Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa
File: cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa (raw, json)
Hash identifier: Fn2KYFDvspIUxm6uvZCqTn9T7QPjGOyXwQMWZc5kbSY=
Subject key identifier: 9F:1A:34:2D:F3:06:CC:56:94:A1:4B:51:9B:97:74:9F:68:60:81:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F506577F8632FEF8CACA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.202.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:06:57:7f:86:32:fe:f8:ca:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=918ac389-3e43-42d3-9e2e-5862cd4b4f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:99:b4:66:9a:8a:7f:55:47:25:b5:19:22:
db:29:d4:f7:3b:70:2c:07:cd:e5:77:7d:34:26:5b:
e2:3a:58:37:eb:2b:e5:6f:17:88:c8:82:86:3f:5c:
d5:c5:21:73:9d:68:3d:f8:3a:4e:e9:89:56:d9:7a:
f0:45:f3:51:7d:9e:0d:48:5e:12:93:c3:97:00:f1:
9c:dd:44:2a:15:88:43:fe:98:2b:09:c0:a9:24:a5:
0a:05:b2:3d:86:bf:55:87:1b:f3:f8:b6:d7:4d:73:
2c:a5:2e:b3:a1:4a:4c:ea:bf:e2:82:f5:22:ed:de:
8f:19:de:64:af:20:39:54:1e:5c:95:56:bf:d6:e3:
88:61:bd:3a:bd:93:ab:ec:70:62:4a:2b:fe:28:10:
d0:8c:c1:a4:31:1c:3f:c6:84:1e:2c:64:12:10:f3:
a1:00:03:ba:81:c4:b8:7a:bb:36:44:b3:cd:71:ee:
55:24:24:89:32:00:f2:1e:06:3c:eb:bd:55:ff:df:
a7:61:c5:be:f1:c4:9a:52:87:1c:f2:41:09:06:01:
db:6f:4b:4a:02:f8:01:f8:07:3a:7e:6b:4a:7a:74:
ac:33:80:36:5c:75:dc:27:df:57:85:5b:30:b1:46:
39:7f:fb:70:cd:05:27:40:53:12:3a:da:e3:5d:82:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:34:2D:F3:06:CC:56:94:A1:4B:51:9B:97:74:9F:68:60:81:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:1c:fd:79:18:7d:7f:2d:53:52:7b:11:1c:b5:b3:4a:b8:c4:
eb:fe:c1:7e:f8:0e:d8:93:bc:05:2e:fe:f5:e5:54:60:34:8f:
54:0d:c6:f8:7a:1f:10:4f:c7:a7:2c:66:4b:d9:aa:9c:58:e5:
a9:fd:61:c4:6f:01:6b:e9:03:76:51:c8:b1:b0:18:b4:61:47:
66:84:5c:b4:db:46:6d:50:48:0e:1e:d7:55:b9:98:51:5c:04:
a6:29:c3:77:a5:a7:bc:18:a7:f1:fd:9c:d3:ad:d5:03:fa:93:
35:a4:98:ae:57:20:7d:3c:0c:9f:25:8d:3a:85:96:d1:15:76:
83:3e:3e:72:ce:86:c4:10:60:35:f6:d3:34:fc:f9:c4:61:90:
ca:61:8a:d3:a9:f6:eb:51:3f:67:3d:13:59:e4:89:a1:56:a9:
2d:b8:f9:cb:b1:4e:a3:ff:0b:7f:87:41:0c:8b:0e:be:e6:9c:
61:86:fe:41:f4:30:f5:18:66:17:ca:51:a0:fe:50:85:d6:16:
3d:30:fa:f9:ed:0f:f2:00:e6:12:ef:94:27:53:e6:cd:b0:cc:
d8:1e:d6:55:e0:c9:49:4d:31:0e:5c:e6:2f:c0:dc:9d:70:46:
94:14:c5:aa:f9:eb:9c:e8:8d:75:2b:d5:05:2c:b3:92:f3:39:
b3:8e:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:41 2025 by rpki-client