Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae3a8059-4904-30ac-a047-44ca801ea4ab.roa
File: ae3a8059-4904-30ac-a047-44ca801ea4ab.roa (raw, json)
Hash identifier: RGDtdH4mE1I2mTwOSPJXNwl8Bw8ezxb64QmAFiO2GY0=
Subject key identifier: 49:F6:41:8A:5C:C6:1C:5B:81:61:DA:D9:65:96:60:11:14:82:86:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4EEBD3F9135CC03ECDD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae3a8059-4904-30ac-a047-44ca801ea4ab.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.224.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:ee:bd:3f:91:35:cc:03:ec:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=589326b1-094c-46e1-92cf-0a2acfd11b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:a0:5e:ad:b4:23:92:7d:80:61:51:f5:78:
bc:20:2e:bc:23:06:5c:ce:bd:cd:70:5e:ee:2d:e6:
58:bb:89:9d:03:3d:08:f0:90:a8:aa:aa:45:09:8f:
e1:61:e9:56:e6:d6:fb:fc:35:07:64:6e:76:9c:86:
f4:a2:8c:50:70:35:af:79:95:6e:47:d3:73:32:25:
0d:9c:b4:8b:5a:75:f3:cf:c9:f4:a3:4d:0b:11:cf:
15:58:7e:c5:4c:6d:98:41:a3:94:40:e7:cf:b4:56:
12:4c:3d:42:ed:e1:f8:dc:74:aa:35:d8:f3:ab:22:
6b:41:88:3b:c5:ae:4e:9e:46:0e:5c:9f:f4:bb:3a:
bf:58:8e:2a:10:02:fa:54:20:74:72:3e:19:c0:ac:
d0:de:3e:27:1e:04:c3:2a:fa:eb:a8:6c:d2:ef:fb:
1f:d9:a1:e3:ad:8d:16:0e:3f:3f:9c:84:ad:d0:a7:
c1:f9:67:15:58:32:ad:ce:a6:35:ac:19:df:81:3e:
98:dc:8a:bc:c2:57:75:2a:5b:00:78:3c:c7:53:7a:
bc:14:18:23:80:fc:40:bd:a5:11:df:81:95:75:8a:
e8:fd:96:0f:6b:0a:d6:f2:1e:8f:b8:7d:4e:f0:8b:
5c:06:61:57:7f:1c:f5:c1:8d:2b:b1:65:f2:03:6a:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:41:8A:5C:C6:1C:5B:81:61:DA:D9:65:96:60:11:14:82:86:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae3a8059-4904-30ac-a047-44ca801ea4ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.224.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:34:fd:af:ef:15:82:fb:2f:b2:94:11:f1:6f:8c:c8:a3:8a:
97:10:70:62:7d:e3:75:df:43:d4:58:2a:6f:4e:a4:d8:7c:05:
b2:34:84:99:71:75:97:07:a6:f4:32:86:44:0b:6d:af:94:ff:
09:fb:4e:6f:b6:df:8f:18:1b:87:5a:12:87:d8:f3:47:e4:eb:
52:92:91:cf:19:2b:48:c8:46:a8:e0:0b:f3:16:c1:e8:1f:86:
ad:44:a6:fe:cd:cc:ef:29:98:cf:67:07:97:2f:75:e2:f6:77:
4f:fc:06:b1:66:74:94:62:af:01:de:48:79:03:71:40:2d:ad:
bf:58:74:f1:77:51:40:69:a3:ea:af:0a:9b:8f:09:94:7e:f8:
5f:e3:4b:d4:20:b1:6a:b0:22:5e:af:f9:a9:72:fb:6c:39:56:
85:e8:64:41:fc:e4:0d:49:1d:32:35:e8:b9:18:2f:ff:30:74:
b3:1f:75:dc:14:63:66:7b:ef:36:b1:16:e6:84:56:0b:e7:fa:
34:7c:03:8f:46:0f:21:04:14:66:d1:48:fd:f1:4c:f5:12:ac:
7d:35:85:08:4a:fd:bd:0b:6b:8b:62:73:7f:cf:4a:cd:18:ef:
1c:fd:ec:a3:7b:e2:04:40:be:8c:4b:e6:c4:65:21:d5:1f:27:
b6:64:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:32 2025 by rpki-client