Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b91c42b3-810d-3a8e-ad11-4be0356a8939.roa
File: b91c42b3-810d-3a8e-ad11-4be0356a8939.roa (raw, json)
Hash identifier: /XY1viDuLGXjAYXq5Cc5+9xjsY8LrDIK6aWFScRFxo0=
Subject key identifier: EA:7A:97:E6:E7:4B:3F:3D:5D:50:7D:98:DB:98:3C:D2:A8:A2:BD:71
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4FA9C3A47EF6A5D65B060
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b91c42b3-810d-3a8e-ad11-4be0356a8939.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.188.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:fa:9c:3a:47:ef:6a:5d:65:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5bdfa749-fef8-4bf5-a642-fa4c0ac7e798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:e3:85:5e:07:ed:0c:de:07:c1:ee:1c:6c:
b2:25:19:db:f9:66:89:fd:46:ba:e8:dc:08:3c:77:
3b:1b:d5:a4:ff:b1:c1:a0:dc:88:d5:f3:70:01:76:
c6:b7:0b:15:0f:a5:00:a9:6c:c5:04:dd:af:d0:ae:
f2:6b:b5:09:4e:5c:97:0e:d9:78:6d:bf:f8:38:4f:
4d:84:95:df:f2:3a:5d:0d:0a:0f:a0:84:4b:2f:af:
14:1e:81:92:50:81:4b:ba:8e:42:d0:89:34:e9:79:
01:c8:35:4f:51:fc:bf:22:fa:ea:d3:9a:fe:67:79:
8c:c3:5f:1a:d7:dd:15:5e:08:32:cd:ca:f3:63:d8:
c7:3e:0a:5a:97:cf:47:2b:82:1c:b2:d7:27:88:63:
02:4b:be:31:c7:8c:39:6f:cf:2d:c6:18:5f:61:8b:
47:27:0a:46:5f:57:b5:87:87:45:fa:84:05:16:52:
95:92:51:31:c9:e8:eb:b7:ae:b4:c9:83:40:a5:1a:
8d:99:70:6e:9d:ad:d6:a1:d0:36:79:43:de:29:ea:
8d:89:b6:ad:26:0a:94:bd:d6:68:aa:d3:af:e2:ae:
ab:3c:09:e7:66:63:a6:d5:0c:88:d5:39:e2:5f:e1:
30:94:5c:4e:b9:ca:6a:40:c6:8d:af:39:f7:e8:5f:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:97:E6:E7:4B:3F:3D:5D:50:7D:98:DB:98:3C:D2:A8:A2:BD:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b91c42b3-810d-3a8e-ad11-4be0356a8939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:95:f5:86:18:d2:6a:78:27:56:29:3e:42:c4:3e:1d:f3:e0:
9a:d6:b6:03:1c:3b:6f:2d:68:56:f9:20:b9:a2:aa:2a:6a:22:
29:ff:c1:bd:41:b3:ba:e0:29:4e:05:30:b6:08:2a:6a:58:e5:
b3:87:26:a6:e4:1b:27:27:21:c3:38:2a:40:5b:37:11:f1:b0:
97:bd:cf:6a:52:1c:f0:f2:9a:3a:ca:08:22:0b:a7:66:39:fa:
c3:2f:18:99:4e:2a:bc:69:f6:e1:7a:53:09:cb:70:07:2e:a2:
d2:fc:c6:27:f6:27:95:50:5b:aa:9d:07:a8:88:61:c1:48:60:
2b:d5:cc:29:b2:78:8b:b6:75:51:2c:35:6a:7f:b7:06:c1:20:
86:db:cc:40:2c:53:49:9c:be:0b:47:13:43:cc:7c:ee:93:90:
07:01:90:77:1b:43:f4:37:08:b9:a7:a4:55:32:55:18:4b:d7:
5d:ce:a5:a0:92:c3:c7:2c:1a:8e:2d:4f:54:7e:a7:69:09:66:
ce:76:c9:27:8d:a5:8d:c6:10:3f:0c:12:1b:32:1e:b5:e0:4a:
56:d4:cd:ef:03:1e:09:79:bb:7f:75:66:b3:24:63:75:cb:59:
0e:5e:dc:93:76:5a:88:8f:56:db:5e:b8:be:4e:30:a2:78:8d:
25:3d:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:08:48 2025 by rpki-client