Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa
File: 8dbdf946-971e-3770-901b-b9c1ec23e042.roa (raw, json)
Hash identifier: Wk1X8xDJkxk6g3WlRWQGkFIi08RYX0hHsfXI4u2lFiM=
Subject key identifier: 35:2F:F2:94:11:4E:A9:F4:2F:10:09:18:47:CC:3B:99:3D:49:9E:E6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F531A68D75F3B742EC9280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.200.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:31:a6:8d:75:f3:b7:42:ec:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=0aed19f8-fe03-4168-9cde-9d8ae251096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:7d:95:38:ac:27:3d:33:1e:4e:7c:e4:66:
dd:88:a3:1c:20:2b:63:57:2d:d8:b2:f3:e1:d0:f6:
26:50:74:f9:f4:de:41:33:97:38:e7:c7:e0:45:3a:
10:ca:37:7f:64:1e:a0:ca:c6:9c:03:c3:05:c0:bd:
c4:29:ac:70:9b:2d:14:17:18:a4:ce:6c:9d:d7:53:
16:bb:d6:f0:fd:0b:b5:23:ac:c9:40:b8:66:ba:7b:
38:44:7e:66:e9:e4:da:a2:73:29:44:e0:60:ad:5f:
32:b2:06:9f:7e:52:30:ff:13:d7:60:6d:71:36:79:
82:7f:71:ad:12:b6:a6:3d:24:49:49:23:99:9b:fb:
3f:d8:1e:e6:a0:d1:01:e7:41:b1:c7:70:3a:96:13:
ea:16:ca:ab:cc:29:5c:d6:a3:5a:87:4c:29:7d:ba:
36:4e:2b:14:c2:b7:91:3a:73:fc:87:0c:1a:c8:a8:
c1:51:5b:05:9b:06:d3:43:2f:3d:8a:10:f1:62:e6:
e6:39:03:65:df:e9:e9:c5:57:28:01:bd:6f:84:22:
35:f0:29:32:66:4e:68:84:da:a0:b7:1a:69:ab:f0:
67:93:2c:a8:4e:f5:a7:65:90:3f:76:08:6e:95:10:
e9:7d:6d:94:5b:1f:75:e2:8a:41:67:35:07:ea:4f:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:F2:94:11:4E:A9:F4:2F:10:09:18:47:CC:3B:99:3D:49:9E:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:85:28:a8:a6:60:c5:6c:9d:52:f3:b7:cf:17:7e:58:8f:e1:
82:ee:ac:29:82:be:39:7f:01:39:37:61:1a:8f:14:ad:24:cf:
63:89:1d:48:07:49:11:f6:d3:7f:54:e3:db:6c:1d:be:ad:b6:
8e:e9:7d:3f:85:d7:14:8b:e4:e1:13:c1:40:bf:fd:35:22:08:
28:c7:bf:db:3e:91:d4:0d:36:ea:aa:ea:2c:73:09:88:30:7b:
9a:ca:b8:16:85:ad:d6:48:76:30:72:56:f0:8b:48:ae:b2:ba:
cc:8a:89:a5:69:83:62:7a:4f:e3:53:61:dd:0f:7b:f3:51:f6:
15:ec:71:5d:11:f6:8a:e8:a6:2b:a9:48:76:d5:8f:17:45:6c:
5a:30:b9:b0:0f:08:a3:98:3e:4d:5b:14:05:56:15:e9:10:8f:
98:af:ef:db:f8:59:2b:a4:7c:97:c8:34:d5:c0:bb:7c:8f:f5:
9a:69:dc:6c:3b:7f:34:dc:2c:7a:4d:95:79:b2:90:c5:c0:94:
ac:08:b2:13:9b:df:fd:95:38:f6:c1:12:78:05:bd:93:a6:3b:
da:e3:23:98:cd:92:24:e4:28:3e:d0:ae:e2:b0:ab:34:79:e9:
fc:6e:47:6c:b8:a3:0d:5f:77:fd:de:a2:a3:ff:82:60:d5:7d:
bb:7b:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:45 2025 by rpki-client