Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c18701c4-1b4c-353d-a804-66acb4e9b27d.roa
File: c18701c4-1b4c-353d-a804-66acb4e9b27d.roa (raw, json)
Hash identifier: eShCb3XMM1IBN0Ft+IcQsnZcH4kPqTwxP/wLpDZYJ6E=
Subject key identifier: A0:86:B5:1E:76:BC:5F:34:F1:41:D5:86:10:09:FA:0D:C2:58:D8:92
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F55BD47C29F1EA362CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c18701c4-1b4c-353d-a804-66acb4e9b27d.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.245.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f5:5b:d4:7c:29:f1:ea:36:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=69026916-fd34-40aa-a16c-621eec4b86c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:06:6c:60:7c:68:24:a4:47:03:67:d6:e4:
4a:33:b8:c7:c5:8d:d9:1d:ea:9e:34:e4:d0:96:62:
e9:fc:00:23:15:95:68:d6:55:13:c1:f9:62:8a:0b:
14:fc:9c:9f:05:9f:e0:2e:9f:ca:ef:c8:25:ac:7a:
39:0d:51:01:c5:6a:9a:80:05:c8:fb:b1:b6:e0:a5:
68:3d:71:e3:b1:ce:fb:69:05:65:73:a7:e5:85:a3:
a8:ff:4b:4d:9b:29:fa:f9:6e:72:7e:a4:6e:16:dc:
7c:33:63:ad:28:b3:80:97:48:d8:e4:fc:a9:f5:cc:
52:e1:ed:2d:d8:80:de:08:58:af:61:0f:26:8b:2e:
43:84:93:ab:92:6d:1c:9e:18:34:8d:05:28:6a:71:
78:05:8b:bb:3e:5c:fb:ce:0a:8d:07:1b:93:24:23:
d0:89:e4:e7:86:4c:61:54:4d:7c:a2:27:34:47:12:
98:98:c0:fb:40:9a:9c:48:42:9f:57:03:f7:1b:ad:
24:c4:e9:8a:e0:75:e1:5b:2c:fb:19:87:4f:02:ba:
30:28:54:28:1c:3e:33:ff:ba:a8:c4:b5:90:af:bf:
16:c5:9c:95:a3:0d:0a:54:30:a3:9d:e0:b6:b0:f5:
2f:41:7f:3e:96:8e:5e:0e:cf:85:6a:17:86:b4:a3:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:B5:1E:76:BC:5F:34:F1:41:D5:86:10:09:FA:0D:C2:58:D8:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c18701c4-1b4c-353d-a804-66acb4e9b27d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:eb:67:e1:cc:21:5a:70:5b:40:52:88:be:b4:a6:20:38:d2:
ec:54:d9:b3:3d:91:24:1d:4c:e9:53:85:1d:cb:f1:9e:f8:77:
d6:f1:8b:d8:13:a2:b3:b4:c3:b2:00:44:33:c5:d7:bd:d5:d6:
03:ac:e2:f0:4d:e4:ab:6a:19:d2:b8:b3:b9:0a:65:7d:00:17:
67:4e:1e:e2:10:e1:31:58:b7:9d:6c:c3:07:6c:64:89:72:2c:
d0:bd:61:19:16:7b:ac:6f:e8:88:d9:15:e9:f9:44:91:8f:14:
42:23:d1:f3:cf:ae:4e:79:46:7e:ce:b0:2e:22:b8:ff:11:2c:
08:fd:33:34:3b:a0:63:0b:c5:0f:2c:86:39:b8:a6:b0:ca:50:
37:0e:d8:b0:f5:b1:4b:cb:45:8e:87:8d:03:c2:d0:19:f5:a7:
c2:55:9e:02:29:e7:fe:9b:f1:eb:e2:14:a4:a1:19:2b:51:3c:
89:86:b1:a6:99:44:3c:7b:d9:5b:92:31:d9:8a:e3:86:12:e3:
f4:74:3f:6c:96:34:39:15:be:af:b2:9e:66:0d:42:fd:84:d4:
da:72:60:c8:01:48:e7:3f:e9:c8:2b:5b:86:a7:40:9f:4e:75:
62:4a:2a:b5:b7:c1:5c:d8:de:c1:87:7a:37:36:b3:42:6d:4e:
bb:1e:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:09 2025 by rpki-client