Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa
File: a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa (raw, json)
Hash identifier: oB6g3/fjEwmdNe/oQd3xfaDLBzFLNAz9X8x3jxsZTCM=
Subject key identifier: 4D:DD:A4:CA:CA:AF:BC:35:46:F2:01:16:A5:C5:D8:06:ED:B5:C7:1C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52788F18CB4AF23415280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 35.217.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:27:88:f1:8c:b4:af:23:41:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f2724145-fd09-4a33-9e59-f093efe45ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:5c:c2:d3:ea:35:f1:a3:a3:44:fd:2b:a7:
36:06:1e:92:e9:42:f9:77:cc:1b:3f:52:73:fc:51:
05:78:c9:a3:2d:52:dd:5e:5e:fb:c0:e7:6e:31:f6:
c9:11:f3:e1:5b:27:3b:64:32:a2:ba:a6:3e:37:56:
07:60:03:b6:fa:d5:c7:32:08:e6:1b:d8:2c:df:45:
00:35:b7:34:2c:ed:55:5f:9a:59:0e:c2:7f:43:93:
22:b1:07:5b:9b:b8:d5:c5:d3:1f:79:b4:a2:32:65:
7d:fc:9a:40:f9:13:ac:46:3a:10:54:ef:30:42:d2:
84:ac:1a:a1:d0:74:33:4f:88:5b:4b:35:69:76:d4:
0b:8c:6c:a7:82:38:47:12:b1:ea:6a:5c:90:30:e1:
de:47:66:a0:76:d7:6f:93:8f:b5:7b:09:36:d4:e0:
6f:b8:9d:43:c6:dc:a7:00:06:a7:9c:c3:4b:6c:50:
4c:cc:53:48:9f:82:f0:57:48:32:5e:64:33:18:e2:
d5:45:fc:1c:7a:d9:23:35:af:f8:88:82:0e:4b:85:
d0:00:06:3b:19:04:21:f2:68:66:13:09:0f:09:6d:
d0:33:a5:8b:e8:3b:0d:ac:41:a2:56:ad:76:56:9f:
e0:cf:d1:2d:67:b0:61:5c:ff:cf:1b:25:bd:d2:21:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DD:A4:CA:CA:AF:BC:35:46:F2:01:16:A5:C5:D8:06:ED:B5:C7:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.217.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f0:cf:59:b9:25:9b:94:fc:60:ed:3d:83:8b:ae:27:ed:f9:
b4:45:b8:47:3d:97:1d:c5:24:15:d1:80:24:eb:b1:35:52:65:
de:20:53:24:1c:de:6d:1d:4d:fa:f6:2a:af:f5:94:3a:e1:9e:
92:09:97:a3:85:be:e0:30:10:fa:74:4e:5e:15:1a:54:a0:4a:
f8:39:a8:82:aa:60:ad:dc:b5:76:7a:3f:ce:62:aa:6a:27:a8:
30:3e:cd:50:62:5c:3b:a5:6b:68:e4:0b:c4:f6:eb:79:e7:60:
2b:b7:93:ad:80:b2:8e:f0:d1:f9:aa:fe:1a:c4:ab:6e:3d:f3:
2d:f8:97:6e:eb:57:64:a6:09:af:b7:27:94:5f:73:c0:a3:9c:
3c:78:29:f1:7d:f8:8f:d6:68:77:b9:c4:4d:7a:2b:7b:e3:0a:
82:f7:8a:e3:c2:92:24:ef:db:30:c6:4a:6c:a0:46:59:3f:c2:
74:6d:9a:c9:7f:f8:36:e3:51:e6:25:30:10:96:fd:bd:bf:8b:
bb:cb:2a:0f:20:d0:a8:be:ba:b2:74:ae:a1:4c:e6:20:97:0a:
67:84:64:a3:bd:bb:9e:fc:15:e9:7b:3a:13:80:95:a0:06:a2:
25:d0:ea:db:d5:dd:56:0c:e5:80:e6:91:48:c8:ab:6b:19:4f:
f8:d7:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:37 2025 by rpki-client