Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa
File: cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa (raw, json)
Hash identifier: OvE9l9dAf+G/f402QRusBwgmGO/QbygYAZYFP/b9jR4=
Subject key identifier: 4A:75:13:CB:2B:9C:64:83:85:43:CB:33:33:94:95:EC:6A:E3:8B:BD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5257D3A9429873086A590
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.189.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:25:7d:3a:94:29:87:30:86:a5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=551c31cf-8959-4806-8d32-50ab4334aab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:c0:e0:a7:04:ba:70:94:76:d0:85:0b:d6:
06:8a:f1:27:97:37:05:59:52:a8:6f:de:dc:fc:b2:
94:1a:27:03:65:5f:23:d0:35:c2:94:78:dc:49:78:
a9:07:ab:7a:86:22:86:9a:b3:19:50:cb:be:81:b9:
de:28:5f:55:fb:48:f3:05:4c:54:57:b1:58:53:a5:
8b:95:8b:03:ea:80:1f:49:4f:8d:ca:7e:3c:03:b0:
d2:1f:98:88:90:74:3f:cf:a6:30:69:28:57:23:5a:
9a:87:7d:95:62:77:e7:d2:88:ad:04:5f:d6:5b:43:
fc:45:8d:cf:6b:cf:d3:1b:d0:aa:55:d6:00:9b:ea:
1c:2f:37:9f:3d:aa:19:72:d1:9f:f7:4f:8c:8d:36:
03:65:2f:ec:27:b4:d5:29:9f:f7:c3:56:a9:bf:af:
02:8c:d8:14:a7:33:15:d1:46:48:ed:1e:f3:ac:5f:
aa:da:ba:39:3d:39:ae:7e:fe:3b:3f:6d:84:08:31:
68:ff:c1:8b:b4:60:3d:4c:41:1e:0d:55:bf:f3:5f:
8d:88:59:b2:3c:ae:43:67:b0:5c:2d:72:47:46:28:
b3:75:d5:d2:0e:46:0b:cc:c3:36:cc:b9:c7:fc:d2:
fb:a7:bb:a4:a9:c1:41:57:60:95:68:da:05:42:7c:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:13:CB:2B:9C:64:83:85:43:CB:33:33:94:95:EC:6A:E3:8B:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c0:b2:c3:74:a8:12:90:f1:fe:c6:5b:10:a9:76:9a:8e:26:
18:e9:89:63:c8:d1:2a:cd:f7:eb:61:9c:4b:c8:d5:88:5b:16:
c3:00:3b:28:55:a5:d9:57:3b:1d:98:61:7b:31:0b:42:20:3a:
50:30:f3:44:34:32:d7:8a:ab:4f:91:fa:9a:cd:7c:c6:d9:7e:
b1:e3:a2:78:c4:c4:8c:f6:1e:01:50:9b:57:c1:45:65:cb:5d:
1b:42:3b:26:e5:78:d9:d9:9d:7d:08:4f:1f:da:e4:bc:72:24:
8d:5f:bc:d8:50:cf:d0:1e:39:b0:fa:1d:57:dc:fd:63:62:46:
24:69:f0:f0:8c:ad:bf:26:dd:80:10:1e:9c:6e:93:a7:79:4b:
a4:ad:23:96:5d:6f:7b:dd:b2:9a:d9:32:1c:00:98:5d:ea:32:
7c:cc:f9:69:7d:79:c6:3d:73:18:a6:3c:33:26:88:40:8a:25:
b0:2c:e3:6c:78:5f:79:39:e1:84:52:78:f7:2f:d1:3d:14:0d:
43:01:a2:11:d6:79:09:db:23:81:b6:1a:22:6e:09:7c:50:c0:
62:e0:d3:65:76:7e:7f:d8:f2:af:2b:0d:7a:90:c5:ee:22:ca:
c0:60:2a:12:cb:53:89:38:0b:a1:9b:91:4b:08:f2:a5:01:ac:
aa:87:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:54 2025 by rpki-client