Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996557bf-7576-3c82-bb09-50987795271e.roa
File: 996557bf-7576-3c82-bb09-50987795271e.roa (raw, json)
Hash identifier: WubXPLLseuGUV0e4Hq/+H2zxDGOQnBuOgbml85VhU5s=
Subject key identifier: F5:85:F0:65:68:75:1F:A4:14:55:8B:7B:C8:66:A3:DA:32:F5:57:23
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F543422100E5A3A0B94C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996557bf-7576-3c82-bb09-50987795271e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.205.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:43:42:21:00:e5:a3:a0:b9:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=c2fa7385-0a05-41ad-a89f-663db8e629d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:da:72:bc:75:25:e1:47:91:bc:8b:4f:f9:
b1:38:c7:9c:19:ee:5e:0d:c3:4a:9a:85:0a:db:6a:
fc:ee:73:cd:26:4e:55:a7:ff:44:33:d6:69:89:d9:
7b:85:dc:53:e9:1d:dc:05:c0:2e:1d:58:87:cc:72:
16:bc:37:b1:7f:1b:94:43:ef:06:ad:b3:58:0b:7f:
67:24:c1:db:61:9c:97:6c:06:ec:78:3a:63:06:c9:
19:4f:6f:3f:bf:c7:47:bc:96:a2:40:c7:62:b7:4b:
09:05:b6:55:b4:6d:83:72:de:f8:40:5a:35:23:4d:
f9:7b:32:80:3f:70:9b:9c:e3:3b:1d:27:35:ff:ce:
11:5d:86:36:73:bb:35:2e:47:dd:ac:cd:88:0c:73:
24:39:41:b7:72:e5:c4:d1:65:dd:be:00:c8:f5:77:
d1:9c:97:c3:57:d6:4b:f7:23:b2:a3:a5:d7:c8:9a:
89:fe:2e:1c:91:33:0e:58:ad:a7:db:41:79:62:7e:
d2:f6:a2:17:3e:5e:2e:ec:51:ba:73:a0:11:fa:93:
62:6d:7e:d7:cb:36:30:01:1a:fc:68:83:12:bc:ee:
81:c2:fc:1e:7e:0d:27:e0:58:22:a6:eb:90:df:b0:
be:a3:8a:0e:5d:9f:59:2d:e8:49:b7:bb:0b:60:65:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:85:F0:65:68:75:1F:A4:14:55:8B:7B:C8:66:A3:DA:32:F5:57:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996557bf-7576-3c82-bb09-50987795271e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.205.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9d:47:39:13:8a:bd:67:1a:e0:2c:d8:c4:c4:ff:0e:75:ee:
f1:4f:51:9c:45:c5:4d:91:b5:71:ed:86:2f:b6:dd:88:6c:66:
d9:4a:5e:47:8e:58:82:a1:49:dc:f4:5a:17:5a:3a:fa:26:02:
7c:13:cb:6c:1d:7f:03:b0:4a:4c:63:a2:35:24:dc:9e:d3:9d:
cb:a5:f9:f2:89:f9:59:6f:bf:50:07:87:e8:2f:85:96:85:a0:
3c:71:2f:e6:b3:3a:07:ec:e6:4d:f0:ed:4a:e1:f4:6b:6a:f8:
e7:cc:98:13:ab:96:4c:e2:0a:f6:b2:0a:38:85:ce:0e:c8:c8:
bd:a3:fb:47:9e:e8:ed:13:ff:43:14:28:0a:e1:16:33:dd:72:
6a:a3:5e:05:af:09:af:5b:7a:a4:de:dd:ad:b6:26:b3:39:89:
f6:b5:bc:e3:8f:e8:79:18:46:07:d7:e2:d9:f1:18:88:37:1a:
4c:ce:b8:f6:64:c8:94:40:69:24:1b:34:cf:b5:f6:63:67:c2:
da:4b:6b:9b:fd:e8:26:bb:b1:b0:cf:45:6f:54:a7:72:b3:36:
92:4a:8d:6c:50:c0:36:db:73:19:b9:64:85:84:0d:50:6f:31:
a7:0d:df:19:cc:dc:1f:ac:b6:35:a8:a0:0e:8b:17:1a:fb:b0:
fa:73:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:12 2025 by rpki-client