59:17:28:5d:a5:f5:59:c8:17:e2:94:1d:c5:
71:9d:89:14:7a:8b:6c:a7:25:ca:c5:21:98:98:67:a6:b4:cd:
65:2f:f0:97:0b:21:a9:ef:50:a5:86:01:26:1b:58:60:ed:4b:
b2:ca:51:f5:c5:09:1f:1c:32:f2:03:8d:c6:eb:ef:cd:15:25:
6f:ff:3c:6a:5f:7e:9c:b8:74:90:bf:1f:76:93:21:71:d3:c9:
bf:6e:0a:9f:c5:79:1e:c9:5a:ef:ec:ff:b3:83:d5:be:c5:9d:
9e:90:58:bb:b2:d4:76:2d:30:da:d1:b9:4c:5e:c5:16:93:fb:
33:c1:5f:21:b0:be:ab:dd:ee:2f:6f:4f:bd:0e:77:8f:07:f9:
b7:4a:db:ed:06:dc:11:8d:58:11:c3:1a:8d:31:29:f0:27:1a:
44:29:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:38 2025 by rpki-client