Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a368eebd-a087-3d04-9fb3-449dbfe7df18.roa
File: a368eebd-a087-3d04-9fb3-449dbfe7df18.roa (raw, json)
Hash identifier: YQOcHUA6ABiV8dIYbU9EQ/yTrDMvbl9WO+drVId1TrQ=
Subject key identifier: 44:C9:64:00:05:14:EA:C6:83:75:AA:14:FB:36:30:F6:B8:FB:E6:29
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F9144A83853063553400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a368eebd-a087-3d04-9fb3-449dbfe7df18.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.203.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f9:14:4a:83:85:30:63:55:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=0ab851a3-881c-402b-8608-091d367a62e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:e7:65:3f:a1:1d:45:5f:83:38:86:94:8d:
8c:81:cd:8c:fc:9c:c5:4e:5c:21:7c:e2:08:52:a4:
3a:36:ff:78:5b:9c:78:a8:bd:82:8e:24:33:96:af:
da:3b:b8:c0:d8:2b:6e:ea:8c:fd:29:02:77:5e:04:
b9:ff:a2:49:45:a1:cf:a6:9c:3f:86:81:73:5c:77:
36:9e:f8:2d:7e:45:64:aa:bc:55:bb:b9:4f:a5:1f:
46:96:3e:d9:c3:74:8e:8d:93:39:cd:97:90:a9:51:
f5:98:de:57:74:93:09:73:24:86:b2:6a:af:a8:c7:
2d:dc:0d:11:92:9b:01:88:1a:2d:22:41:9f:c4:c4:
99:fd:51:a1:dc:8a:0a:b1:80:64:0e:a3:7e:27:b6:
c3:88:fd:0a:73:29:a6:3e:e7:ad:7c:11:15:1b:db:
fb:79:ec:c0:fb:d9:f0:e0:ce:ad:ae:6b:1a:b4:0e:
a7:71:e6:15:70:c6:00:97:f3:27:ab:82:92:8a:d8:
9d:cb:f2:13:ef:f8:fb:42:c2:f8:bf:09:e2:59:56:
1b:5e:c4:7f:34:f9:e4:39:6b:24:26:8b:02:d0:aa:
c3:0a:0f:fb:fc:d2:1d:6c:d3:5b:dc:34:0d:ed:6d:
2c:45:80:22:57:ec:52:b7:3a:a9:0e:cf:de:47:1d:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C9:64:00:05:14:EA:C6:83:75:AA:14:FB:36:30:F6:B8:FB:E6:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a368eebd-a087-3d04-9fb3-449dbfe7df18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:48:bf:7e:ac:47:87:78:e0:1f:e0:dc:78:38:d3:68:6d:43:
13:78:42:61:a3:36:26:6e:4e:81:33:6f:ad:ab:c2:b7:85:0b:
e4:6d:c6:be:11:ea:0b:f3:28:41:3b:a8:30:71:ca:7a:59:7b:
0d:48:7c:1d:32:b2:de:6a:43:c2:90:f3:9f:c0:75:b9:94:d9:
8d:66:e6:dd:51:65:19:05:bf:ed:8f:c1:57:60:c5:d3:75:73:
c9:07:db:0e:31:28:b4:35:f9:13:0b:38:cb:d4:f7:d7:5a:c2:
41:7c:77:20:8e:3b:08:5d:6c:73:21:b5:9b:17:29:65:cf:f5:
6d:54:10:31:22:9a:aa:3f:43:03:09:72:63:16:93:3a:1f:16:
5a:93:c1:d4:f8:ef:62:18:e5:5b:de:41:a7:41:be:29:de:4e:
fd:d2:cb:9f:40:f0:da:3f:00:9b:1d:da:59:66:a4:f4:cd:8c:
1c:83:b0:92:a3:10:05:dc:d0:ae:69:90:3b:45:53:b2:6d:85:
40:24:b3:2e:6e:24:20:4b:8f:d8:05:bc:1d:c5:31:cf:cc:b2:
57:ea:27:7a:14:dd:57:7c:cc:72:94:8a:f6:c8:94:f3:04:4c:
93:3e:45:fc:7a:06:61:8d:4e:54:da:a0:dc:af:59:aa:22:3d:
11:bb:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:44 2025 by rpki-client