Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa
File: 9990b039-2437-3800-aa8d-3f9667410b0e.roa (raw, json)
Hash identifier: v2XE9iT4FDOL+qbVV7MNi/7CLvsC5tlAJRsdxoenAAw=
Subject key identifier: A5:6A:3A:C5:07:53:4D:0C:28:08:27:0E:EB:58:49:69:E3:5E:8A:21
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F537A4B43A9B3FE9A2F380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.223.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:37:a4:b4:3a:9b:3f:e9:a2:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=415c58a1-281b-4139-acf3-5c59a7b5138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:b9:7a:6c:4b:42:41:a6:99:eb:ac:6d:3b:
b6:91:69:c1:a9:8b:8f:94:d1:86:8d:0c:e2:db:8f:
00:6a:8b:93:e0:c8:1e:93:c6:93:36:a6:41:d8:82:
9f:fc:c3:9b:be:44:9c:a9:e7:0a:ca:05:a1:f9:0b:
fb:c0:e7:72:db:06:30:57:90:c9:04:ff:af:87:dc:
73:28:92:1a:a4:c9:1a:83:72:3c:b7:0b:19:48:f6:
61:e1:9a:72:36:79:0f:5e:0f:58:b1:2b:fe:3c:14:
b9:b6:95:3a:fe:0c:10:36:fa:8b:18:30:3c:f8:ef:
a4:6f:57:8c:21:97:8c:1b:a5:d8:fb:ee:c2:61:03:
65:51:8f:83:fa:55:84:38:f6:76:b4:85:0d:c9:bc:
45:fc:fe:8e:60:05:02:ba:05:59:0e:09:ac:f2:c2:
91:97:99:e3:51:c0:57:67:96:97:10:dc:2e:c3:e7:
cb:95:9a:4c:fe:b8:ec:df:aa:27:19:a7:b0:ca:86:
b3:9d:e6:3f:f5:c7:2b:4f:ad:11:18:6c:2e:8f:dd:
6b:ea:85:21:ea:d9:6e:91:8a:b5:98:e9:96:f3:91:
b3:a0:27:46:a7:6a:17:c0:5f:9e:db:fc:a7:43:47:
ea:89:9d:f7:7c:6e:ed:8f:d7:e4:61:7e:78:e9:6d:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:3A:C5:07:53:4D:0C:28:08:27:0E:EB:58:49:69:E3:5E:8A:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.223.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:8e:f1:28:92:c7:f6:3d:7e:4d:5f:81:75:c8:4a:53:a9:ac:
76:14:4b:4c:90:db:a4:3a:b5:8a:a8:15:62:67:a7:e4:66:7a:
00:d9:4f:ff:50:98:b9:18:cb:a9:7d:48:5c:40:db:f8:e7:0b:
36:ba:eb:48:34:cb:1d:91:47:3e:8a:a2:d1:b8:46:5a:8b:73:
49:bd:63:61:4d:68:ea:89:c2:f8:fd:f8:18:a2:92:7c:2e:e4:
8e:13:68:6a:91:9a:42:39:33:07:df:76:b7:56:32:9b:52:d2:
3d:18:f3:36:a8:29:fd:57:ee:c6:f0:55:ea:8e:c5:10:1c:72:
03:3d:60:a7:15:fc:70:cb:82:c8:2a:0b:2c:78:5a:ea:a1:0d:
8e:96:04:39:d6:f8:63:9c:cd:d8:5e:35:b4:d8:a1:e9:72:45:
d0:28:2f:66:be:a9:b5:c6:1e:05:25:b2:e1:8b:e8:8c:ad:74:
16:d9:7a:11:99:9f:b3:4b:ff:d2:28:6a:53:cd:7d:cc:c8:9c:
2d:8c:fd:25:86:87:b8:b7:74:c3:ff:38:ea:30:97:79:d1:8b:
eb:6a:fd:20:99:a9:30:cb:1a:72:aa:bc:77:53:b6:60:f8:1e:
b9:44:29:8f:27:4f:91:20:7e:52:0f:b3:dd:3d:df:a5:44:4f:
15:93:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:09 2025 by rpki-client