Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf77e286-2b1d-361e-a555-28cbd4739836.roa
File: bf77e286-2b1d-361e-a555-28cbd4739836.roa (raw, json)
Hash identifier: H29uOe3RuSkXp76AsYHV1srGag3WYPQJjWM7GInPS+I=
Subject key identifier: FF:3A:C7:FE:77:D2:13:25:B2:1F:9F:7D:50:1E:CB:F8:79:5C:BB:4C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51EC7DBC8FA0BAFE68C20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf77e286-2b1d-361e-a555-28cbd4739836.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.197.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1e:c7:db:c8:fa:0b:af:e6:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f5e3d1ce-deaf-44e6-90eb-3ac5efd1f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:ce:86:f6:10:fe:aa:d5:6d:ee:52:d4:5e:
f5:ae:d1:97:9d:30:fe:8c:83:f7:3b:a6:0c:bf:aa:
53:82:63:66:c4:76:75:5b:f6:53:bf:24:0c:a2:2c:
43:04:39:66:cd:81:86:d2:8f:01:9f:0d:ca:bb:93:
0b:eb:1b:3d:48:03:9f:31:c6:91:5d:5c:17:82:21:
56:7c:9b:98:17:02:c3:92:e0:64:9e:16:49:1a:6f:
7a:69:95:dd:1b:27:f0:ab:5e:e0:fa:10:03:ce:b2:
68:47:04:9c:a8:c1:2d:02:a7:1e:94:f7:ec:fa:8b:
20:06:1f:0f:eb:23:70:5d:9a:29:c7:85:de:0b:93:
47:db:0f:5f:53:60:9b:62:bf:e1:cd:d6:06:7e:fc:
7b:71:d7:f3:61:a0:e2:af:9e:45:cc:b9:5a:fe:7f:
9e:0b:e1:3e:cd:b8:c3:25:b1:2c:63:b1:33:0f:75:
01:97:a0:52:dd:c2:3e:74:ec:7a:bc:75:bd:fe:f3:
a9:c5:88:9a:fe:5e:5d:66:a4:a4:0f:32:a9:23:31:
0b:a4:22:0e:1f:c8:33:22:a9:c2:bf:a6:c2:91:3b:
6b:55:a4:13:aa:ea:24:ab:5e:c7:0e:bf:d5:6d:57:
d9:f3:62:d4:a9:42:e5:72:79:80:7b:c3:7b:03:a5:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3A:C7:FE:77:D2:13:25:B2:1F:9F:7D:50:1E:CB:F8:79:5C:BB:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf77e286-2b1d-361e-a555-28cbd4739836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.197.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:f4:4e:7e:e6:ed:62:36:3e:98:4d:8c:9e:37:ca:90:80:29:
27:bb:f0:bc:17:dd:d2:46:6a:ea:7b:86:d3:1d:87:b7:d0:60:
b7:64:53:27:fc:8b:ba:48:fc:7d:62:ef:5b:37:01:e7:23:f6:
94:0f:f7:9e:90:32:de:b9:81:f2:7e:37:cd:ff:64:a4:3b:b5:
23:c8:db:0c:be:84:e0:7d:9d:8b:c5:f5:24:5c:e3:df:47:2e:
b7:87:40:61:1c:52:8f:50:a4:c7:98:9c:a0:60:b3:a8:f8:53:
fa:d1:98:69:cd:de:aa:c7:50:a7:13:82:af:d2:5d:3f:39:a9:
22:85:63:c5:68:ac:4a:f0:39:a4:6f:cb:59:b5:2d:fd:7d:34:
94:8a:5e:7f:b3:7e:e7:c9:88:8e:e3:b1:10:36:59:a0:47:b7:
0d:10:8b:3d:d3:f4:c6:de:0e:23:f3:6b:40:5a:2d:ab:61:ef:
89:85:5c:45:cf:f5:57:f2:b3:db:73:d8:3b:a5:fa:2b:19:ff:
d2:c0:47:a5:30:50:e1:cf:ee:a2:d5:36:25:15:55:a3:c5:dc:
17:06:f7:39:70:c7:e3:6f:cd:32:d7:c4:da:2e:10:46:80:9e:
03:97:50:d3:da:16:89:93:c1:b5:75:ac:4e:54:f9:49:58:09:
4a:d8:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:47 2025 by rpki-client