Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa
File: 9aaa8c8f-6494-3aba-bad8-75ea73377902.roa (raw, json)
Hash identifier: 4D1fxotpwwSoG3Haea7C4Sv+Fxnpv8h9eFXvb/lWI+Q=
Subject key identifier: 55:AB:EC:F3:94:06:8C:11:92:67:D8:BD:3E:36:F7:DF:7B:66:A2:82
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F530E35BF9FBF135A31F40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.195.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:30:e3:5b:f9:fb:f1:35:a3:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=912378ff-e4eb-4a63-8940-f4509eb5c714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:85:6a:33:d0:75:1e:1b:6a:a0:04:0c:5a:
17:a0:dd:f2:89:0c:43:e8:f6:cd:b8:f0:23:9f:2d:
94:72:f7:4b:ef:27:0a:c9:2c:52:39:cc:f7:38:e6:
89:e9:2b:ce:31:3f:f2:be:39:78:be:a1:d7:2b:b4:
70:ac:49:ca:c5:3d:bf:36:b1:32:39:e0:8e:a3:6b:
7c:69:6f:cf:fc:0a:54:0c:23:2b:64:c7:ea:8f:b3:
49:f0:dc:eb:51:d8:1c:76:35:a9:03:88:a8:8e:e1:
93:6a:e3:8b:66:a8:51:cc:b4:d2:45:ba:32:ad:8f:
59:84:8a:e2:f8:bd:0a:c0:b4:a9:a7:34:0a:55:6c:
1b:e9:16:6d:13:8f:10:b4:5c:e6:20:af:01:97:f8:
61:8b:90:5d:11:2f:b5:a4:d9:98:29:3a:55:ec:7a:
58:5e:89:7b:28:76:9a:a4:c8:dc:98:b6:04:19:85:
f6:5d:00:b7:b2:c3:07:ae:e4:59:ab:b8:4b:d3:eb:
ca:a0:77:6c:11:91:59:ee:fb:97:b0:fa:68:c6:e6:
65:4a:80:63:dd:ef:ee:4b:eb:0e:ca:12:f2:05:5d:
96:4d:aa:78:d0:92:5b:55:39:f9:dc:44:31:cf:3a:
7b:ff:de:71:69:ab:09:cf:dd:8c:24:24:5a:87:29:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:EC:F3:94:06:8C:11:92:67:D8:BD:3E:36:F7:DF:7B:66:A2:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9aaa8c8f-6494-3aba-bad8-75ea73377902.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.195.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c0:8a:9e:df:78:9c:68:b3:d7:0d:57:48:d7:b0:93:82:14:
63:95:ab:6b:92:62:80:f8:53:0f:63:7c:37:80:2b:7d:ac:81:
7c:f6:05:93:5f:c5:d5:57:62:32:30:be:1c:15:d0:62:e7:f0:
62:f8:d8:13:f0:b2:fb:b8:bf:c6:54:b2:42:70:91:14:b6:f1:
fb:63:21:e8:c9:95:91:65:c0:45:fe:65:ad:a1:56:e2:05:b5:
be:7b:18:5f:30:c5:66:5d:ad:80:8b:98:59:bb:c4:2b:fc:a7:
c0:b8:74:93:18:e8:2d:57:83:f3:3b:80:e9:db:d1:8d:76:e7:
63:2b:f0:37:67:a6:11:44:58:64:1d:ea:69:55:b7:4c:fd:c6:
80:28:eb:dc:8d:39:f3:61:ef:20:a2:eb:f7:dd:92:9d:40:12:
66:af:7a:ae:60:06:f5:be:be:30:05:82:b6:0a:33:67:89:ee:
3d:37:f4:11:36:9d:f5:69:50:7f:9f:f7:c1:9a:7a:3a:b0:67:
ef:b9:d2:fe:68:0a:72:96:6a:dc:68:b2:3e:b9:52:7f:b4:40:
78:dd:70:f8:6c:9e:92:6c:c3:2b:ef:8a:88:76:dc:b7:7d:be:
91:e8:d7:8a:7b:19:cb:af:23:d2:63:8c:b5:ea:46:6f:6b:22:
db:88:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:48 2025 by rpki-client