Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa
File: e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa (raw, json)
Hash identifier: 6K8H1WHEGTNdnMMAmwB5gxSoDeUvwRDXWV6o+SVh/vU=
Subject key identifier: 38:3F:99:0A:72:D8:E0:DE:26:54:FB:0A:DE:BA:FB:3C:1A:B4:30:FE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D47303F673176C9FC090
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.222.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d4:73:03:f6:73:17:6c:9f:c0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=c74711b6-5e51-422f-9f8a-6f3ab479224a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:da:83:54:a9:d9:84:0e:1b:54:75:9c:cc:
b8:a8:5c:ed:06:ec:ab:3b:57:b5:a8:13:85:22:c6:
3e:d6:a8:9a:1a:61:28:a5:36:c4:03:0e:ce:ff:89:
84:12:02:c8:94:a3:17:d6:58:fe:bb:14:a5:a1:db:
55:df:f5:4c:1d:b8:81:fa:04:28:23:05:14:c1:07:
1f:63:9b:ae:e5:be:18:57:97:e7:d0:5d:f1:56:49:
e7:ce:fa:30:f4:7f:61:6f:1c:e0:92:76:03:82:d6:
3a:bd:bf:33:d5:25:c7:2b:1a:ca:1f:84:f8:16:60:
95:a8:69:5d:58:9c:ec:b4:6e:b0:63:5d:db:da:1d:
8c:ce:2e:0e:ff:96:f3:af:3b:18:a3:5d:14:23:9d:
70:a9:93:bd:4d:19:02:dc:10:04:e6:ef:e7:7f:f3:
ab:be:f1:d7:27:2b:1f:6c:d4:4c:83:42:5b:30:6b:
7b:d8:43:21:57:64:97:2e:8d:ea:b4:65:17:9c:e5:
44:f2:f1:54:49:da:63:09:b8:f3:de:f1:92:e5:9f:
85:a2:f1:d8:d4:79:77:83:e6:51:a5:bd:fb:48:4a:
af:b0:e3:7f:cc:3a:d7:2a:73:06:08:1e:52:73:1f:
66:93:51:42:77:b3:fd:91:32:fc:3a:92:69:93:9f:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:99:0A:72:D8:E0:DE:26:54:FB:0A:DE:BA:FB:3C:1A:B4:30:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3424877-f6fb-3be0-a2e4-6c79d42ac903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:0c:0d:53:a3:88:42:15:50:ea:35:8a:dd:8d:c5:01:82:5d:
4b:76:29:b3:dd:c4:51:06:b8:f3:f6:15:3a:aa:04:25:5a:fe:
a1:2c:46:9f:84:86:3d:19:0a:1f:ab:4f:02:73:5d:57:db:9e:
b4:64:1c:b6:e0:ef:c8:81:17:66:1a:23:bc:30:d6:61:e7:de:
44:91:06:78:ae:d6:36:41:09:e9:4e:cd:69:28:bd:7b:2e:4d:
c1:d4:b0:14:44:59:22:df:68:55:bd:e9:1e:15:1d:70:e4:c9:
85:ad:c5:c5:ce:11:ee:2b:7e:be:68:4d:13:03:04:0c:7e:76:
b8:e4:8e:e9:03:11:08:4b:91:24:71:24:61:84:b8:9a:6b:35:
ce:fd:19:22:99:fe:6e:7a:84:5f:17:54:31:4d:de:8f:2b:1b:
76:e9:05:f9:d9:22:f9:a5:93:9e:b9:41:2a:d4:53:99:1c:ff:
5b:06:45:8b:ec:e4:89:69:f0:0b:52:60:ea:2c:a1:e0:9a:8f:
d3:a3:37:cd:c2:fd:5c:17:f7:0a:05:69:34:dc:bb:a2:36:6d:
aa:48:66:13:ae:6a:42:e3:7c:2a:5a:a4:14:37:c1:9d:dd:b9:
5b:37:93:6f:68:f7:44:fc:29:aa:31:41:1f:96:8b:35:31:ce:
22:b9:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:28 2025 by rpki-client