Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa
File: 9a23917d-461e-3291-a9be-0803e9d905a9.roa (raw, json)
Hash identifier: 9dG5gJ/QvqW1Tu01nF+6/wcx7MsFCRcwBAaeKFCUWzc=
Subject key identifier: 4B:E9:05:17:51:5D:EE:A3:58:FB:26:19:92:32:D5:79:38:60:8E:E8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50E2A88E9976B9E1F1BA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.189.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0e:2a:88:e9:97:6b:9e:1f:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=1b749cc5-6caf-4baf-afb1-3dea79b95d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:85:9b:98:ad:78:71:4b:29:b4:3c:01:0c:db:
30:fc:f6:b3:10:c1:df:f9:21:c4:d6:88:46:b1:9f:
4c:33:58:49:a3:c9:90:d2:db:30:a2:35:7e:d1:74:
27:e0:af:8d:13:cd:fc:48:2d:d5:4a:b5:0b:9f:e6:
2d:be:33:e9:90:42:cf:9e:e8:47:3e:b7:07:9f:45:
10:7d:5a:b5:b5:50:7f:99:ab:ef:27:4c:63:0d:44:
de:9d:a0:45:31:55:3a:ff:4d:a6:2c:35:8c:f4:99:
b1:75:2a:90:d7:df:e5:c9:6c:22:da:20:c1:6f:b1:
5c:af:cc:39:52:37:ba:28:09:f8:78:84:34:ec:50:
90:11:54:48:fc:f9:85:45:47:cf:73:33:3d:33:b1:
2e:f7:11:05:7b:ab:4a:f3:63:da:60:3d:d5:17:c9:
4d:d1:cb:82:26:eb:78:a9:6a:64:10:c3:c5:f2:cd:
a0:e2:5b:7c:7b:7a:3d:10:d7:aa:c9:e3:c6:75:1c:
02:b0:15:d1:1f:96:d4:4a:51:07:f2:25:ab:1a:7f:
55:c7:0e:b6:0b:12:46:f5:9f:52:73:26:c5:ac:b5:
f3:9a:c4:22:0d:d3:d4:73:ae:f6:24:16:7d:d9:8e:
1f:4d:b3:35:85:2b:83:bb:77:e7:c0:f6:fe:07:eb:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:05:17:51:5D:EE:A3:58:FB:26:19:92:32:D5:79:38:60:8E:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:b7:80:cc:48:3e:ca:ef:8d:ba:13:64:62:79:c2:2a:7a:83:
88:14:17:b2:85:5f:0a:f3:22:e0:3b:81:38:15:2b:2d:48:ea:
33:95:e6:be:85:3d:41:1f:82:0a:f3:c6:d9:9c:75:f9:7a:57:
86:d8:71:ff:c8:3d:22:ee:c0:4f:a8:93:a6:55:bb:ee:a7:4c:
f9:2e:62:51:69:b9:21:07:2f:ab:c3:17:43:6e:b4:9f:f6:b6:
aa:bf:1f:3c:2e:67:0e:6c:4b:50:c7:ed:f2:47:aa:0a:d9:60:
1f:df:85:94:a1:bd:0d:fa:bf:a3:4e:e4:7f:c0:c2:88:d0:b7:
69:cf:f7:87:5c:c1:84:cf:cf:80:f8:79:b0:7a:b9:e7:bc:0b:
b2:87:f5:b2:2f:c7:ef:7d:36:bc:11:7e:5b:7e:1c:67:74:df:
d5:e0:b1:07:cd:99:e7:73:a7:24:d1:1b:91:b7:46:17:69:4b:
8b:67:cc:62:70:ad:11:9a:98:f0:d5:63:e7:c7:5d:03:0e:5e:
83:6b:64:a7:e6:fc:6d:a5:2a:b0:31:69:01:80:d5:d1:4f:57:
62:a4:37:8f:1f:4c:4e:5e:5b:6a:a9:2d:a4:e8:59:1e:b4:32:
4e:10:12:8d:aa:01:74:10:ff:9b:c0:17:9a:de:db:94:3f:fe:
8d:ef:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:00 2025 by rpki-client