Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d113cea-1917-3f19-94d6-5a887289add6.roa
File: 9d113cea-1917-3f19-94d6-5a887289add6.roa (raw, json)
Hash identifier: mtP+x9rpeK6Rd7zgGw7FKdKqVTJfHDB67a/VGlrqVxg=
Subject key identifier: A2:D5:D1:0A:2A:C5:AA:1C:AF:81:21:01:A3:EA:58:A8:73:B6:02:C2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F525CE8EA0B4636A1D97C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d113cea-1917-3f19-94d6-5a887289add6.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.198.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:25:ce:8e:a0:b4:63:6a:1d:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=29746766-1cdf-44be-bdff-0840f9a8ede5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:4b:bb:bd:c8:54:54:ed:16:3c:1c:c7:57:
75:cd:d1:44:07:4f:4b:d1:fd:93:33:b4:e6:df:06:
d5:3c:2e:55:02:a2:c0:9b:c1:2e:cf:77:ec:57:79:
1d:45:17:95:a0:28:37:e7:46:cc:5d:b3:28:68:20:
f4:c1:a3:8b:14:b6:60:65:e3:db:b9:45:25:64:fd:
01:ed:a8:3b:f4:37:59:f2:a0:46:af:fe:66:ed:ad:
cd:d5:2d:df:1d:44:9f:22:52:2e:64:8c:fa:77:35:
6e:43:2a:3f:58:a6:88:86:17:9b:d9:b2:6e:aa:d9:
18:d7:e0:a4:86:73:41:89:b4:31:8d:ed:af:b1:93:
32:73:3f:3c:ee:4d:ba:8b:65:b9:12:96:69:6b:a2:
b8:a5:b9:93:1d:03:00:1b:ba:29:46:a7:81:c9:3f:
23:66:2e:60:68:c4:fc:6e:15:9d:93:90:14:89:16:
78:56:c0:44:6c:d1:10:47:60:11:51:c7:10:7c:56:
2a:54:5e:c5:61:a0:a8:cf:3b:8c:a7:16:8f:8f:7a:
6e:05:26:9a:4b:43:06:89:c1:21:6b:30:2f:e7:2f:
cc:8f:e6:26:0f:eb:98:40:f0:49:60:a9:f8:96:b2:
36:56:cb:e0:ea:88:cf:09:ea:07:47:d0:fa:0d:e7:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D5:D1:0A:2A:C5:AA:1C:AF:81:21:01:A3:EA:58:A8:73:B6:02:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d113cea-1917-3f19-94d6-5a887289add6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.198.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:92:72:11:5e:d1:bf:fd:37:79:4d:21:71:f6:3b:12:f6:ac:
c6:dd:08:c7:39:7a:6b:06:92:2f:f3:ee:ec:f2:9a:68:1a:24:
b5:fb:10:92:34:96:9e:73:26:cc:3a:a9:83:bb:8a:00:73:1e:
f5:05:36:c0:64:9b:5b:01:5a:7a:6f:73:b6:8c:9e:a7:f9:3f:
5f:71:7f:a1:33:40:88:05:b6:7e:31:b3:9a:c0:a8:08:88:5f:
f5:28:ce:a7:52:56:e0:4b:67:b8:df:3b:81:df:6b:3f:40:1c:
44:e2:9c:6f:7e:a3:ea:f8:93:d5:86:a6:c1:fe:34:2f:04:50:
1e:21:ac:d8:2d:47:5e:f9:e6:81:c8:d8:53:e1:00:20:fb:0d:
d1:10:bf:6c:88:9b:a5:6d:56:ea:cc:fe:a7:97:ed:1f:d2:7a:
48:0d:08:6b:8c:48:5e:bb:2c:9b:06:3c:f1:d0:91:48:21:88:
99:1a:57:70:9d:2c:c3:70:38:16:b1:c2:74:ee:f5:7a:c8:49:
7c:98:ce:50:83:d0:11:76:0e:0c:74:74:34:13:b8:aa:8f:d7:
c9:60:db:e3:9a:f2:ff:f3:0f:3a:5d:92:d7:54:e8:9c:c9:26:
32:7d:7c:ed:2b:2e:8f:5b:8f:f7:53:8b:a9:68:9a:ef:51:5e:
2d:b4:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:18 2025 by rpki-client