Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa
File: ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa (raw, json)
Hash identifier: SK9UftkxrDMK9wYABRNicfPw4KiIrdnXD5rYaljvBYI=
Subject key identifier: 0A:85:F8:2A:2B:14:74:72:5E:9C:3E:6D:F4:76:67:46:E6:A6:31:1E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F4919A8A7E7399592558
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.236.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f4:91:9a:8a:7e:73:99:59:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f553fcb2-425c-4bca-80df-7c2cff41dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:51:25:71:93:05:76:e3:0f:4b:82:46:a9:
41:20:44:61:24:df:d9:ec:41:3a:e6:0f:cc:08:7f:
c4:f5:22:c6:01:96:8d:94:55:48:ca:6f:b6:46:f2:
57:c1:ac:eb:3e:29:10:6e:65:98:b8:6d:3d:58:9b:
4e:62:56:b4:1b:ee:b3:60:4a:ce:39:10:0f:c3:e5:
c9:be:54:b5:72:d3:81:8d:de:b0:6f:bd:b0:9e:99:
b7:70:6d:65:4a:48:e8:af:53:65:d3:1d:a4:9d:8e:
dd:29:3d:7d:d5:de:e2:ec:60:1d:61:2b:59:c4:6d:
49:35:53:7c:8c:17:f6:a5:a7:6d:0e:4a:39:f0:3b:
6e:15:b2:de:21:1b:0a:8f:2b:9c:06:7b:91:35:9e:
b3:0a:e1:e2:d3:83:bc:c6:4e:40:b8:c5:85:5c:9e:
80:ae:2f:ec:b6:e5:65:38:56:83:ca:94:12:b4:04:
2e:b2:5a:b1:f6:b0:d2:33:89:9b:87:d9:33:df:29:
8a:4f:c2:10:19:6d:f2:09:94:00:4e:7f:b3:52:1c:
25:01:ec:fe:e6:f8:e1:71:5a:f3:51:e1:e8:ae:8f:
18:c3:c8:7e:02:31:a6:7b:50:3f:e2:5e:08:79:2f:
73:d4:ad:fe:61:26:cf:e9:5b:78:c4:52:04:63:c5:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:F8:2A:2B:14:74:72:5E:9C:3E:6D:F4:76:67:46:E6:A6:31:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.236.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:cb:23:5f:e9:14:45:45:05:1c:8e:4d:1a:28:e1:6c:ed:90:
64:84:d9:32:f5:67:b3:a9:8c:54:51:b8:4c:2c:b9:31:f0:47:
81:e4:3e:d9:bb:23:c4:62:95:4a:5d:3c:8f:88:97:14:a0:41:
04:48:07:a7:7b:a6:cc:98:6a:3e:ed:02:40:1b:d3:ab:de:99:
d4:30:ff:42:93:73:4b:c4:5b:0a:af:2e:09:f0:9a:43:98:d3:
36:42:b8:f2:71:04:a0:c3:bd:56:c3:fa:67:12:0d:c4:dd:0b:
e0:2e:bd:cd:f1:ea:f1:2e:4a:4f:8f:47:a9:cf:f0:ae:b6:3d:
0f:ce:bc:c3:f5:3c:36:f0:b3:cb:db:6b:01:67:e9:f1:01:53:
d4:04:19:cc:9f:04:57:9b:42:2d:42:63:ab:1c:e9:c8:f4:fa:
04:95:41:b5:bb:51:f1:bd:d7:3f:32:2e:c7:50:ea:e5:20:24:
35:22:05:33:41:2e:80:a6:ad:f1:fa:52:c3:3d:2f:db:22:57:
c0:c5:85:ad:06:8b:3f:93:80:63:e3:d7:7a:63:26:8c:ed:eb:
57:ae:d2:b9:db:90:a6:ec:33:53:59:db:57:7b:24:a3:b3:29:
39:d6:47:b8:b6:21:0e:e5:f4:7d:08:af:f2:e3:68:db:6a:a5:
9f:c0:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:09 2025 by rpki-client