Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2046b29-ee78-352c-be68-fa9220f3e10f.roa
File: e2046b29-ee78-352c-be68-fa9220f3e10f.roa (raw, json)
Hash identifier: gt3zcd0RLNOn4mMMm17QO0zykJvzYA8Lo7EP6duX+kA=
Subject key identifier: 51:E9:9F:56:03:A9:06:5C:77:AC:C8:48:50:FC:DC:7A:52:F9:BC:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F508AC5942D3144B14BE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2046b29-ee78-352c-be68-fa9220f3e10f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.203.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:08:ac:59:42:d3:14:4b:14:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=40a8dd88-a667-4b87-9ec0-5e0914793f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:e7:40:0e:34:9b:5b:0d:c8:42:45:c0:8b:
e1:83:55:d3:10:e9:1f:9a:df:b4:16:68:66:b8:37:
0d:4b:95:d2:f6:42:9f:a8:7c:f3:62:76:98:3e:d1:
63:b7:1e:89:58:2b:f5:61:b5:f5:38:5a:66:c4:30:
b3:93:10:9f:2d:34:0e:a1:0e:6f:3c:a8:72:76:26:
0d:97:06:97:ed:52:64:9b:55:e9:6e:fa:2b:b5:9a:
b7:0c:68:91:e1:c1:a6:d3:2a:63:d6:31:f4:a9:92:
ba:eb:36:f0:91:0a:db:36:80:93:4c:b3:f1:89:31:
5e:3a:fb:14:6d:60:69:06:1c:4e:41:05:44:30:b1:
30:45:72:34:50:3c:75:20:4a:91:b5:0d:73:4b:18:
ec:91:8d:32:d2:f0:54:0b:e0:8f:06:6f:de:ea:41:
59:fe:62:8b:ec:b5:82:a2:aa:8a:9a:01:ac:dd:f9:
5a:1c:cb:6c:d7:3f:e5:af:9f:99:a9:c3:82:a2:f8:
ca:5d:7d:65:50:13:90:b3:a1:9b:4f:30:4a:f5:16:
e1:bc:14:33:a4:26:ad:b4:9b:2c:71:02:31:07:64:
d4:e1:e5:0a:60:5e:fb:5d:4c:11:12:69:db:04:7f:
22:84:a4:16:d2:3a:c4:06:23:4b:10:ed:bc:98:56:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:9F:56:03:A9:06:5C:77:AC:C8:48:50:FC:DC:7A:52:F9:BC:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2046b29-ee78-352c-be68-fa9220f3e10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b2:85:70:78:b1:83:c3:e0:68:32:52:c4:55:c7:1a:7c:15:
36:3e:93:cc:94:ea:3e:ee:81:ad:8c:60:83:1e:1e:8c:17:66:
68:3f:0a:9e:bd:cb:58:43:73:de:18:64:b1:73:c3:2b:82:85:
e6:fe:bd:0a:ff:bc:62:cf:9a:3b:e9:64:5e:78:d2:b9:73:25:
64:1e:c0:f8:dd:ad:05:55:dc:d7:74:00:99:34:4a:ae:f9:e5:
4b:5e:8a:09:94:51:d6:61:36:d3:47:f8:16:83:f8:af:e7:c9:
70:a6:fd:76:0e:c8:3b:ef:12:48:3a:b5:d4:28:96:33:7e:7c:
b5:9c:5a:f8:8d:87:0a:3b:74:f2:29:df:8e:1d:37:9c:6f:c8:
80:bf:c4:45:50:9e:ac:a0:2c:d3:35:ed:34:84:88:26:18:4c:
6b:27:7e:9e:01:27:33:48:56:c9:a0:2b:6d:ea:bb:ef:eb:c8:
d7:13:ee:50:f0:e5:25:20:62:d3:fe:7e:6f:fd:0e:7e:e9:fc:
80:ef:5f:75:75:7f:e0:83:e6:be:ce:10:91:c9:e3:1c:c5:8d:
7c:8f:a3:bc:2e:7e:cf:ab:6b:4a:47:b9:07:5b:0c:32:0c:ee:
bb:88:47:e3:1a:a3:2a:08:81:0e:1d:b4:7d:a6:90:1c:f4:89:
00:82:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:42 2025 by rpki-client