Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b317fa39-df92-3883-948e-a8408748a055.roa
File: b317fa39-df92-3883-948e-a8408748a055.roa (raw, json)
Hash identifier: lOTOM2PO1ie6ed+OxwoOxIEK+XU32ry7PcLaCONNP44=
Subject key identifier: 44:59:43:6C:7E:BA:7D:E2:66:1A:6A:A6:F2:7F:CE:B2:C6:D9:9B:38
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50BA1173AF0FCB7EF62C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b317fa39-df92-3883-948e-a8408748a055.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.245.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0b:a1:17:3a:f0:fc:b7:ef:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=9413866e-ff17-4018-9d88-6ff87fef4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:ea:9f:b6:48:18:d2:41:bb:e5:71:5f:99:
57:30:fd:c2:49:a7:ae:e9:fe:86:88:bc:6f:96:c5:
0b:f5:56:f6:11:d7:4d:99:2f:0e:46:76:ca:77:2a:
68:c9:a8:06:ff:5c:8b:19:a7:67:14:a2:01:02:9f:
d5:7b:6c:dd:57:9a:3d:77:c7:7f:cc:78:d6:56:5c:
9b:9e:8c:05:6c:49:a8:76:59:65:24:28:c0:06:ab:
b6:73:08:ff:be:50:7d:eb:9e:66:0a:0b:f6:7f:6c:
d8:a9:4b:38:bd:5c:34:69:78:3d:99:14:b3:62:33:
9e:92:e4:b7:46:b5:27:b5:0a:12:9a:7a:39:a3:c0:
6e:80:1f:bf:c4:36:c5:3e:f2:fd:d8:69:00:9d:0f:
36:09:43:9f:a3:05:4b:84:62:49:06:6e:aa:9c:b1:
17:1d:25:e0:cc:00:06:99:9a:0a:67:b0:4b:0a:70:
14:5e:59:10:30:51:fa:e2:b7:ac:0d:93:ab:3b:bd:
5f:23:c5:0b:de:71:77:06:57:cc:f9:59:e2:3f:e0:
10:ce:55:64:13:cd:54:bd:ef:b1:97:09:dc:bd:36:
b3:e3:a7:5c:f1:aa:d1:1b:f0:71:81:22:5d:84:bb:
fb:79:67:c5:27:c4:02:6c:da:6c:dd:67:81:dc:cf:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:43:6C:7E:BA:7D:E2:66:1A:6A:A6:F2:7F:CE:B2:C6:D9:9B:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b317fa39-df92-3883-948e-a8408748a055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:39:d6:e8:4a:02:c9:5a:08:96:fa:14:b6:84:e0:a7:6b:7f:
38:01:44:ac:55:a9:f2:de:dc:71:9e:42:80:67:14:ab:a2:46:
92:11:3e:53:3d:00:d9:0a:5a:ce:15:6e:05:02:38:eb:c4:ba:
5b:c5:8b:55:cf:1a:d8:8c:8a:8a:61:78:3f:b8:cf:d8:19:99:
24:a4:79:17:7d:ee:6d:c4:7a:11:cd:7c:59:9b:e0:7a:b2:dc:
c8:6b:95:36:dd:4d:fa:ff:be:e3:61:91:09:f9:19:28:f9:67:
df:45:24:37:18:32:4e:39:77:98:60:14:f1:4f:76:4d:34:84:
81:db:72:7a:cf:97:66:34:3e:4f:8f:7d:54:3b:04:89:8f:a0:
55:be:cd:2a:00:88:af:24:f8:02:75:87:78:fc:af:c8:d0:a3:
92:94:ba:5a:60:3b:29:49:11:7e:a5:9c:11:fb:7b:bc:54:89:
ae:b8:86:14:aa:c2:52:77:db:c6:66:c9:0e:1b:c6:20:15:92:
99:f4:1d:e4:38:41:8e:e6:ef:3d:f9:03:49:eb:35:1e:fc:b2:
f0:8b:11:78:c8:b3:49:26:16:72:d8:d5:af:59:59:4d:b5:38:
4c:8c:2d:78:cc:b6:87:10:c9:eb:07:c5:0e:e2:61:62:e8:6c:
96:5b:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:56 2025 by rpki-client