Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa
File: dd35f63d-34eb-34a9-9b70-5091213e41cf.roa (raw, json)
Hash identifier: Ska30zx9M8RdKEmtzhGNSDIyMLpKXG1rGwmr5YyOnUA=
Subject key identifier: 39:E3:62:FF:42:BD:75:17:C1:C7:16:D9:B4:29:F1:84:8F:A2:E3:32
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51719262DCB1668980A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.239.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:17:19:26:2d:cb:16:68:98:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=519619c6-032f-42a9-9cc3-82107015457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:78:4c:5b:90:2b:f9:00:ff:7d:d8:01:8c:
7a:32:27:cc:39:c1:bd:48:32:50:26:6b:64:8b:ce:
f2:1a:91:32:74:fb:6e:7b:45:a4:42:0e:75:08:80:
3d:75:8a:c2:0a:fe:90:0b:92:f3:4b:79:9f:99:4e:
5c:a7:09:12:7b:80:51:db:87:77:ab:68:1f:5a:4a:
f1:96:fc:6c:f0:8e:78:d0:fa:65:c7:e5:4c:ea:7c:
d7:db:20:a6:20:06:58:f1:ad:10:1b:da:e4:62:d8:
26:19:e1:d2:e7:b5:b1:66:08:d7:f9:2f:27:3d:5c:
2d:78:73:7e:79:b9:e0:06:4d:37:52:a2:a2:34:f7:
07:d7:bc:d8:d9:10:05:16:26:03:29:a8:20:95:16:
ba:eb:08:6d:6e:61:6a:52:d0:22:43:ed:fe:a4:bb:
4e:3d:02:27:b2:df:19:31:96:8b:6c:c6:54:63:61:
23:36:4b:3a:ad:bb:63:fc:89:d1:46:b2:3f:f0:c3:
bf:0f:df:85:84:ab:c2:ed:68:94:91:b5:8c:bf:8a:
d8:3f:c5:ab:37:a1:9a:dc:97:5b:ed:12:b4:48:49:
2e:8e:01:c2:a5:3a:3e:70:a5:eb:4a:2f:a0:1d:fa:
17:f1:a9:b4:d1:e2:9b:5c:6c:2a:55:16:fa:5b:9a:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:62:FF:42:BD:75:17:C1:C7:16:D9:B4:29:F1:84:8F:A2:E3:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd35f63d-34eb-34a9-9b70-5091213e41cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.239.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:20:81:cf:d0:3f:dc:ae:a9:b8:b3:03:82:f1:14:fa:d5:f9:
46:9e:d1:f3:e9:20:da:97:2e:77:3f:30:ab:81:f3:ce:0e:bb:
1a:7b:49:7f:39:de:73:7e:df:eb:ce:45:9e:4e:fb:e5:ae:ed:
fa:f5:85:7e:84:6f:cd:6d:7f:72:22:92:a5:7e:da:06:21:92:
f6:8d:49:0f:00:7c:96:60:12:5b:9e:83:ed:52:c5:68:11:84:
18:8d:ca:01:77:36:3c:f3:56:0d:24:b9:1d:d3:0a:1d:8d:e4:
bd:14:e7:d3:21:dd:2e:da:c7:c3:4a:c0:b0:fa:65:61:b6:b7:
f0:30:f6:a7:16:6f:70:54:ee:1e:96:11:96:b0:0e:34:4d:bb:
1a:fd:8f:27:86:d7:75:fd:f1:66:ec:56:e9:a3:9e:d3:f9:b2:
f1:31:36:c6:56:e3:33:32:e4:f1:22:e5:d3:5e:d7:b7:f1:73:
44:9e:09:6b:52:ea:3f:df:31:1d:79:94:a9:b6:7c:60:e4:64:
aa:6c:b9:bf:02:89:13:5b:64:35:08:ec:43:09:78:b9:81:42:
07:d2:3c:c8:56:d7:67:8e:b2:3d:40:de:50:6f:4f:7e:8c:f8:
82:9c:c5:46:93:53:67:aa:de:42:27:97:d9:9a:d0:d4:d7:6b:
e6:99:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:11 2025 by rpki-client